2026-06-23 09:13:33
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
I’m organising the next @… meet-up, featuring a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin-pub/events/315354198…
speaking of slophub, here's environ-config 26.1.0 (my #Python take on loading config from env variables and secrets from safe places) a minor modernization update. thanks so much to every single name in the thanking section and to github who made it possible:
#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der
Who still uses Python 2?
Apparently, the library used for checking device trees in Linux.
The code is NOT compatible with Python 3 though, due to one single type.
Hopefully this gets accepted:
https://github.com/devicetree-org/pylibfdt/pull/9
Discovered a segfault in #FastAPI very strange, does only happen on MacOS with Python 3.14.0 ALPHA
The reason was that I was unaware that I ran an alpha version of Python 3.14.
FastAPI segfaults with Python 3.14.0 on MacOS · fastapi/fastapi · Discussion #15819
➡️ A search engine in 80 lines of Python
https://www.alexmolas.com/2024/02/05/a-search-engine-in-80-lines.html
(This is a link from my bookmark collection. A new link gets posted each night.)
Old good time? 🤔
«Finger Protocol Malware — Python RAT via a 1970s:
The finger protocol is older than the web, disabled on every server that matters, and still a working malware delivery channel on a default Windows install. Here it planted a Python RAT that was alerting the whole time. One genuine compromise, drowned in thousands of benign look-alikes, invisible until something cut through the noise»
📧
Polars is a lightning fast DataFrame library/in-memory query engine with parallel execution and cache efficiency. And now you can use is with the tidyverse syntax: #rstats
Warum gibt es kein Python-only LLM?
Oder gibt es eins?
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
#Steady #Klimacrew
#BahnMonitor-Projekt: 5. Automatisierte Skripte brauchen Kontrolle – besonders bei API-Aufrufen.
Jetzt bekommt das
Ich bekomme Spam mit Absender "support@python.org". Gnah! #alleskaputt
TIL " #Python, for example, is a popular programming language that is famously smooth at handling integers of any size. If you peek into Python's underlying source code (search “Karatsuba” here)"
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
RE: https://mastodon.social/@lemonde/116961723731827043
That reminds me of Monty Python's suicide squad. "That showed them, ha?"
I wish #mypy would slow down with adding new features to mypyc, and instead focused on fixing the train wreck that mypyc is right now (since 2023 at least). Like, if your code crashes hard with assertions enabled, then it's broken, period. Ignoring proper testing and shoving the issue under the carpet doesn't make it right.
#Python
Happy/nervous to announce argon2-cffi-bindings, the low-level C binding wheels used by argon2-cffi the best package for hashing passwords in #Python.
It's a big release with wheels for new platforms, but the biggest item is the liberation from setuptools with great help by Nathan Goldbaum & @…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
This pair of articles summarises things neatly and concisely.
Part one mentioned Monty Python.
Nobody expects the Spanish Inquisition.
As expected, part two from the Linux Professional Institute praises BSD:
"… There are administrators who praise its stability and performance, and who wouldn’t exchange it for Linux for all the penguins in Patagonia. …"
Thanks @…
RE: https://seattle.pink/@mxchara/116750125454729237
The fact that (so far) Python is in the lead makes me sad.
Python is unfit for system administration. You’ll only convince me otherwise when every fucking Python program doesn’t need its own bespoke …
Bookmarked: Phillip B. Ströbel: Von der Pythia zu Python. Einführung in die Programmierung für die Geschichtsforschung #Jupyter
What are we using to package up Python application & dependencies into a single distributable file now?
I'm thinking of bundlers like RollupJS.
PEX? Zipapp? Docker image? Trying really dang hard to only use stdlib and shipping a boring wheel?
#python #packaging #askfedi
I received a spam mail from python.org - with a valid DKIM signature. Should I report this somewhere? ... @…
from my link log —
In Python 2, node.example.com is an IPv6 address.
https://tuckersiemens.com/posts/node-example-com-is-an-ip-address/
saved 2020-12-30
It's 2026 and :python: #Python's standard library *still* does not have a flatten function? 🤨
(Yes, more-itertools, that's not the point)
#Steady #Klimacrew
#BahnMonitor-Projekt: 3. Klappt der erste Zugriff auf die Bahn-API?
Im nächsten Schritt wurde die API-Abfrage getestet udn geprüft, ob die zurückgelieferten Datenstru…
Nature publishes a peer-reviewed paper alleging that Microsoft's 2025 quantum breakthrough claims were based on "basic Python errors" and data cherry-picking (Thomas Claburn/The Register)
https://www.theregiste…
My bike riding has been poor this year, due to spinal stenosis and then spinal surgery in June... but hopefully the numbers will go up for the rest of the year.
(And who knows? Maybe I'll update some of the Python code that generates these.)
#bikeTooter #python
I’m still completely blown away by yesterday’s BBQ for all the Berlin Python user groups – I met so many new people and had some great conversations. Many thanks also to our host, @…, for their ongoing support.: https:…
I'm exploring installing R and other stuff on Windows for planning teaching, and I found an answer to a question I didn't know I needed to ask: Don't install R, RStudio, Python, Julia etc on OneDrive
https://tclark89.github.io/quarto-blog/posts/2022-09-20-…
Had to hand-edit a python library source to get offlineimap working. Backwards compatibility has no priority for python developers, useless behaviour, useless programming language.
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
for no particular reason whatsoever, I've updated my guide on how to measure #Python coverage across GitHub Action containers without an external service (*cough* Codecov *cough*)
https://hynek.me/articles/ditch-codeco
I have just published a new bug fixes minor release for #Diaphora, version 3.4.1.
https://github.com/joxeankoret/diaphora/releases/tag/3.4.1
I received a spam mail from python.org - with a valid DKIM signature. Should I report this somewhere? ... @…
PEP 832 – Virtual environment discovery
#python
#Steady #Klimacrew
#BahnMonitor-Projekt: 2. Welche Architektur sollte der Bot haben?
Bevor es ans Coden geht, ist etwas Grübeln über eine sinnvolle Gliederung der Module ratsam. Wie sie…
Digital Twin Modeling of a Highly Automated Agricultural Tractor
Clay Hallman, Lukas Pindl, Timo Oksanen
https://arxiv.org/abs/2607.19912 https://arxiv.org/pdf/2607.19912 https://arxiv.org/html/2607.19912
arXiv:2607.19912v1 Announce Type: new
Abstract: In efforts to increase research efficiency and availability, a digital twin of our research tractor (AMX G-trac) is created, focusing especially on the CAN communication for data reading and actuation command following the ISOBUS protocol. Mevea Simulation Software is utilized as the foundation, providing the kinematic model and visuals, while Python is used to read and write CAN messages over a Kvaser CanKing virtual CAN channel. Various performance tests involving straight line and turning behavior are performed in both the digital twin simulation and in the real world to measure similarity. Results indicate that the Mevea model behaves very comparable in its lateral dynamics, often within 5-10 percent, but requires better data to fully capture the longitudinal aspects like acceleration. The final model described in this paper sets the table for a second iteration to include more tractor functions such as hydraulics and tractor-implement dynamics.
toXiv_bot_toot
Generalized Constraint Projection: Four-Dimensional Type Inference for Dynamic Languages
Qunhui Zhang
https://arxiv.org/abs/2607.19693 https://arxiv.org/pdf/2607.19693 https://arxiv.org/html/2607.19693
arXiv:2607.19693v1 Announce Type: new
Abstract: Type inference for dynamically typed languages must reconcile four distinct sources of evidence for function parameters: internal assignments, explicit declarations, contextual requirements, and structural operations. Existing systems often merge these sources into one constraint set, causing spurious conflicts or requiring redundant annotations. We present Generalized Constraint Projection (GCP), a zero-annotation inference framework that stores the four sources in separate monotone slots on a stable definition-time template and checks each call in a fresh projection session. Ordinary calls verify concrete arguments and specialize return types without modifying the template, while currying produces residual projected functions. GCP uses Outline Equational Matching (OEM), a structural compatibility preorder with an open bidirectional delegation protocol, and future this, a receiver-preserving extension for subtype-refining fluent APIs. On the strict success fragment of a finite-height type preorder, we prove monotonicity, local and global convergence in $O(Nh_T)$ effective updates, conditional projection-obligation soundness, projection termination, multi-module convergence, and order independence under fair monotone iteration. For the pure, recursion-free core Outline0, we additionally prove big-step evaluation definedness, type preservation, runtime receiver retention, and projection-evaluation coherence. We instantiate GCP in the Outline dynamic language as a typed substrate for ontology worlds and apply it to unannotated Python source to recover PEP 484 annotations for downstream compilation.
toXiv_bot_toot
I know #Replit bills itself as a #vibecoding platform these days, but I opened it for a quick Python REPL and couldn't figure out for the life of me how to bypass the #AI prompt.
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
The BBQ for all the Python user groups in Berlin is in a week’s time. I’m already looking forward to meeting lots of Pythonistas: https://www.meetup.com/python-users-berlin-pub/events/314905083/
🔧 The backend is #Python-based on top of #pipecat, the UI is #TypeScript. The architecture is modular so components can be swapped, and
from my link log —
SIMD within a bignum in pure Python.
https://www.da.vidbuchanan.co.uk/blog/python-swar.html
saved 2026-07-25 https://…
#Steady #Klimacrew
#BahnMonitor-Projekt: 1. Wie kommt man an Live-Daten der Deutschen Bahn?
Im November konnte ich per Zufall mit einem
old and busted: delete failing tests
new and hotness: delete CI configuration
this is FOSS DoS; I have no other term for it
https://github.com/python-attrs/attrs/pull/1585/changes#diff-2e34befd0a8baf062…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
»Hey, KI! Bestimmt erinnerst du dich noch an die 150.000 Zeilen Code, die du mir vor so sieben, acht Monaten mal in Python vibecoded hast? Der müsste jetzt bitte auf das neue API angepasst werden. Und wenn du eh schon dabei bist: portiere das doch alles auch gleich noch von Python nach Rust.« 🤡 #justthinkin
omg omg omg https://peps.python.org/pep-0841/
The state of #Python ecosystem right now: almost everything is slop. Some projects are complete vibe-coded slop (autobahn, chardet, cryptography). Some projects are disguised slop ("Coding agents shouldn't co-author themselves.")
There is only a handful of human projects left (Flask being one bright example). And they're being killed. They're being killed by the neverending slew of slop pull requests. They're being killed by all their dependencies becoming slop. They're being killed because this whole ecosystem has became such a complete cesspit that you have zero motivation to do anything.
EDIT: and honestly, this is only going to get worse. When you kill the incentive to work on projects, you only get more slop. Maintainers give in, and more projects become slop. Or they give up, and projects get forked unto slop.
#NoAI #NoLLM
In 1979, #MontyPython released their epic #film "Monty Python's Life of Brian": https://en.wikipedia.org/wiki/Life_of_
➡️ PyPI · The Python Package Index
#bookmarks
Analysis: the share of entry-level hiring in India's tech sector fell to ~15% in 2025 from 28% in 2024 as companies shifted focus to AI and automation roles (Tanya Pandey/The Economic Times)
https://economictimes.i…
So virtualenv solves the issue of brutal incompatibilities between python stuff (at the cost of huge amounts of diskspace), but the minute uwsgi comes into play, it is overboard and there is hardly any way to activate plugins for old python interpreters. #pythonwoes
Final preparations for tomorrow’s BBQ for all Python user groups in Berlin @…: https://www.meetup.com/python-users-berlin-pub/events/314905083
i'm so fucking sick of it
i've got ONE extremely simple and extremely explicit contribution rule/brown m&m test: do not delete the PR checklist
since i'm busy getting structlog out, I’ve let the attrs bug tracker a bit off the leash
go & count for yourself how many PRs opened in the past month followed that instruction.
(and of course, this is not about bureaucracy; they violate many of the important items on that list)
#Steady #Klimacrew
#BahnMonitor-Projekt: 6. Nachdem das Skript läuft, kommt nun der Tröt auf #Mastodon
If uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: https://python-basics-tutorial.readthedocs.io/en/latest/libs/install.html#of-packages
anyone out there who could look at how I'm trying to build pyemscripten wheels for argon2-cffi? at 71 million downloads per month I suspect there might be some demand for wasm wheels, but I've never used any of this so I'm just reading blog posts and guessing
https://github.com/hynek/argon2-cffi-b
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
from my link log —
Line breaks in Python and Unicode.
https://www.b-list.org/weblog/2026/aug/10/newlines/
saved 2026-08-10 https://
On my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@…) are meeting for a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin
I’m somewhat embarrassed to finally announce svcs 26.1.0 – my solution to #Python service location and dependency injection.
It’s been a minute, and the changelog is chuck-full, but the main features are autowiring, which looked like a simple add-on that grew to a four-digit monster diff, and of course, TypeForms that allow registering/getting abstract types!
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
httpx2 has proper API docs and intersphinx 🥲
now they just need to start using it themselves in their narrative docs 😅
https://github.com/hynek/stamina/commit/63663956d99aea06b8350293c0a7b12353793d12
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
➡️ fstring.help: Python f-string Guide
#bookmarks
#Steady #Klimacrew
Wie lassen sich #Wechselrichterdaten vom APsystems EZ1 lokal speichern?
Für statistische Auswertungen müssen alle Daten kontinuierlich gespeichert werden. Wie…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
Happy to announce v3.0.0 of my build-and-inspect-python-package GitHub Action that does what the name says.
If u maintain a Python pkg u should really give it a look! Much, much fewer broken pkgs have been pushed to PyPI & who doesn't love automatic trove classifier − GHA test matrix conversion‽
This release brings you Twine 7 & with that packaging metadata 2.5 & PEP 794 (Import Name Metadata) – also a new release procedure: no more trailing v3 tags – only full ve…
@… I gave this thing a try today... 😉
https://codeberg.org/jjg/paxton
I have a #Python favor to ask. Could someone look at Python 3.15 test failures in itsdangerous? It's blocking quite a large part of package dependency graph in #Gentoo, and the failure looks, errr, dangerous.
https://github.com/pallets/itsdangerous/issues/420
#Steady #Klimacrew
#BahnMonitor-Projekt: 4. Welche #ICE-Daten braucht man und welche können weg?
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
And the next big blocker for #Python 3.15 in #Gentoo is time-machine. Which is obviously broken. There's a patch but it's #slop and complex, and it's sitting for 3 months already with no reply. Because obviously patching CPython internals is so much a better idea than freezegun ever were. All these time-based tests need all the ricing you can get; portability doesn't matter.
https://github.com/adamchainz/time-machine/pull/618
I got some Python code working yesterday after being convinced I could not figure it out… but figured it out!
Realized I needed extra code today, thought it would be a pain but figured it out in no time.
Maybe I can write Python okay…
It's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
https://github.com/pypa/pip/issues/14000
#Python Hypothesis package now requires #RustLang. This is a scale of reverse dependencies I can't handle. I guess this means it's the end of WD40 profiles on #Gentoo, and therefore the end of support for Alpha, ARM<v6, HPPA, M68k, i486 and some other random subsets of architectures and profiles. Thanks for all the fish, etc.
https://github.com/HypothesisWorks/hypothesis/issues/4740
Source distributions that are significantly different than the git repository shouldn't surprise anyone anymore either.
#Python #packaging
I’d like to announce the most unlikely #Python package release:
service-identity 26.1.0, the best way to verify if a certificate is valid for a hostname, IP, or URI is out!
The main change is that we were able to switch from pyasn1 (thank you for more than a decade of great service! 🫡💛) to do everything within PyCA's cryptography.
Also, zero days (well, minus a lot of days because I've been slacking) since a random #Python package got a new #NIH dependency on another Python package which is actually a "fastest" #RustLang package which cannot be built because the author thinks it a great idea to require a nightly Rust compiler.
…and of course it's full of "unsafe" calls. Because Rust is obviously such a great language for making secure code.
https://github.com/awolverp/cachebox/issues/62