Viewing profile — oblvious-earth

OpenAI just acquired Astral who have an index service called pyx, so they would have a step up. My understanding though is most corporations that take security seriously either bui…

It does not work EXACTLY how pip works, big differences are covered here: https://docs.astral.sh/uv/pip/compatibility/ Some of these are uv following the standards while pip is sti…

PDM has plugins, such as being able to invoke conda commands: https://github.com/pdm-project/awesome-pdm Otherwise I don't know what they're talking about, it is indeed a Python pa…

If you're concerned about dependency confusion attacks you should host your own index and vet what goes on to it. But there is a better solution coming, PEP 708 was developed for t…

No, it looks like it's been available on GitHub for a while, but development wasn't done there: https://star-history.com/#nginx/nginx&Date

Thanks for the update, unfortunately I can no longer edit my top comment or title to reflect this. Would be happy for admin to do so, if that's something that's done on this site.

The original text stated: > I don’t know much about voting systems, but I know someone who does. Unfortunately he’s currently banned. Maybe we can wait until his 3-month ban expire…

pip will not do that, it will attempt to use the latest version under the user requirements, only if there is a conflict between two packages will it backtrack on old versions of a…

I would say, as someone who works on performance of pip, no one else was able to reproduce OPs severe performance issue, not saying it didn't happen, just it was an edge case on sp…

Write an issue on their GitHub if you don't already see one, they're very responsive

> I doubt the typical LSP servers will be aware of dependencies specified in that way and so won't offer autocompletion etc for those libraries. Given this is a recently accepted s…

Maybe it’s the fact it can be done with multiple operators and strong encryption that is hard to grok, but at least here is a very simple example of a limited partially homomorphic…

> The people who say "just use pip and venv" don't understand the issue. The people saying that say that because it works for them and it solved their problems. > setuptools is som…

Is this comparable to Ibis or is it something that would be a backend for it?

Discussion on Python discuss: https://discuss.python.org/t/deprecating-utcnow-and-utcfromt... I'm the one arguing against this move, I've already made my thoughts clear that it's a…

> Python doesn't have a standards document. It has a reference implementation that defines the language. That's not quite strictly true, Python does have a documented "Language Ref…

The main difference now is there is an actual standard rather than a de facto tool that becomes the standard. The idea is that different tools may rise and fall in popularity but t…

> It's a single script It's over 1200 lines of code, it's not like it's 100 lines of code and can fit on a single screen > Globals are fine--they're even marked as such I would arg…

> I don't think globals are so awful for certain things. I prefer a more functional approach where you have simple composable standalone functions instead of classes. Obviously cla…

Quickly skimming some points that would irratate me if I had to maintain this script: * Importing Paramiko but regularly call `ssh` via subprocess * Unused functions like `execute_…

In practice wouldn't this just mean part nationalizing the bank so you can keep paying the salaries of all the various bank tellers, IT staff, and accountants to allow the deposito…

> This is true, but now you're explicitly depending on all of your transitive dependencies They're constraints not dependencies they don't need to be installed and you can just upd…

The simple solution to this with pip is constraints file: pip install pip freeze > constraints.txt And now in any new environment: pip install -c constraints.txt Now you can instal…