GitHub and PyPI are implementing new measures to better protect software developers against attacks via the software supply chain. Both platforms are ...