01:37
2026-07-29
redmonk.com
ai-agents
Modern Software Registries Are a Trust Service
Public software registries such as npm and PyPI are converging on trust machinery—trusted publishing, short-lived credentials, and provenance—in response to a wave of supply chain attacks, including t…