urllib3, #Python 's most-used HTTP client library, is fundraising to add HTTP/2 support and ensure long-term sustainability of the project.

Retweets are appreciated 🙏

sethmlarson.dev/urllib3-is-fun…

Who out there is using Python and developing or deploying with continer images? I'd love to have a chat about your workflow, especially if you're doing anything data science related.

Machine learning platforms, including pre-trained models, should be treated like other forms of critical software infrastructure such as programming languages, protocols, operating systems, and databases.

Open source is the best way to maintain a level playing field.

So goes the leader, so goes the culture.
So goes the culture, so goes the company.

Very nice talk by Mihai Maruseac which proposes already existing solutions such as SLSA or sigstore to secure AI/ML the same way as traditional software PackagingCon

If you want to know how much engineering effort it takes to keep container images vulnerability free, check Adrian Mouat talk on Wolfi OS used in Chainguard ⛓️ images. PackagingCon #Security

I will talk tomorrow at PackagingCon about the open source tooling to protect AI supply chain as mentioned in the linked blog

'We’re building on our prior work with the OpenSSF to show how ML model creators can and should protect against ML supply chain attacks by using #SLSA and #Sigstore ' - security.googleblog.com/2023/10/increa…

📦 Great talk by Bas Zalmstra with interesting stuff. It's definitely worth checking out what's happening at prefix.dev. PackagingCon

🔑 Kairo Araujo and Lukas speaking about RSTUF at PackagingCon

I started a podcast with Pablo Galindo Salgado about #Python internals. We call it 'core.py', hope you like it!

The first episode is about the core sprint in Brno where we spent last week.

podcasters.spotify.com/pod/show/corepy

We are ready to announce rip – a Rust Language crate to resolve and install Python packages from Python Package Index. It builds on our work on resolvo (a fast SAT solver) and rattler. We are deeply integrating rip into pixi to unify the conda & Python Package Index ecosystems.

prefix.dev/blog/introduci…

The new CISA #JCDC guideliness on 'Improving Security of Open Source Software in Operational Technology and Industrial Control Systems' came together with input from Google's Open Source Security Team (GOSST)

cisa.gov/sites/default/…

Open source AI models will soon become unbeatable.
Period.

The blockchain meetups we organize in Brno are getting fuller every month! 🙏

This time, we have a talk on the topic #web3privacy by Václav Pavlín! 🔥

cat /proc/cpuinfo 🤣🤣

Ve čtvrtek budu povídat o privacy/soukromí na #blockchain #meetup v Brně

meetup.com/blockchain-brn…

Bude to česká rozšířená kopie přednášky, kterou jsem měl na Web3Privacy Now / ETHRome 🇮🇹!

A bude Waku swag:D

New #PyPI dataset, who dis?

github.com/sethmlarson/py…

If you're wondering why we are a bit quiet - it's because we're heads down coding and refactoring. We're making our package resolver (in Rust) totally generic so that it can handle other ecosystems as well.
Starting with Python Package Index ... code and pixi integration coming soon!

We’re thrilled to announce that RSTUF, Repository Service for TUF, has joined the OpenSSF as a Sandbox Project #RSTUF helps address a major challenge: securing software repositories, particularly ensuring the integrity of software updates openssf.org/blog/2023/08/3…