PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python

Jacob Mahon, Chenxi Hou, Zhihao Yao

Python software development heavily relies on third-party packages. Direct and transitive dependencies create a labyrinth of software supply chains. While it is convenient to reuse…