Tootfinder

Taking Measure spoke to Guido van Rossum to find out more about #Python, what he gets up to in his spare time, and his brief spell at #nist

The Programming Language Named for Monty Python Evolved at NIST
The creator of the popular programming language Python worked at NIST while developing it.

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

A cool recent #Python change is PEP 783 <#pyodide

#Steady #Klimacrew
#BahnMonitor-Projekt: 2. Welche Architektur sollte der Bot haben?
Bevor es ans Coden geht, ist etwas Grübeln über eine sinnvolle Gliederung der Module ratsam. Wie sie…

Python-Projekt mit Bahn-API: 2. Architekturentwurf
Architektur eines Python-Projekts zur Analyse von ICE-Verspätungen via Bahn-API – mit ChatGPT und strukturierter Code-Aufteilung.

It's 2026 and :python: #Python's standard library *still* does not have a flatten function? 🤨
(Yes, more-itertools, that's not the point)

heise | Grundlagen in Python: Dictionarys meistern und Daten effizient organisieren
Mit Schlüssel-Wert-Paaren lassen sich Daten clever strukturieren. Wir zeigen, wie Sie Python-Dictionarys effizient erstellen und steuern.

Grundlagen in Python: Dictionarys meistern und Daten effizient organisieren
Mit Schlüssel-Wert-Paaren lassen sich Daten clever strukturieren. Wir zeigen, wie Sie Python-Dictionarys effizient erstellen und steuern.

0 days since provenance checks protected us from [checks notes] another project starting to upload distributions via #uv.
#Python #security

#Steady #Klimacrew
#BahnMonitor-Projekt: 1. Wie kommt man an Live-Daten der Deutschen Bahn?
Im November konnte ich per Zufall mit einem

Python-Projekt mit Bahn-API: 1. Zugang einrichten
Entdecke, wie du mit Visual Studio Code und ChatGPT ein Python-Projekt realisierst – inklusive Vibe Coding und Bahn-API-Zugriff.

My bike riding has been poor this year, due to spinal stenosis and then spinal surgery in June... but hopefully the numbers will go up for the rest of the year.
(And who knows? Maybe I'll update some of the Python code that generates these.)
#bikeTooter #python

RE: https://seattle.pink/@mxchara/116750125454729237
The fact that (so far) Python is in the lead makes me sad.
Python is unfit for system administration. You’ll only convince me otherwise when every fucking Python program doesn’t need its own bespoke …

I’m still completely blown away by yesterday’s BBQ for all the Berlin Python user groups – I met so many new people and had some great conversations. Many thanks also to our host, @…, for their ongoing support.: https:…

Python in Berlin BBQ @ c-base, Thu, Aug 13, 2026, 7:00 PM | Meetup
Normally we announce our talks here, but this time we are taking a short summer break and therefore invite you to a barbecue at the Spree. The BBQ is for all Berlin Python

I have just published a new bug fixes minor release for #Diaphora, version 3.4.1.
https://github.com/joxeankoret/diaphora/releases/tag/3.4.1

Release Diaphora 3.4.1 · joxeankoret/diaphora
This is a minor bug fixes release. MISC: Added requirements.txt BUG: Both quick_ratio and real_quick_ratio were wrongly checking buf1 and buf2, issue #354. BUG: Project specific Python scripts were...

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

What are we using to package up Python application & dependencies into a single distributable file now?
I'm thinking of bundlers like RollupJS.
PEX? Zipapp? Docker image? Trying really dang hard to only use stdlib and shipping a boring wheel?
#python #packaging #askfedi

I wish #mypy would slow down with adding new features to mypyc, and instead focused on fixing the train wreck that mypyc is right now (since 2023 at least). Like, if your code crashes hard with assertions enabled, then it's broken, period. Ignoring proper testing and shoving the issue under the carpet doesn't make it right.
#Python

🔧 The backend is #Python-based on top of #pipecat, the UI is #TypeScript. The architecture is modular so components can be swapped, and

I’m somewhat embarrassed to finally announce svcs 26.1.0 – my solution to #Python service location and dependency injection.
It’s been a minute, and the changelog is chuck-full, but the main features are autowiring, which looked like a simple add-on that grew to a four-digit monster diff, and of course, TypeForms that allow registering/getting abstract types!

Release 26.1.0 · hynek/svcs
Highlights In the spirit of "we do these things not because they are easy, but because we thought they were going to be easy" this release brings a great new feature: autowiring! It resolves depend...

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

Vulnerability and malware checks in #uv
#python

Bookmarked: Phillip B. Ströbel: Von der Pythia zu Python. Einführung in die Programmierung für die Geschichtsforschung #Jupyter

Squash Bug War Casualty Report: Adults 0, Egg Pods 0.
No enemy contact, but I know they are out there, it’s like they are taunting me . . .
“Hallo, you tiny-brained gardener! You frighten no one! Today we did not come, because we did not feel like it!”
#gardening #oklahoma

Had to hand-edit a python library source to get offlineimap working. Backwards compatibility has no priority for python developers, useless behaviour, useless programming language.

for no particular reason whatsoever, I've updated my guide on how to measure #Python coverage across GitHub Action containers without an external service (*cough* Codecov *cough*)
https://hynek.me/articles/ditch-codeco

How to Ditch Codecov for Python Projects
Codecov’s unreliability breaking CI on my open source projects has been a constant source of frustration for me for years. I have found a way to enforce coverage over a whole GitHub Actions build matrix that doesn’t rely on third-party services.

The state of #Python ecosystem right now: almost everything is slop. Some projects are complete vibe-coded slop (autobahn, chardet, cryptography). Some projects are disguised slop ("Coding agents shouldn't co-author themselves.")
There is only a handful of human projects left (Flask being one bright example). And they're being killed. They're being killed by the neverending slew of slop pull requests. They're being killed by all their dependencies becoming slop. They're being killed because this whole ecosystem has became such a complete cesspit that you have zero motivation to do anything.
EDIT: and honestly, this is only going to get worse. When you kill the incentive to work on projects, you only get more slop. Maintainers give in, and more projects become slop. Or they give up, and projects get forked unto slop.
#NoAI #NoLLM

»Hey, KI! Bestimmt erinnerst du dich noch an die 150.000 Zeilen Code, die du mir vor so sieben, acht Monaten mal in Python vibecoded hast? Der müsste jetzt bitte auf das neue API angepasst werden. Und wenn du eh schon dabei bist: portiere das doch alles auch gleich noch von Python nach Rust.« 🤡 #justthinkin

Nature publishes a peer-reviewed paper alleging that Microsoft's 2025 quantum breakthrough claims were based on "basic Python errors" and data cherry-picking (Thomas Claburn/The Register)
https://www.theregiste…

Boffin claims Microsoft's supposed quantum leap does not compute due to 'basic Python errors'
Nature paper argues researchers cherry-picked data. Redmond insists its work is sound

Final preparations for tomorrow’s BBQ for all Python user groups in Berlin @…: https://www.meetup.com/python-users-berlin-pub/events/314905083

from my link log —
Line breaks in Python and Unicode.
https://www.b-list.org/weblog/2026/aug/10/newlines/
saved 2026-08-10 https://

Breaking up (lines) is hard to do
Here’s a seemingly simple question: given a chunk of multi-line text, how do you split it and return an array …

old and busted: delete failing tests
new and hotness: delete CI configuration
this is FOSS DoS; I have no other term for it
https://github.com/python-attrs/attrs/pull/1585/changes#diff-2e34befd0a8baf062…

and_ and or_: reject non-callable arguments at the call site by HrachShah · Pull Request #1585 · python-attrs/attrs
Summary and_ and or_ now raise NotCallableError at the call site when given a non-callable argument, instead of silently deferring the failure to the wrapped validator's __call__ site. Motivati...

Source distributions that are significantly different than the git repository shouldn't surprise anyone anymore either.
#Python #packaging

funniest thing in #LLM news. One man's month-long research to uncover the secrets of the Frontier Labs is another man's "hey I wrote this python deep_think script":
https://xcancel.com/_can1357/stat…

#Python #uv users on #Debian: I've been using this setup:
apt install extrepo
extrepo enable uv
apt install uv
That worked perfectly for all local users using standard Debian package management …

Florian Thierrys #OER zu #QGIS und #Wikidata: https://…

📆 On 13 August, all #Berlin #Python user groups – @…, @…

Python in Berlin BBQ @ c-base, Thu, Aug 13, 2026, 7:00 PM | Meetup
Normally we announce our talks here, but this time we are taking a short summer break and therefore invite you to a barbecue at the Spree. The BBQ is for all Berlin Python

PEP 832 – Virtual environment discovery
#python

it's too bad the major browsers don't support bookmarks or bookmark folders, thank goodness ChatGPT exists

@… I gave this thing a try today... 😉
https://codeberg.org/jjg/paxton

paxton
A search engine in about 100 lines of Python

handy random string (password) generator
echo `tr --complement --delete "a-fA-F0-9" < /dev/urandom | head -c 12`
#bash #cmdline #tricks
source:

yunohost/helpers/helpers.v2.1.d/string at b1ce284434a06e204e6eda17746d1d60990be811 · YunoHost/yunohost
YunoHost is an operating system aiming to simplify as much as possible the administration of a server. This repository corresponds to the core code, written mostly in Python and Bash. - YunoHost/yu...

When your RSS feed can only be fetched by clients that understand and execute javascript you are doing it wrong.
I'm looking at you @…
`curl #rss #cloudflare #broken

omg omg omg https://peps.python.org/pep-0841/

PEP 841 – Adding Frozen Syntax to Optimize Immutable Types | peps.python.org
This PEP proposes frozen display syntax: f{1, 2, 3} evaluates to a frozenset, and f{'a': 1} evaluates to a frozendict. Because immutability is guaranteed by the syntax itself rather than inferred from usage, the compiler can treat frozen displays as fir...

> We introduce gpusnek, a fully functional Python interpreter ported to CUDA, enabling execution of arbitrary Python code directly on the GPU by running one whole interpreter on every CUDA core/thread. This is a tremendously bad idea, but for the duration of this paper we pretend that it is not
[Josef Dean in SIGBOVIK 2026]

The BBQ for all the Python user groups in Berlin is in a week’s time. I’m already looking forward to meeting lots of Pythonistas: https://www.meetup.com/python-users-berlin-pub/events/314905083/

Python in Berlin BBQ @ c-base, Thu, Aug 13, 2026, 7:00 PM | Meetup
Normally we announce our talks here, but this time we are taking a short summer break and therefore invite you to a barbecue at the Spree. The BBQ is for all Berlin Python

Stabilizer complexity and the Python's lunch
Abhirup Bhattacharya, Jatin Narde, Onkar Parrikar, Suprakash Paul
https://arxiv.org/abs/2608.12472 https://arxiv.org/pdf/2608.12472 https://arxiv.org/html/2608.12472
arXiv:2608.12472v1 Announce Type: new
Abstract: In this note, we study the stabilizer complexity of the reduced density matrix corresponding to one side of a partially entangled thermal (PET) state with fixed energy boundary conditions in a holographic CFT. In particular, we study Wigner negativity, an operationally meaningful magic monotone which can be interpreted as the complexity of classically simulating any quantum circuit preparation of the reduced state on the subregion. Using assumptions on the pseudorandomness of the CFT spectrum and the heavy operator insertion, we observe that the Wigner negativity of the PET state relative to the microcanonical density matrix at the given energy is given by $\exp\left[\frac{1}{8G_N}(A_{\text{out}} - A_{\text{min}})\right]$, where $A_{\text{out}}$ is the area of the outer extremal surface, while $A_{\text{min}}$ is the area of the minimal extremal surface. Thus, the stabilizer complexity of the reduced density matrix on the boundary subregion is $O(1)$ in the absence of a python's lunch, but gets exponentially enhanced in the presence of a python's lunch in the bulk geometry.
toXiv_bot_toot

@… My PhD thesis literally was a bunch of Python classes. On some level. But that’s not the point of the thesis…

@… My PhD thesis literally was a bunch of Python classes. On some level. But that’s not the point of the thesis…

Good news everyone! 🎉
The new version 3.0 of graph-tool is just out with major improvements! See below.
https://graph-tool.skewed.de
graph-tool is a comprehensive and efficient Python library to work with networks, including structural, dynamical, and statistical algorithms, as well as visualiza…

Who thought it was a good idea to put spinners in a shell script?
`pip install` has been running for a few minutes now at 100% CPU and all progress I see is an effing spinner on the last line.
Had to look at process list to see it's not stuck.
#python #pip

Commodore Amiga: "We're not dead yet! We feel happy!" - Monty Python and the Holy Grail
Yes, but will it have a MySpace client app? 😉
#Amiga

whoah cyclopts sounds incredible! turn any python function into a command line script!!!!! if only it could run in a browser too :-) #NotAskingMuchObvs :)

from my link log —
SIMD within a bignum in pure Python.
https://www.da.vidbuchanan.co.uk/blog/python-swar.html
saved 2026-07-25 https://…

I got nerd sniped so hard by this CTF puzzle in my feed and tried to solve it for the better part of the weekend...
https://infosec.exchange/@rebane2001/116977242964328537

Working on tempolocus, a tool that analyses time-series activity patterns to infer a user’s likely location.
In @…, we work with a large volume of social-network time series. Estimating users’ locations from these patterns is often a manual task.
I prototyped a Python module that combines potential locations with yearly activity …

Pro tip:
If your supervisor suggests to submit a paper to a venue of a field relevant for your dissertation, addressing the architecture of the system you develop and which is the heart of your dissertation, maybe, just maybe, it’s not the very best idea to say: I don’t see what could be interesting here, it’s just a bunch of Python classes

City2Graph: A Python library for Heterogeneous Graph Neural Networks and spatial analysis in urban systems
https://www.sciencedirect.com/science/article/pii/S0198971526000943
Looks very interesting!

I do not appreciate finding out via active breakage that Broadcom has decided to screw all #FreeBSD users of the #Salt configuration management tools. Not that I’m shocked, but I wish it didn’t happen because of a ‘pkg upgrade’ run installing the python 3.12 version and all of its py312-* dependencies and then…

#Python 3.15 #Lazy #Imports: Faster Startup Times and the Design Behind PEP 810

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

So virtualenv solves the issue of brutal incompatibilities between python stuff (at the cost of huge amounts of diskspace), but the minute uwsgi comes into play, it is overboard and there is hardly any way to activate plugins for old python interpreters. #pythonwoes

#Steady #Klimacrew
Wie lassen sich #Wechselrichterdaten vom APsystems EZ1 lokal speichern?
Für statistische Auswertungen müssen alle Daten kontinuierlich gespeichert werden. Wie…

EZ1-SPE Daten lokal speichern: Python-Skript auf Raspberry Pi (7/10)
Du willst Deine Wechselrichter-Daten lokal speichern und auswerten? So geht’s mit Raspberry Pi, Python und der EZ1-API!

In 1979, #MontyPython released their epic #film "Monty Python's Life of Brian": https://en.wikipedia.org/wiki/Life_of_

➡️ PyPI · The Python Package Index
#bookmarks

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

i'm so fucking sick of it
i've got ONE extremely simple and extremely explicit contribution rule/brown m&m test: do not delete the PR checklist
since i'm busy getting structlog out, I’ve let the attrs bug tracker a bit off the leash
go & count for yourself how many PRs opened in the past month followed that instruction.
(and of course, this is not about bureaucracy; they violate many of the important items on that list)

Pull requests · python-attrs/attrs
Python Classes Without Boilerplate. Contribute to python-attrs/attrs development by creating an account on GitHub.

🛡️ It also scans heredocs & inline scripts (python -c, bash -c, node -e) via AST-based analysis to catch destructive operations the outer command hides
🚀 Whitelist-first with a modular pack system; works on Linux, macOS & Windows (WSL) and auto-configures hooks for Claude Code, Codex, Gemini, Copilot & Cursor
https://

Are you really expected to run five type-checkers now?
#python

Analysis: the share of entry-level hiring in India's tech sector fell to ~15% in 2025 from 28% in 2024 as companies shifted focus to AI and automation roles (Tanya Pandey/The Economic Times)
https://economictimes.i…

India’s tech sector grows with fewer freshers as AI reshapes hiring
The share of entry-level hiring in the sector has fallen to around 15% in 2025 from 28% in 2024 as companies focus more on AI, cloud, cybersecurity and automation-focused roles. Emerging technology roles account for nearly 52% of hiring demand and are expected to touch 60% by the end of 2026, signalling a broader shift away from campus-led pyramid hiring model, experts said.

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

If uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: https://python-basics-tutorial.readthedocs.io/en/latest/libs/install.html#of-packages

Adding more Python libraries
Although Python’ „Batteries included“ philosophy means that you can already do a lot with the default installation of Python, there will inevitably come a situation where you need functionality tha...

➡️ Python f-string Tips & Cheat Sheets
#bookmarks

Python f-string tips & cheat sheets
Python's string formatting syntax is both powerful and complex. Let's break it down and then look at some cheat sheets.

So if you're wondering how great #RustLang is, let's talk about #mypy. Mypy introduced its own Rust - #Python package, ast-serialize. This package had a deep crate dependency that was broken on PowerPC. The issue was fixed a month ago but everything is still blocked on a deep chain of dependencies being updated and released.
https://github.com/mypyc/ast_serialize/issues/68
EDIT: yes, I know, it's not Rust, it's Cargo. Because obviously Rust without Cargo makes so much sense for that one project using it.

On my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@…) are meeting for a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin

Python Users Berlin (PUB): An introduction to PySpark, Thu, Jul 2, 2026, 7:00 PM | Meetup
📆 Agenda * 19:00 Welcome to the PUB (Python Users Berlin) – setting up * 19:15 Main talk * 20:00 Lightning talks * 20:30 Social gathering 🎙 Main talk by [Sam Bail](http

Happy to announce v3.0.0 of my build-and-inspect-python-package GitHub Action that does what the name says.
If u maintain a Python pkg u should really give it a look! Much, much fewer broken pkgs have been pushed to PyPI & who doesn't love automatic trove classifier − GHA test matrix conversion‽
This release brings you Twine 7 & with that packaging metadata 2.5 & PEP 794 (Import Name Metadata) – also a new release procedure: no more trailing v3 tags – only full ve…

Release v3.0.0 · hynek/build-and-inspect-python-package
Security Given the increase and supply-chain attacks and advancements in tooling (for example, pinact or GitHub's Dependabot), this action will stop force-tagging minor and micro releases. This me...

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der

Python-Projekt mit Bahn-API: 7. JSON-Wissenshäppchen: Zufall clever gemacht
So ergänzt dein Python-Bot Mastodon-Posts mit JSON-Wissenshäppchen – zufällig ausgewählt und fair rotiert.

🔧 Three pieces mirror the Python RLM design: a system prompt, a $CONTEXT file plus bash as the REPL, and the native rlm_query sub-call. Depth 0 and 1 get full tools; the leaf at max depth runs bash only. jj workspaces isolate child edits when available.
🛡️ Five guardrails guarantee termination: dollar budget, wall-clock timeout, call limit, depth limit and PATH scrubbing. Deeper agents are told to be more conservative, preferring direct action over spawning more children.

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

#TIL that the Python Pillow library uses the PING command as a #Windows equivalent of sleep.
#cmd

➡️ fstring.help: Python f-string Guide
#bookmarks

#Steady #Klimacrew
#BahnMonitor-Projekt: 5. Automatisierte Skripte brauchen Kontrolle – besonders bei API-Aufrufen.
Jetzt bekommt das

Python-Projekt mit Bahn-API: 5. Fehlerprotokollierung und Logfile
So richtest du Logging in deinem Python-Projekt ein: UTF-8-Logfile, CSV-Struktur, automatische Dateierstellung inklusive.

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

The conclusion from a big #Python 3.15 #Gentoo porting run today: the most common kind of #NIH Python package is one providing colorful output on the terminal…

#Steady #Klimacrew
Vom Puristen zum #IDE-Nutzer
Ganz langsam. 😁 Wie verändert sich der Workflow, wenn man statt eines simplen Editors mit einer IDE arbeitet? Als Hobby-Entwickler hat mir Notepa…

Visual Studio Code einrichten: Vom Puristen zum IDE-Nutzer
Visual Studio Code einrichten für Python und Git inklusive Codex-Integration. Ein Erfahrungsbericht mit praktischen Anleitungen.

I’m organising the next @… meet-up, featuring a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin-pub/events/315354198…

Python Users Berlin (PUB): PySpark, Thu, Jul 2, 2026, 7:00 PM | Meetup
📆 Agenda * 19:00 Welcome to the PUB (Python Users Berlin) – setting up * 19:15 Main talk * 20:00 Lightning talks * 20:30 Social gathering 🎙 Main talk by [Sam Bail](http

I have a #Python favor to ask. Could someone look at Python 3.15 test failures in itsdangerous? It's blocking quite a large part of package dependency graph in #Gentoo, and the failure looks, errr, dangerous.
https://github.com/pallets/itsdangerous/issues/420

Are you really expected to run five type-checkers now?
#python

I got some Python code working yesterday after being convinced I could not figure it out… but figured it out!
Realized I needed extra code today, thought it would be a pain but figured it out in no time.
Maybe I can write Python okay…

I’d like to announce the most unlikely #Python package release:
service-identity 26.1.0, the best way to verify if a certificate is valid for a hostname, IP, or URI is out!
The main change is that we were able to switch from pyasn1 (thank you for more than a decade of great service! 🫡💛) to do everything within PyCA's cryptography.

Release 26.1.0 · pyca/service-identity
Highlights The true highlight is that thanks to cryptography 47, we can drop two dependencies (that have served use very well for more than a decade; thank you so much pyasn1 maintainers!). Full c...

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

And the next big blocker for #Python 3.15 in #Gentoo is time-machine. Which is obviously broken. There's a patch but it's #slop and complex, and it's sitting for 3 months already with no reply. Because obviously patching CPython internals is so much a better idea than freezegun ever were. All these time-based tests need all the ricing you can get; portability doesn't matter.
https://github.com/adamchainz/time-machine/pull/618

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

Remember `build-details.json` (PEP 739)? The file added to #CPython to support cross-compiling extensions?
Well, turns out it gets generated incorrectly when cross-compiling CPython itself 🤦. Let's see if I can fix that…
#Python

I tried to get someone’s Python code to work and could not due to errors and I did a few searches and then gave up.
I could try using some AI chatbot bullshit to help me out but fuck that… it’s easier to just give up and walk away. Oh well.

#Steady #Klimacrew
Was tun, wenn falsche Einträge im #Marktstammdatenregister die Auswertung ruinieren?
Das Register ist berüchtigt für Fehleinträge durch Anlagenbetreiber. …

Fehler im Marktstammdatenregister: Fehlerkorrektur zur Laufzeit
Zwei fehlerhafte Einträge im Marktstammdatenregister verzerren die Windenergie-Analyse – eine einfache Python-Lösung schafft Abhilfe.

On my way to Cologne for the next workshop on test-driven development with Python.
#TDD #Python #Testing

#Python Hypothesis package now requires #RustLang. This is a scale of reverse dependencies I can't handle. I guess this means it's the end of WD40 profiles on #Gentoo, and therefore the end of support for Alpha, ARM<v6, HPPA, M68k, i486 and some other random subsets of architectures and profiles. Thanks for all the fish, etc.
https://github.com/HypothesisWorks/hypothesis/issues/4740

#Steady #Klimacrew
#BahnMonitor-Projekt: 3. Klappt der erste Zugriff auf die Bahn-API?
Im nächsten Schritt wurde die API-Abfrage getestet udn geprüft, ob die zurückgelieferten Datenstru…

Python-Projekt mit Bahn-API: 3. Erste Tests mit API-Abfrage
Erfahre, wie du Bahn-API-Antworten in Python einliest, analysierst und debugst – mit Tipps zur Konsolenausgabe und Codeanpassung.

It's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
https://github.com/pypa/pip/issues/14000

Also, zero days (well, minus a lot of days because I've been slacking) since a random #Python package got a new #NIH dependency on another Python package which is actually a "fastest" #RustLang package which cannot be built because the author thinks it a great idea to require a nightly Rust compiler.
…and of course it's full of "unsafe" calls. Because Rust is obviously such a great language for making secure code.
https://github.com/awolverp/cachebox/issues/62

The #Gentoo #Python 3.14 switch / 3.11 3.13t removal PR is green. Doing some final testing locally before merging it (one that involves 350 "merge wait" packages, what could possibly go wrong…).
https://codeberg.org/gentoo/gentoo/pulls/1031