Skip to content

Commit 553f13e

Browse files
mgornyAA-Turner
andauthored
Apply suggestions from code review
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
1 parent 4b6f0f3 commit 553f13e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

peps/pep-0817.rst

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -228,7 +228,7 @@ the burden on the maintainers to run separate infrastructure and to find
228228
and use non-standard features such as local version segments present on
229229
an index.
230230

231-
**Induced Security Risk:** This approach has unfortunately led to supply
231+
**Security Risk:** This approach has unfortunately led to supply
232232
chain attacks - more details on the `PyTorch Blog
233233
<https://pytorch.org/blog/compromised-nightly-dependency/>`__. It's a
234234
non-trivial problem to address which has forced the PyTorch team to
@@ -365,9 +365,9 @@ the version that the software will run against, which requires building
365365
without build isolation. On the project side, it requires hosting wheels
366366
separately.
367367

368-
**Induced Security Risk:** Similar to regular source builds, this
368+
**Security Risk:** Similar to regular source builds, this
369369
model requires running arbitrary code at install time. The wheels
370-
are downloaded entirely outside package manager's control, extending
370+
are downloaded entirely outside the package manager's control, extending
371371
the attack surface to two separate wheel download implementations and
372372
preventing proper provenance tracking.
373373

0 commit comments

Comments
 (0)