GitHub and PyPI are implementing new measures to better protect software developers against attacks via the software supply ...