Dependabot's now a month late on Python and Go CVEs
Since May, Dependabot's taken a median of 36 days to pick up new Python and Go CVEs from NVD, and criticals are no quicker.
#python
2 posts tagged python. Or see every tag.
New Python packages picked hatchling, not uv_build
Gentoo asked people to stop using uv_build. Hardly anyone does. New PyPI projects doubled, the extra mostly picked hatchling, and so did every model I asked.