Search

Items tagged with: pypi


The Python Software Foundation just had to pass on a US$1.5M grant from the National Science Foundation for PyPI maintenance. One condition of the funding was that the PSF drop any DEI efforts, and if this condition is violated, the NSF can claw back the money even if it's already been spent. That clawback is too risky, so the PSF had to pass on the funding. (This is pretty shameful: PyPI security is a broad benefit, but of course the administration prefers to grind its own ax here.)

If you develop #Python code or rely upon it for your business, it'd be great if your company could become a sponsor of the PSF, or if you could donate personally to the PSF.

fosstodon.org/@ThePSF/11544665…

#Python #PSF #NSF #PyPI #diversity


The PSF applied for a $1.5M grant from the US National Science Foundation (NSF) to make innovative improvements to packaging security—and we were recommended for funding! But as a condition of funding, we were asked to affirm that we wouldn’t undertake any diversity, equity, and inclusion work, whether or not we used the government funds to do so.


Also.
Fun fact.

As people might know, I maintain "pypandoc".

But did you know, that 'pypandoc' actually have 2 packages on PyPI?

The regular 'pypandoc' package that people typically install.
And then it also has 'pypandoc_binary' which comes with a version of pandoc packaged - so you can get started right away.

pypandoc_binary, for the first month, just surpassed 1.000.000 downloads in the last 30 days.

That's amazing news.
That means, that the total pypandoc project has been downloaded over 4.500.000 times over the last month.

That's amazing - I'm so honored.

#python #tech #pypandoc #opensci #markdown #pandoc #Humblebrag #pypi



Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls

In yet another campaign targeting the Python Package Index (PyPI) repository, six malicious packages have been found deploying information stealers on developer systems.

thehackernews.com/2023/01/mali…#Cloudflare#PyPi#Firewalls