What's missing to have reproducible builds on PyPI
While writing the section of my 2026 Python Packaging Council (PPC) nomination on secure supply chain, I realized that one thing related to having a secure supply chain that we lack is a defined way to perform reproducible builds. The reason I like the idea of making reproducible builds work
Summary
The piece discusses the current gap in establishing reproducible builds for Python packages on PyPI, highlighting its importance for a secure software supply chain. It also reflects on the author’s insights while preparing for a nomination to the Python Packaging Council.
Comments (4 of ) ⌛