Spam #495

That is a good call out, I should definitely add something around what kinds of result are raised in the different steps.

I think in terms of the malware types of scans those definitely have to be per file just given that iirc there is a 14 day window for file uploads to a given version as of now. Since the primary goal of this type of scanning is to eliminate as many supply chain attacks as possible.

Originally posted by @cjames23 in python/peps#5070 (comment)