python-tuf/docs/papers/package-management-security-tr08-02.pdf