The PyPA has voted to accept two new member projects: pypi.org/p/pip-audit & the corresponding GitHub action, github.com/pypa/gh-action… 🎉
pip-audit audits Python environments and dependency trees for known vulnerabilities, and the action lets you easily run these audits in CI.
The Python Packaging Authority pypa.io maintains much of Python's distribution toolchain, and anyone can join.


