You will run into this problem when developers from "fun" places like Russia and... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		KRAKRISMOTT on May 23, 2023 \| parent \| context \| favorite \| on: Removing PGP from PyPI You will run into this problem when developers from "fun" places like Russia and Iran try to sign packages since they are sanctioned by GitHub and other services. I am not sure about Python but quite a few high profile JavaScript libraries are by Russian engineers.

arp242 on May 23, 2023 [–]

> they are sanctioned by GitHub and other services

They're sanctioned by various governments around the world, not GitHub.

I think this is an important difference, because GitHub doesn't really have much choice in this.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact