I built a CLI to verify PyPI package attestations before installing packages

Python developers install packages from PyPI every day with pip. Most of the time we trust that the...