Page 12 - Python Package Index News Today

Python virtual environments shine for keeping projects and conflicting packages separate. Just keep these dos and don’ts in mind.

One of the biggest draws of Python is its expansive ecosystem of third-party packages. If there is a task you want to pull off—file format conversion, scraping and restructuring web pages, linear regression, you name it—odds are that one or more packages in the Python Package Index will fill your need. The hard part is […]

Copy Boffins in Finland have scanned the open-source software libraries in the Python Package Index, better known as PyPI, for security issues and said they found that nearly half contain problematic or potentially exploitable code. In a research paper distributed via ArXiv, Jukka Ruohonen, Kalle Hjerppe, and Kalle Rindell from the University of Turku describe how they subjected some 197,000 Python packages available through PyPI to a static analysis tool called Bandit and found more than 749,0...

Copy Boffins in Finland have scanned the open-source software libraries in the Python Package Index, better known as PyPI, for security issues and found that nearly half contain potentially vulnerable code. In a research paper distributed via ArXiv, Jukka Ruohonen, Kalle Hjerppe, and Kalle Rindell from the University of Turku describe how they subjected some 197,000 Python packages available through PyPI to a static analysis tool called Bandit and found more than 749,000 instances of insecure c...

Copy Another malicious library has been spotted in the JavaScript-oriented NPM registry, underscoring the continued fragility of todays software supply chain. Like other software package registries – repositories of code libraries for specific tasks – NPM, which was acquired last year by Microsofts GitHub, has proven to be an effective mechanism for spreading malicious software. Developers tend to trust the modules they download from such services and typically incorporate them into their p...

Mozilla spins out Pyodide Python-in-the-browser project Projects running Python and its scientific stack in web browsers via WebAssembly will be maintained by volunteer contributors. Credit: Dreamstime Pyodide has been spun out by Mozilla into an independent, community-driven project. Consisting of the CPython 3.8 interpreter compiled to WebAssembly, Pyodide allows Python to run in web browsers. The Pyodide project has a new home in a separate GitHub organisation, at github.com/py...

Popular programming language, at the top of its game, still struggles to please everyone Share Copy Feature The 30th anniversary of Python this week finds the programming language at the top of its game, but not without challenges. "I do believe that Python just doesn’t have the right priorities these days," said Armin Ronacher, director of engineering at software monitoring biz Sentry and creator of Flask, the popular Python web app framework, in an email interview with The Register...

Google Cloud donates $350K to fund Python projects Google Cloud donates $350K to fund Python projects Tech giants donates to Python Software Foundation to support CPython maintenance, foundational Python tools and malware detection for the PyPI package repo. Credit: Dreamstime Google Cloud has donated US$350,000 to the Python Software Foundation, with the goals of aiding CPython development, improving foundational Python tools, and beefing up the security of the Python p...

​​​​​​​Version 1.0.4 of the wbgapi python package is now available. This package has been in the Python Package Index for almost a year, and the latest version adds several new features to make exploring and searching databases easier and more interactive.

How will Python help you make a quality application? Andrew Volchek Choosing a programming language is an important step in custom web development. If chosen properly, it can help you reduce time-to-market, save costs, improve the system scalability, performance, and resilience to peak loads. A wrong decision can negatively affect these indicators, decreasing product quality. Since there are numerous software technologies, it may be difficult to find the best match with your project. In this po...