You can read about uv audit here: docs.astral.sh/uv/reference...
The uv-secure README lists a few alternative tools if uv audit doesn't work for you:
github.com/owenlamont/u...
uv-secure was my first PyPi package and a great learning experience, but have other tools I want to work on now.
Posts by Owen Lamont
uv now has an audit command for checking your dependencies for vulnerabilities so I archived my uv-secure package which was a work-around before audit existed. Thanks to everyone that took the time to raise issues for uv-secure. Please check the README for alternative tools. #python #devsecops
Available from:
www.npmjs.com/package/@owe...
pypi.org/project/ryl/
crates.io/crates/ryl
I just released ryl 0.6.0 to crates/pypi/npm with new automatic fixes for spacing around:
- braces
- brackets
- commas
- comments-indentation
Also fixed a bug with top level list elements (thanks for raising github.com/frague59 )
#rust #yaml #linter
You can now use Ratatui in Python! ππ₯³
π PyRatatui β Python bindings for @ratatui.rs
π― Build high-performance TUIs in Python with 35+ widgets, async & effects
π¦ Backed by Rust via PyO3
β GitHub: github.com/pyratatui/py...
#rustlang #ratatui #tui #python #library #bindings #pyo3 #terminal
You can find here:
- pypi.org/project/ryl/
- crates.io/crates/ryl
- www.npmjs.com/package/@owe...
Screenshot of ryl automatically fixing yaml issues
I just released ryl 0.5.0 - I originally aimed for feature parity with yamllint but I'm now trying to follow ruff and rumdl and start implementing automatic fixes (where obvious) and hopefully auto formatting eventually. More to come soon. #yaml #linter #rust
ryl npm page screenshot
After several false starts ryl 0.4.4 is now available on npm. I'd never published an npm package before and had no idea how much harder it is to publish an executable CLI wrapper there compared to PyPi, but it's finally up. Thanks to @biomejs.dev and esbuild for the inspiration. #yaml #linter
I setup a GitHub workflow / Python script to remove all pins like that, uv sync update, then repin from the lock file (and check lints and tests still pass). That's what I tried on my aiomoto repo anyway that pins many dependencies like that.
Screenshot of ryl 0.4.0 on crates.io and PyPi
I just released ryl 0.4.0 to crates.io and PyPi. This version adds support for toml configuration files (including pyproject.toml files). It also adds migrate functions to convert your old yaml configuration files to toml. yaml config is still supported though of course. #python #rust #yaml
If anyone tries switching from yamllint to ryl and encounters any behavior differences (other than ryl being much faster π) Please let me know (especially for public repos I can reproduce issues on)! I'll do my best to get ryl to feature parity with yamllint.
ryl 0.3.5 PyPi and Crates.io page
I just released ryl 0.3.5 to PyPi and Crates.io - (now tested against several larger repos that were heavy yamllint users) and resolved several bugs and behaviour discrepancies with yamllint. #python #rust #yaml
Screenshot of uv-secure maintenance issue color highlighting
I just released uv-secure 0.17.0 to PyPi - this version has a couple of improvements:
1. Better color highlighting for dependencies failing maintenance constraints
2. A new --fix option and toml config to auto fix unnecessary package/vulnerability ignores.
#python #cybersecurity #devsecops
Benchmark plot showing ryl running faster than yamllint across different file numbers and sizes
Just resurrected an old side project. This is ryl 0.3.4, a rewrite of yamllint in Rust released on PyPi. It aims to be a drop in replacement for yamllint, parsing and discovering files the same. It's not been used in anger and I'm a Rust newbie but please try it and raise bugs! #python #rust
GitHub Copilot in Zed β officially supported through our partnership with GitHub. π€
github.blog/changelog/20...
Split diffs are now the default in Zed. Simple feature, complex implementation.
Cole wrote about what it took to get alignment right on every keystroke: zed.dev/blog/split-d...
I just released pyglobegl 0.8.0 to PyPi to support the Hex Bin layer. This layer was a challenge as globe.gl relies on frontend JavaScript functions being passed to do hex height and colour calculations. I'm trialling an integration with #pyscript to let you write those functions in #python #datavis
Screenshot of uv-secure showing tabular output listing detected vulnerabilities and the new Severity column
After some neglect, I just released uv-secure 0.16.0 to PyPi which adds severity-aware scanning, optional ignore unfixed vulnerabilities, stricter unused-ignore detection (with opt-out), and optional self-check of installed uv-secure. Also fixed and improved the JSON output. #python
I just released pyglobelgl 0.7.0 to PyPi. This adds support for the Heatmaps, Hexed Polygons, Tiles, Particles, Rings and Labels globe.gl layers. Remaining layers are a bit trickier to map to a #Python API so they'll take a bit longer. #datavis
I just released pyglobegl 0.6.0 to PyPi. Now with support for the globe.gl paths layer and optional GeoPandas / MovingPandas integrations. #Python #DataVis
UM WHAT.
github.com/lucasgelfond...
This is very very good. I feel bad cause i like the homebrew people a lot, but WOW.
Just release pyglobegl 0.5.0 to PyPi. Now supporting the globe.gl polygon layer for choropleth maps. Also proper programmatic updates to graphics from the Python side (so you can tie Python call backs to graphic changes). Lots of API changes and stronger typing (some breaking - sorry!). #Python
Screenshot from pyglobegl showing a night time globe with colored arcs
I just released pyglobegl 0.4.0 to PyPi. Now exposing the globe.gl arcs layer API. Also integrated with Pandera for better validation when using the GeoPandas helper functions and enhanced the image comparing automated tests to be less flaky. Still lots more globe.gl APIs to implement. #Python
Jupyter notebook showing the pyglobegl widget rendering of a 3D Earth with bar plots
Just released pyglobegl 0.3.0 to PyPi, this is my new personal project to create an anywidget wrapper for the very cool looking globe.gl library. Now you can start using globe.gl with Python bindings in all your notebook environments. Huge amount left to do but it's progressing pretty fast. #Python
Screenshot of aiomoto PyPi page
Just released aiomoto 0.3.0 to PyPi - this version adds support for sharing an aiomoto server between multiple processes. #Python
Screenshot of aiomoto version 0.2.0 PyPi page
I just released aiomoto 0.2.0 to pypi. Now with support for moto server mode and patches recent versions of aiobotocore / aioboto3 / s3fs / pandas / polars - so you can use mock S3 buckets automatically without wrangling test endpoints in your prod code. #python
Years ago you did an episode on Python for spatial data when I suggested that (Thanks for that!). But some follow up in that area would be really cool. Would love to hear an interview with Qiusheng Wu, the leafmap creator for example. leafmap.org
Hi podcast fans, I'm looking for recommendations on topics to cover for 2026 on @talkpython.fm. What topics do you want to see me cover?
Iβm always interested in 3D graphics and visualisation so something about that. Things like Python coding for Blender, and I believe Unreal engine has had Python support for a long time. I donβt know if people are doing cool things with that.