Python Bytes: #293 And if I pull this open source Jenga block...

<p><strong>Watch the live stream:</strong></p> <a href='https://www.youtube.com/watch?v=vzZPEeyIfSk' style='font-weight: bold;'>Watch on YouTube</a><br> <br> <p><strong>About the show</strong></p> <p>Sponsored by <a href="https://pythonbytes.fm/foundershub2022"><strong>Microsoft for Startups Founders Hub</strong></a>.</p> <p>Special guest: <a href="https://twitter.com/aganders3"><strong>Ashley Anderson</strong></a></p> <p><strong>Ashley #1:</strong> <a href="https://pypi.org/security-key-giveaway/"><strong>PSF security key giveaway for critical package maintainers</strong></a></p> <ul> <li>Giving away 4000 2FA hardware keys</li> <li>Surely a team effort but I found it via @di_codes twitter (Dustin Ingram) <ul> <li>links to previous talks on PyPI/supply chain security</li> </ul></li> <li>Interesting idea for helping with supply-chain vulnerabilities</li> <li>At least one dev pulled a critical package in response</li> <li>Previously: &lt;add some links to prior discussions></li> <li>I don’t have any critical projects</li> <li>Armin Ronacher has an <a href="https://lucumr.pocoo.org/2022/7/9/congratulations/"><strong>interesting take</strong></a></li> </ul> <p><strong>Michael #2:</strong> <a href="https://old.reddit.com/r/Python/comments/vuh41q/pypi_moves_to_require_2fa_for_critical_projects/"><strong>PyLeft-Pad</strong></a></p> <ul> <li>via Dan Bader</li> <li><a href="https://twitter.com/untitaker"><strong>Markus Unterwaditzer</strong></a> was maintaining <a href="https://github.com/untitaker/python-atomicwrites/issues/61">atomicwrites</a></li> <li><a href="https://twitter.com/balloob/status/1545509863651811333?s=12&amp;t=1zyCGa__JDTcBqaUXjEXGQ"><strong>More on how this relates to a project</strong></a> (Home Assistant)</li> <li>I wonder if PyPI will become immutable once an item is published</li> </ul> <p><strong>Brian #3:</strong> <a href="https://twitter.com/arthur_rio/status/1542563206807183362?s=20&amp;t=2HGsp6qnIA1lk2uYTuVQMghttps://fastapi-filter.netlify.app/"><strong>FastAPI Filter</strong></a></p> <ul> <li>Suggested and created by <a href="https://twitter.com/arthur_rio/status/1542563206807183362?s=20&amp;t=2HGsp6qnIA1lk2uYTuVQMg">Arthur Rio</a></li> <li>“I loved using django-filter with DRF and wanted an equivalent for FastAPI.” - Arthur</li> <li>Add query string filters to your api endpoints and show them in the swagger UI.</li> <li>Supports SQLAlchemy and MongoEngine.</li> <li>Supports operators: gt, gte, in, isnull, it, lte, not/ne, not_in/nin</li> </ul> <p><strong>Ashley #4:</strong> </p> <ul> <li>Tools for building Python extensions in Rust <ul> <li><a href="https://github.com/PyO3">PyO3</a> <ul> <li>pyo3 - Python/Rust FFI bindings <ul> <li>nice list of examples people might recognize in the PyO3 <a href="https://github.com/PyO3/pyo3">README</a></li> <li>Pydantic V2 will use it for <a href="https://pydantic-docs.helpmanual.io/blog/pydantic-v2/">pydantic-core</a></li> </ul></li> <li>maturin - PEP 621 wheel builder (pyproject.toml) <ul> <li>pretty light weight, feels like flit for Rust or python/Rust</li> </ul></li> <li>rust-numpy (+ndarray) for scientific computing</li> <li>setuptools-rust for integrating with existing Python projects using setuptools</li> </ul></li> <li>Rust project and community place high value on good tooling, relatively young language/community with a coherent story from early on</li> <li>Rust macro system allows for really nice ergonomics (writing macros is very hard, using them is very easy)</li> <li>The performance/safety/simplicity tradeoffs Python and Rust make are very different, but both really appeal to me</li> - </ul></li> </ul> <p><strong>Michael #5:</strong> <a href="https://twitter.com/wburn/status/1545820348821782528?s=12&amp;t=1zyCGa__JDTcBqaUXjEXGQ"><strong>AutoRegEx</strong></a></p> <ul> <li>via Jason Washburn</li> <li>Enter an english phrase, it’ll try to generate a regex for you</li> <li>You can do the reverse too, explain a regex</li> <li>You must sign in and are limited to 100 queries / [some time frame]</li> <li>Related from Simon Willison: <a href="https://simonwillison.net/2022/Jul/9/gpt-3-explain-code/">Using GPT-3 to explain how code works</a></li> </ul> <p><strong>Brian #6:</strong> <a href="https://www.anaconda.com/press/anaconda-acquires-pythonanywhere"><strong>Anaconda Acquires PythonAnywhere</strong></a></p> <ul> <li>Suggested by Filip Łajszczak</li> <li>See also <a href="https://blog.pythonanywhere.com/204/">Anaconda Acquisition FAQs</a> from PythonAnywhere blog</li> <li>From announcement: “The acquisition comes on the heels of Anaconda’s release of <a href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fwww.anaconda.com%2Fblog%2Fpyscript-python-in-the-browser&amp;esheet=52757715&amp;newsitemid=20220621006125&amp;lan=en-US&amp;anchor=PyScript&amp;index=3&amp;md5=dead5ee3af54b0512aa9bec13bfa3375">PyScript</a>, an open-source framework running Python applications within the HTML environment. The PythonAnywhere acquisition and the development of PyScript are central to Anaconda’s focus on democratizing Python and data science.”</li> <li>My take: <ul> <li>We don’t hear a lot about PA much, even their own blog has had 3 posts in 2022, including the acquisition announcement. </li> <li>Their <a href="https://www.pythonanywhere.com/">home page</a> boasts “Python versions 2.7, 3.5, 3.6, 3.7 and 3.8”, although I think they support 3.9 as well, but not 3.10 yet, <a href="https://www.pythonanywhere.com/forums/topic/30463/">seems like from the forum</a>. Also, <a href="https://www.pythonanywhere.com/forums/topic/14918/">no ASGI, so FastAPI won’t work, for example.</a></li> <li>Still, I think PA is a cool idea, and I’d like to see it stay around, and stay up to date. Hopefully this acquisition is the shot in the arm it needed.</li> </ul></li> </ul> <p><strong>Extras</strong> </p> <p>Michael:</p> <ul> <li><a href="https://www.devjobsscanner.com/blog/top-8-most-demanded-languages-in-2022/"><strong>Python becomes the most sought after for employers hiring</strong></a> (by some metric)</li> </ul> <p>Ashley:</p> <ul> <li><a href="https://peps.python.org/pep-0691/"><strong>PEP691</strong></a> JSON Simple API for PyPI</li> <li><a href="https://github.com/ewels/rich-codex"><strong>Rich Codex</strong></a> - automatic terminal “screenshots” </li> </ul> <p><strong>Joke:</strong> <a href="https://www.neta.mk/archive"><strong>Neta is a programmer</strong></a></p>