Pipe the Eye Introduces Trusted Publishers

How can you ensure that you’ve appropriately declared your project’s required dependencies? How do you determine what dependencies are missing from a third-party project that you can’t run? This week on the show, Christopher Trudeau is here, bringing another batch of PyCoder’s Weekly articles and projects.

We discuss a new Python dependency checker called FawltyDeps. The tool helps you determine if you’ve declared too few or too many packages for your project.

Christopher has brought several developer resource collections: a list of assured open-source Python packages from Google, test databases with interesting datasets, and multiple Django third-party packages.

We cover several other articles and projects from the Python community, including a news update, advice on how to pitch yourself as a guest to a podcast, how to submit articles and projects to PyCoders Weekly, PyPI’s introduction of trusted publishers and organizations, a tool for tracking package history, a pixel art paint program written in Python, and a project for efficient string matching with regular expressions.

Topics:

• 00:00:00 – Introduction
• 00:02:19 – PEP 684 – A Per-Interpreter GIL Accepted
• 00:03:59 – Python 3.10 Runtime Now Available in AWS Lambda
• 00:04:19 – PyCon US 2023 Follow Up
• 00:08:05 – Podcast Topic & Guest Submissions
• 00:13:45 – Submissions to PyCoders Weekly
• 00:16:49 – Google’s Assured OSS Python Packages
• 00:18:27 – Groovy Datasets for Test Databases
• 00:19:10 – Top 10 Django Third-Party Packages
• 00:20:27 – Video Course Spotlight
• 00:21:46 – FawltyDeps - A Dependency Checker for Your Python
• 00:26:58 – PyPI Introduces “Trusted Publishers”
• 00:28:27 – Introducing PyPI Organizations
• 00:29:02 – pypi-diff: PyPI Package History Tracking
• 00:30:29 – PyDPainter: A usable pixel art paint program written in Python
• 00:35:19 – trrex: Efficient String Matching With Regular Expressions
• 00:37:16 – Thanks and Goodbye

News:

• PEP 684 – A Per-Interpreter GIL Accepted
• Python 3.10 Runtime Now Available in AWS Lambda

Show Links:

• PyCon US 2023 - Follow Up
• The Real Python Podcast (podcast@realpython.com)
• PyCoder’s Weekly - Submit a Link
• Google’s Assured OSS Python Packages – Google publishes a list of the open-source packages that it uses and secures within its own software supply chain. The list is public, so you can take advantage of their assessment.
• Groovy Datasets for Test Databases – When you experiment with a new-to-you data science skill, you need some sort of data to work with. Why be boring? This article talks about several available datasets that you can use when you practice your coding skills.
• Top 10 Django Third-Party Packages – Will covers a list of his favorite third-party packages for Django. This includes old favorites, like Django REST framework, and lesser-known packages, like django-filter and django-environ.
• FawltyDeps: A Dependency Checker for Your Python – FawltyDeps is a new tool to help you identify undeclared and unused dependencies in your Python code, making your projects leaner and more reproducible.
• PyPI Introduces “Trusted Publishers” – PyPI package maintainers can adopt a new, more secure, OIDC-authenticated publishing method that doesn’t require sharing long-lived passwords or API tokens with external systems.
• Introducing PyPI Organizations - The Python Package Index
• pypi-diff: PyPI Package History Tracking

Projects

• PyDPainter: A usable pixel art paint program written in Python - GitHub
• trrex: Efficient String Matching With Regular Expressions

Additional Links:

• Data Is Plural
• FawltyDeps
• Quick PyDPainter Demo - YouTube
• Having a look at PyDPainter and comparing it to Deluxe Paint on the Amiga - YouTube

Level up your Python skills with our expert-led courses:

• Everyday Project Packaging With pyproject.toml
• Publishing Python Packages to PyPI
• Documenting Python Projects With Sphinx and Read the Docs

Support the podcast & join our community of Pythonistas