Fireside chat about advanced Python development
summary
Covers concrete tradeoffs: emergency Python 3.8/3.9 release cadence after two CVEs and why one float bug is realistically a crash not full remote code execution; new official PyPI logs exposed as a BigQuery public dataset; attacks where public packages squat internal names and mitigations like version pinning and using pip compile to produce reproducible, hashed lockfiles; why pinning formatter versions matters for Black (LL(1) parser vs Python’s new PEG parser); and practical tooling: VS Code remote debug, pdb, rich for terminal UI.
AI-written summary · about
chapters (8)
- 0:00Start
- 5:48Most Popular Version of Python
- 6:51Pipi Stats
- 11:39Pip Tools
- 19:04Sloppy Programming
- 23:36Remote Development
- 26:53Security Focused Static Analysis Tools
- 32:01Is There a Way To Report Suspicious Packages on Pi Pi
