๐ก Python radar - November 2022
A personal selection of Python-related news and projects that caught my attention this month (note: leading emojis are mine).
๐๏ธ Coping strategies for the serial project hoarder (simonwillison.net)
How to organize your code and development practices to work on multiple projects at once? This developer explains how he manages to maintain...185 projects! It's extreme, for sure, but these are great tips that can apply even to a single project! Believe me!
๐ PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack (blog.phylum.io)
We don't talk enough about security here, so to fix that, here's an interesting article to understand how malicious Python packages are spreading on PyPI lately. Quick tip: check the spelling of packages in your setup.py or requirements.txt.
๐ก๏ธ Investigating a backdoored PyPi package targeting FastAPI (securitylabs.datadoghq.com)
Another compromised package on PyPI linked to a popular project (fastapi-toolkit). If this continues, we might create a "security" section for these updates...
๐ google/latexify_py: Generates LaTeX math description from Python functions. (github.com)
In a completely different style, hereโs a small package for visualizing and documenting your Python functions in mathematical form in your notebooks, quite impressive!