SECOND MEASUREMENTS · THIS WEEK

This week: 26 Oct to 1 Nov 2026

Every change to a paper’s status in the last seven days, from the same record as the feed, with what we launched and corrected. All papers: measurements · round trips · open clocks.

New papers

• 31 Oct SM-022 conda-forge availability: the docs say “around 15 minutes” after upload; in a week, 624 of 634 single-file versions took longer just to be listed by the CDN’s sync, median 36 minutes

Other

• 26 Oct Note Data note for Seth Larson (PSF): of 797 new malicious PyPI projects, 27 Apr to 19 Oct, the median was 59 minutes from upload to takedown; 44 flagged ones still installable
• 26 Oct Note Data note for Daniel Stenberg (curl): curl's own ratings next to CISA's CVSS for 141 curl CVEs since 2021; CISA puts 55 at HIGH or CRITICAL, curl 3
• 26 Oct Log Our witness now verifies post-quantum (ML-DSA-44) log signatures, tested on the Chrome MTC test CA's log and Google's git-ratchet

Generated 2026-11-01 06:15 UTC by weekly.py.