python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
Old good time? 🤔
«Finger Protocol Malware — Python RAT via a 1970s:
The finger protocol is older than the web, disabled on every server that matters, and still a working malware delivery channel on a default Windows install. Here it planted a Python RAT that was alerting the whole time. One genuine compromise, drowned in thousands of benign look-alikes, invisible until something cut through the noise»
📧
Discovered a segfault in #FastAPI very strange, does only happen on MacOS with Python 3.14.0 ALPHA
The reason was that I was unaware that I ran an alpha version of Python 3.14.
FastAPI segfaults with Python 3.14.0 on MacOS · fastapi/fastapi · Discussion #15819
Holy cow, remember to clean your #uv cache from time to time, folks 😅
UPDATE: Seems to contain some links, deleting the cache only freed like 9GiB, but still...
#Python
Ich bekomme Spam mit Absender "support@python.org". Gnah! #alleskaputt
A cool recent #Python change is PEP 783 <#pyodide
TIL " #Python, for example, is a popular programming language that is famously smooth at handling integers of any size. If you peek into Python's underlying source code (search “Karatsuba” here)"
Python one-liner to generate a random string (takes one optional argument for length – default 16):
python3 -c 'import secrets,string,sys;print("".join([secrets.choice(string.ascii_letters string.digits) for _ in range(int(sys.argv[1]) if len(sys.argv)>1 else 16)]))'
Can be set as alias in bashrc/zshrc, e.g. via:
alias rand="python3 -c 'import secrets,string,sys;print(\"\".join([secrets.choice(string.ascii_letters string.digits) for _…
My credit card details seem to have been cloned. Fun fact: I only used this card to buy a few Kindle books, donate to the Python Software Foundation and pay to reserve a seat with British Airways.
So, which one do you think leaked my card data?
Or is there any other way some asshole was trying to buy shit in the US with my money?
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
from my link log —
In Python 2, node.example.com is an IPv6 address.
https://tuckersiemens.com/posts/node-example-com-is-an-ip-address/
saved 2020-12-30
#Steady #Klimacrew
#BahnMonitor-Projekt: 3. Klappt der erste Zugriff auf die Bahn-API?
Im nächsten Schritt wurde die API-Abfrage getestet udn geprüft, ob die zurückgelieferten Datenstru…
I wish #mypy would slow down with adding new features to mypyc, and instead focused on fixing the train wreck that mypyc is right now (since 2023 at least). Like, if your code crashes hard with assertions enabled, then it's broken, period. Ignoring proper testing and shoving the issue under the carpet doesn't make it right.
#Python
📋 #ClaudeCode ships with a built-in cron scheduler. #Codex CLI does not. So I built one myself — one skill file plus one #Python helper, no daemon, no service, no queue
I received a spam mail from python.org - with a valid DKIM signature. Should I report this somewhere? ... @…
heise | Webseiten intelligent auslesen: Smarter scrapen mit Python und KI
Mit Python lassen sich Webseiten scrapen. KI macht den Scraper flexibler: Sie erkennt Inhalte auch dann, wenn HTML-Strukturen oder Formulierungen variieren.
What are we using to package up Python application & dependencies into a single distributable file now?
I'm thinking of bundlers like RollupJS.
PEX? Zipapp? Docker image? Trying really dang hard to only use stdlib and shipping a boring wheel?
#python #packaging #askfedi
It's 2026 and :python: #Python's standard library *still* does not have a flatten function? 🤨
(Yes, more-itertools, that's not the point)
#Steady #Klimacrew
#BahnMonitor-Projekt: 2. Welche Architektur sollte der Bot haben?
Bevor es ans Coden geht, ist etwas Grübeln über eine sinnvolle Gliederung der Module ratsam. Wie sie…
My bike riding has been poor this year, due to spinal stenosis and then spinal surgery in June... but hopefully the numbers will go up for the rest of the year.
(And who knows? Maybe I'll update some of the Python code that generates these.)
#bikeTooter #python
TFW your client decides to convert the whole codebase from Python to C because of “performance”, but nobody on the team is well versed in C .
Apparently it won’t be a problem because “Claude knows C ”
🤦♂️🤦♂️🤦♂️
This week on #ProFed: emoji reactions are done. By far the biggest rabbit hole yet - the kind with Monty Python killer rabbits and three dragons inside: FEP-c0e0, Pleroma and Misskey, all disagreeing with each other.
1/4
I received a spam mail from python.org - with a valid DKIM signature. Should I report this somewhere? ... @…
Nature publishes a peer-reviewed paper alleging that Microsoft's 2025 quantum breakthrough claims were based on "basic Python errors" and data cherry-picking (Thomas Claburn/The Register)
https://www.theregiste…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
Had to hand-edit a python library source to get offlineimap working. Backwards compatibility has no priority for python developers, useless behaviour, useless programming language.
Final preparations for tomorrow’s BBQ for all Python user groups in Berlin @…: https://www.meetup.com/python-users-berlin-pub/events/314905083
The state of #Python ecosystem right now: almost everything is slop. Some projects are complete vibe-coded slop (autobahn, chardet, cryptography). Some projects are disguised slop ("Coding agents shouldn't co-author themselves.")
There is only a handful of human projects left (Flask being one bright example). And they're being killed. They're being killed by the neverending slew of slop pull requests. They're being killed by all their dependencies becoming slop. They're being killed because this whole ecosystem has became such a complete cesspit that you have zero motivation to do anything.
EDIT: and honestly, this is only going to get worse. When you kill the incentive to work on projects, you only get more slop. Maintainers give in, and more projects become slop. Or they give up, and projects get forked unto slop.
#NoAI #NoLLM
#Python #uv users on #Debian: I've been using this setup:
apt install extrepo
extrepo enable uv
apt install uv
That worked perfectly for all local users using standard Debian package management …
( 🧵 1/N: started thinking I would just post a little amusing thing, and...it turned into a mini essay on knowledge, students, teachers, and education. Did not see that coming...)
I may have overestimated my upper-division CS students...
I'm teaching a junior/senior-level course on the foundations of AI. We're using Python, and there's a very simple starter homework assignment to get students to work through the logistics of submitting their code.
Yesterday I was…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
🔧 The backend is #Python-based on top of #pipecat, the UI is #TypeScript. The architecture is modular so components can be swapped, and
Simple but effective control to help prevent abuse of your business network: disable the remote debugging feature of Chrome and Edge. It disrupts the C2 capabilities described here (but used in other attacks as well)
Look for these settings:
RemoteDebuggingAllowed > Disabled
(Intune: Microsoft Edge > Allow remote debugging)
#cybersecurity
Zero days since #CPython broke the extension ABI at the very last minute after asking everyone repeatedly to test prereleases. And of course they don't bother tracking ABI changes in any way, so they could at least give people heads up that important pieces of their system will start segfaulting after the upgrade. All they can offer is a knee-jerk response of "we never promised ABI stability".
And yes, this is a huge PITA for #Gentoo users who opted in to helping out.
https://github.com/python/cpython/pull/152448#issuecomment-5016129511
funniest thing in #LLM news. One man's month-long research to uncover the secrets of the Frontier Labs is another man's "hey I wrote this python deep_think script":
https://xcancel.com/_can1357/stat…
I’m somewhat embarrassed to finally announce svcs 26.1.0 – my solution to #Python service location and dependency injection.
It’s been a minute, and the changelog is chuck-full, but the main features are autowiring, which looked like a simple add-on that grew to a four-digit monster diff, and of course, TypeForms that allow registering/getting abstract types!
I don't often write #python but when I do I can apparently write python inefficient enough to start the fans spinning on my workstation for half an hour. It looks like Path's match involves a glob compile for every invocation and I have a lot of files (14k) to check against a lot of patterns (2314).
I do not appreciate finding out via active breakage that Broadcom has decided to screw all #FreeBSD users of the #Salt configuration management tools. Not that I’m shocked, but I wish it didn’t happen because of a ‘pkg upgrade’ run installing the python 3.12 version and all of its py312-* dependencies and then…
from my link log —
SIMD within a bignum in pure Python.
https://www.da.vidbuchanan.co.uk/blog/python-swar.html
saved 2026-07-25 https://…
yearning for the days of #python v2.7 when everything was stable. the days when i was focusing on my code, and not on updating stuff because the underlying language changed again, without much benefit to me.
Who thought it was a good idea to put spinners in a shell script?
`pip install` has been running for a few minutes now at 100% CPU and all progress I see is an effing spinner on the last line.
Had to look at process list to see it's not stuck.
#python #pip
Good news everyone! 🎉
The new version 3.0 of graph-tool is just out with major improvements! See below.
https://graph-tool.skewed.de
graph-tool is a comprehensive and efficient Python library to work with networks, including structural, dynamical, and statistical algorithms, as well as visualiza…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
EVE Online startet die Migrierung von Python 2 auf 3. Das kommt mir etwas verfrüht vor, ist das schon stable?
#eveonline #python
Commodore Amiga: "We're not dead yet! We feel happy!" - Monty Python and the Holy Grail
Yes, but will it have a MySpace client app? 😉
#Amiga
In 1979, #MontyPython released their epic #film "Monty Python's Life of Brian": https://en.wikipedia.org/wiki/Life_of_
Happy to announce v3.0.0 of my build-and-inspect-python-package GitHub Action that does what the name says.
If u maintain a Python pkg u should really give it a look! Much, much fewer broken pkgs have been pushed to PyPI & who doesn't love automatic trove classifier − GHA test matrix conversion‽
This release brings you Twine 7 & with that packaging metadata 2.5 & PEP 794 (Import Name Metadata) – also a new release procedure: no more trailing v3 tags – only full ve…
I got nerd sniped so hard by this CTF puzzle in my feed and tried to solve it for the better part of the weekend...
https://infosec.exchange/@rebane2001/116977242964328537
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
#PSA to #Gentoo users: Please don't upgrade to #CPython 3.14.0b4, that release is borked and causes segfaults in random packages. I've just pushed a mask but warning in case you hit the upgrade before it reaches you. We'll investigate when we have more time.
#Python
Commodore Amiga: "We're not dead yet! We feel happy!" - Monty Python and the Holy Grail
Yes, but will it have a MySpace client app? 😉
#Amiga
🐍 Python 3.11 , MIT licensed, installs via uv or pipx. Runs natively on Windows with optional DPAPI master-key wrapping
#credentials
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
So now that #awscli 1.x is pretty much dead, I've finally gotten around to packaging 2.x properly for #Gentoo. You know, the one where other developers claimed it was impossible to build from source because (checks notes) upstream said so. So we instead must use their horrible 70M binary package that bundles its own Python interpreter along with all the random libraries and dependencies.
And guess what? Sure, they don't publish it to PyPI anymore, but it still is a regular #Python package branched out from 1.x. It has regular Python package dependencies, a regular Python build backend and when you build it with it, you get a regular Python wheel that can be installed and just works with the system Python and system dependencies.
Sure, it's crap, but it's no worse than the 1.x crap. It bundles a modified fork of the unreleased 2.x branch of botocore (now dead for 5 years, apparently) and a fork of s3transfer. It has some random meaningless dependency pins that we patch out. It has a horrible test suite that can eat tons of memory if run via xdist, but with some hackery, I've gotten it to work reasonably.
Honestly, I feel like Gentoo developers these days just don't care to even try.
➡️ fstring.help: Python f-string Guide
#bookmarks
#Steady #Klimacrew
Wie lassen sich #Wechselrichterdaten vom APsystems EZ1 lokal speichern?
Für statistische Auswertungen müssen alle Daten kontinuierlich gespeichert werden. Wie…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
Source distributions that are significantly different than the git repository shouldn't surprise anyone anymore either.
#Python #packaging
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
On my way to Cologne for the next workshop on test-driven development with Python.
#TDD #Python #Testing
I got some Python code working yesterday after being convinced I could not figure it out… but figured it out!
Realized I needed extra code today, thought it would be a pain but figured it out in no time.
Maybe I can write Python okay…
#TIL that the Python Pillow library uses the PING command as a #Windows equivalent of sleep.
#cmd
🛡️ It also scans heredocs & inline scripts (python -c, bash -c, node -e) via AST-based analysis to catch destructive operations the outer command hides
🚀 Whitelist-first with a modular pack system; works on Linux, macOS & Windows (WSL) and auto-configures hooks for Claude Code, Codex, Gemini, Copilot & Cursor
https://
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
The conclusion from a big #Python 3.15 #Gentoo porting run today: the most common kind of #NIH Python package is one providing colorful output on the terminal…
🧩 Rich plugin ecosystem: hundreds of plugins run tasks anywhere — local, SSH, #Docker, #Kubernetes or serverless task runners — and code in any language including #Python, Node.js, R, Go and S…
I’m still completely blown away by yesterday’s BBQ for all the Berlin Python user groups – I met so many new people and had some great conversations. Many thanks also to our host, @…, for their ongoing support.: #Python #Berlin
I have a #Python favor to ask. Could someone look at Python 3.15 test failures in itsdangerous? It's blocking quite a large part of package dependency graph in #Gentoo, and the failure looks, errr, dangerous.
https://github.com/pallets/itsdangerous/issues/420
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
Good morning! Since it's become a drag to support in mainline, I've extracted svcs's Pyramid support into an own package svcs-pyramid.
That means, the next svcs version will ship WITHOUT a `svcs.pyramid` module.
You can start using svcs-pyramid TODAY to avoid breakage the moment 26.2.0 drops – there are no code changes, just adjust the import statement:
And the next big blocker for #Python 3.15 in #Gentoo is time-machine. Which is obviously broken. There's a patch but it's #slop and complex, and it's sitting for 3 months already with no reply. Because obviously patching CPython internals is so much a better idea than freezegun ever were. All these time-based tests need all the ricing you can get; portability doesn't matter.
https://github.com/adamchainz/time-machine/pull/618
#Python Hypothesis package now requires #RustLang. This is a scale of reverse dependencies I can't handle. I guess this means it's the end of WD40 profiles on #Gentoo, and therefore the end of support for Alpha, ARM<v6, HPPA, M68k, i486 and some other random subsets of architectures and profiles. Thanks for all the fish, etc.
https://github.com/HypothesisWorks/hypothesis/issues/4740
#Steady #Klimacrew
Vom Puristen zum #IDE-Nutzer
Ganz langsam. 😁 Wie verändert sich der Workflow, wenn man statt eines simplen Editors mit einer IDE arbeitet? Als Hobby-Entwickler hat mir Notepa…
Also, zero days (well, minus a lot of days because I've been slacking) since a random #Python package got a new #NIH dependency on another Python package which is actually a "fastest" #RustLang package which cannot be built because the author thinks it a great idea to require a nightly Rust compiler.
…and of course it's full of "unsafe" calls. Because Rust is obviously such a great language for making secure code.
https://github.com/awolverp/cachebox/issues/62
#Steady #Klimacrew
Was tun, wenn falsche Einträge im #Marktstammdatenregister die Auswertung ruinieren?
Das Register ist berüchtigt für Fehleinträge durch Anlagenbetreiber. …
So I wanted to unbundle #uChardet from #cChardet #Python package.
It didn't build against system uchardet 0.0.8. So I've checked, and it turns out cchardet is using some old patched fork of uchardet. Ugh.
Fortunately, upstream added the "missing" function too, with a different API (that's not really a problem), but they didn't make a release in 4 years. Ugh.
I could at least replace the old patched uchardet with upstream uchardet, right? Except now I'm getting test failures over misdetected encodings. 0.0.8 works fine there. Though the particular test doesn't look very realistic (note all the repetitions):
#Gentoo