In this quiz, you’ll test your understanding of Supply Chain Security for the Age of AI-Speed Exploits.
By working through these questions, you’ll revisit how .pth files and sitecustomize.py run code during normal Python startup, how to inspect startup hooks without triggering them, what lock files and hashes give you, and why a dependency cooldown doesn’t replace an audit.
You’ll also review how to keep AI coding agents from installing packages unchecked, why long-lived tokens are risky, and where Trusted Publishing reaches its limits.
[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]
