May 2023

PyPI will require all users who maintain projects or organizations to enable one or more forms of two-factor authentication (2FA) by the end of 2023.

The technology, as it’s currently imagined, promises to concentrate wealth and disempower workers. Is an alternative imaginable?

We hope that by sharing our work with the open-source community, we can make the Rust ecosystem even safer and more secure for everyone.

The PSF received three subpoenas from the US Department of Justice for PyPI user data in March and April of 2023.

PyPI has removed support for uploading PGP signatures with new releases.

When you use the Rust programming language toolchain, usually through a cargo command, it needs a place to store a bunch of config files, caches, and the cargo binary itself. By default, that place will be your operating system’s user directory, which I’m going to refer to as $HOME or ~, where it will put a .cargo folder.

Read the official announcement on the PyPI blog as well! For the past year, we’ve worked with the Python Package Index to add a new, more secure authentication method called “trusted publishing.” T…

PC computing rests heavily on Intel Architecture processors with an enormous installed base, and cloud computing is synonymous with Intel Architecture.

Or money. Or love. What do I know?

Europe's standards bodies have no functional relationships with Open Source charities and do not consult them.

Summary of the changes and new features merged in the Linux kernel during the 6.3 development cycle

Sourceware.org, which has long played host to many important projects, has announced that it has become a member project of the Software Freedom Conservancy — a move that has been in the works for some time. Recent discussions have inspired the Sourceware volunteers to think carefully about the future and succession of the leadership for this important hosting project. By joining SFC, Sourceware gains access to strategic advice and governance expertise to recruit new volunteers and raise funds to support work on Sourceware infrastructure. See this article for more background on those recent discussions.

Contribute to jackdewinter/pymarkdown development by creating an account on GitHub.

After reviewing the proposed Cyber Resilience Act and Product Liability Act , the PSF has found issues that put the mission of our organizat...

Tech CEOs want us to believe that generative AI will benefit humanity. They are kidding themselves

Last year, our mighty donor base generously donated a record-breaking amount to the Thunderbird project! Here's our 2022 Financial Report.

The latest major version of the GNU Compiler Collection (GCC), 13.1, was released in April 2023. Like every major GCC release, this version will bring many

Linters are tools that analyze a program's source code to detect various problems such as syntax errors, programming mistakes, style violations, and more. They are important for maintaining code quality and readability in a project, as well as for catching bugs early in the development cycle. Last year, a new Python linter appeared: Ruff. It's fast, written in Rust, and in less than a year it has been adopted by some high-profile projects, including FastAPI, Pandas, and SciPy.

Last week, the open-core team chat platform Mattermost announced that “Mattermost Cloud Free will no longer be offered after July 26, 2023.” This likely came as an unpleasant surprise to users on that plan, as less than a month before, Mattermost’s pricing page featured the promise that the Cloud Free …

As should surprise no one, based on my past projects of running my own autonomous system , building my own Internet Exchange Point , and bui...

Our Prossimo project has historically focused on creating safer software on network boundaries. Today however, we're announcing work on another critical boundary - permissions. We're pleased to announce that we're reimplementing the ubiquitous sudo and su utilities in Rust. Sudo was first developed in the 1980s. Over the decades, it has become an essential tool for performing changes while minimizing risk to an operating system. But because it's written in C, sudo has experienced many vulnerabilities related to memory safety issues.

Getting a externally-managed-environment/PEP 668 error when you pip install? Here’s how to fix it.