Always compute SHA256 for remote distributions and add PyEmscripten platform (PEP 783) support for browser/WASM Python packaging.
Summary
SHA256 verification on all remote distributions hardens supply-chain security by default. PyEmscripten support unblocks Python packaging for browser environments without manual verification workarounds.
Why it matters
SHA256 verification on all remote distributions hardens supply-chain security by default. PyEmscripten support unblocks Python packaging for browser environments without manual verification workarounds.
Implementation verdict
Drop-in upgrade for existing uv users. No breaking changes; CPython 3.15.0b2 support is additive. Worth updating now if you manage Python distributions or target WASM environments. Fixes cross-platform installation edge cases (Windows on non-Windows hosts).
Sources
Dev Signal
Get briefs like this in your inbox — free, 3x a week.
100+ sources compressed into one 4-minute read. Ranked, cited, implementation-ready.