Noah K @coderanger.cloudisland.nz.ap.brid.gy · 08/12/2025Checking that a PyPI project has a release history going back before 2021 and thus probably isn't an LLM-hallucination-driven supply chain attack vector is basically our equivalent of low-background steel. 000