Musings on Python Type Hints
As a huge fan of type hinting in Python, I feel this is a good article introducing the sorts of things you should think about, and the benefits you should derive from using type hints.
Build Your Python Project Documentation With MkDocs – Real Python
HOWTO on getting going with MkDocs and Python ode.
Example Google Style Python Docstrings — napoleon 0.7 documentation
Useful samples for writing Google style docstrings in Python.
The announcement of the Textual CSS branch on HN
The Orange hate site’s reaction to the announcement of the release of the CSS branch of Textual.
Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack
"Last week, our automated risk detection platform alerted us to some suspicious activity in dozens of newly published PyPI packages. It appears that these packages are a more sophisticated attempt to deliver the W4SP Stealer on to Python developer’s machines by hiding a malicious import . Join us here on the Phylum research team as we investigate these new and shifting tactics the attacker is using to deploy W4SP stealer in this supply-chain attack."
Should You Use Upper Bound Version Constraints?
I don't agree with much of this, but I recognise it's a valid position. To quote from the TL;DR at the end:
"Capping dependencies has long term negative effects, especially for libraries, and should never be taken lightly. A library is not installed in isolation; it has to live with other libraries in a shared environment. Only add a cap if a dependency is known to be incompatible or there is a high (>75%) chance of it being incompatible in its next release. Do not cap by default - capping dependencies makes your software incompatible with other libraries that also have strict lower limits on dependencies, and limits future fixes. Anyone can fix a missing cap, but users cannot fix an over restrictive cap causing solver errors. It also encourages hiding issues until they become harder to fix, it does not scale to larger systems, it limits your ability to access security and bugfix updates, and some tools (Poetry) force these bad decisions on your downstream users if you make them. Never cap Python, it is fundamentally broken at the moment. Also, even packing capping has negative consequences that can produce unexpected solves."
Virtual Environments with Eglot, Tramp, and Pyright · robbmann
Blog post talking about getting eglot and pyright working together nicely.
PyPi - API reference - Warehouse documentation
PyPi API reference.
What Are Python Wheels and Why Should You Care? – Real Python
Pretty comprehensive article covering the concept of Python "wheels".
A year of building for the terminal on Hacker News
Textualize devlog blog post on Hacker News; of course with the usual collection of very Hacker News replies along the way.
Trimmed down python setup for Emacs. This is a basic `init.el` file for Python, you can pick the bits you like.
Handy cut-down config for Emacs and Python, showing examples of comapny and eglot (or optionally lsp-mode) along the way.
How should Pyright consider typing stubs with try-excepted imports?
Why (Python) type hinting sucks
I don’t agree with the post - type hinting is awesome in my experience - but it’s a cleverly-crafted argument and there’s some interesting debate in the comments.
Style guides for Google-originated open-source projects
Google's style guide for Python code. Obviously not the law, not even always a good suggestion, but worthy of consideration.
Textual 0.11.0 adds a beautiful Markdown widget
Reddit thread where the Textual Markdown widget was announced.
Also includes the rather hilarious comment "I wish there were more full blown app examples out there", back when Textual was pretty damn new and barely out of the initial "CSS branch" release.
Basic introduction to Pydantic
Nice little introduction to what Pydantic offers.
Packaging a Python CLI tool for Homebrew
Handy writeup on how to make a Homebrew formula for packaging a Python-based application.
My User Experience Porting Off setup.py
There seems to be a lot of confusion around setup.py and friends; and while I’ve seen pushback against this post (mostly sniffy gatekeeper stuff rather than helpful feedback), it’s a worthwhile read if only because the confusion is real.
pip.wtf: Inline dependencies for small Python scripts
A tool to include dependencies with a Python script, without the packaging faff. Not sure I need it, not even sure I want it, but damn do I love how it's written up and introduced. I feel the annoyance.
Tinboard - A terminal-based client for Pinboard
Tinboard is a client for Pinboard, based in the terminal, it includes:
- Add/edit/delete bookmarks.
- Various forms of filtering.
- Filtering with tags.
- Full text search.
Terminal Emulators Battle Royale – Unicode Edition!
It turns out that Unicode support in Terminals is a lot more difficult than it first appears. A quick overview of special support for Unicode characters in Terminals:
- "Wide" or "Fullwidth" characters, particularly for East Asian languages and emojis, are codepoints that occupy two cells in a terminal instead of one.
- "Zero" width combining characters used in languages such as Arabic, Hebrew, or Hindi do not occupy any cells themselves; instead, they modify the previous character.
- "Zero Width Joiner" (ZWJ U+200D) reduces and combines many codepoints into a single emoji. This is similar to combining, but encoded in a completely different way.
- "Variation Selector-16" (VS-16 U+FE0F) is a special character that, for specific "Narrow" emojis consuming one cell, causes them to become "Wide", consuming two cells.
Parallel httpx requests
Useful overview of how to perform parallel requests with httpx.
Packing Python Projects
This tutorial walks you through how to package a simple Python project. It will show you how to add the necessary files and structure to create the package, how to build the package, and how to upload it to the Python Package Index (PyPI).
niquests - A requests fork
Requests but with HTTP/3, HTTP/2, Multiplexed Connections, System CAs, Certificate Revocation, DNS over HTTPS / TLS / QUIC or UDP, Async, DNSSEC, and (much) pain removed!
Annotating args and kwargs in Python
Useful blog post that goes over the best ways to type *args and **kwargs in Python.
How We Executed A Critical Supply Chain Attack On Pytorch
"Four months ago, Adnan Khan and I exploited a critical CI/CD vulnerability in PyTorch, one of the world’s leading ML platforms. Used by titans like Google, Meta, Boeing, and Lockheed Martin, PyTorch is a major target for hackers and nation-states alike.
Thankfully, we exploited this vulnerability before the bad guys.
Here is how we did it."
Pydvice: An attempt at bringing (defadvice ...) from Elisp to Python
An implementation of Emacs Lisp's defadvice, for Python.
Sadly thr library itself is very old (14 years old at the time of recording this), and only for Python 2. There is, however, a PR in the repo that makes it work with Python 3.
Python Packaging, One Year Later: A Look Back at 2023 in Python Packaging
How to improve Python packaging, or why fourteen tools are at least twelve too many
"Join me on a journey through packaging in Python and elsewhere. We’ll start by describing the classic packaging stack (involving setuptools and friends), the scientific stack (with conda), and some of the modern/alternate tools, such as Pipenv, Poetry, Hatch, or PDM. We’ll also look at some examples of packaging and dependency-related workflows seen elsewhere (Node.js and .NET). We’ll also take a glimpse at a possible future (with a venv-less workflow with PDM), and see if the PyPA agrees with the vision and insights of eight thousand users."
A Deep Dive into the SIGTTIN / SIGTTOU Terminal Access Control Mechanism in Linux
Useful deep dive into all the issues relating to job control and how it affects a running process.