Supply chain security is crucial to the overall security of package managers, which are a major attack vector of information systems. Today, we are pleased to announce that mamba has gained the ability to cryptographically verify package and repository signatures, and includes an implementation of the TUF protocol (The Update…