GitHub Dependabot and PyPI implement a Dependabot update cooldown and release file restrictions to mitigate software supply chain attacks. #GitHub #Dependabot #PyPI #Cybersecurity #SupplyChainSecurity