Profile avatar
owen7ba.bsky.social
Coder into Python and Rust. Interested in all things software engineering, data science, and computer graphics.
28 posts 156 followers 567 following
Regular Contributor
Conversation Starter

💻 aquarel: 759⭐ Sometimes I wish your matplotlib charts looked more polished… 🎨

Just released uv-secure 0.9.0 to PyPi. It now distinguishes direct dependencies from transitive dependencies so you can filter the checks to direct dependencies if you like. Some minor breaking changes to the configuration file structure - see release notes for the updates. #Python

uv is one year old today. Hard to believe its only been a year. The growth, adoption, and impact surpassed my wildest expectations. Happy birthday, uv! 🥳

uv-secure is now on conda-forge. If you're a conda fan too, I suggest installing as a @prefix.dev pixi global tool. I'd like to expand the scope of uv-secure to scan pixi.lock files too... unfortunately @conda-forge.org has no API for listing known package vulnerabilities like PyPi that I know of.

Released a new Python package today. Hope it helps some of you out! github.com/mikeckennedy... #python

Just released uv-secure 0.8.0 to PyPi - more user facing features this time! You can now set optional code maintainability thresholds to flag dependencies whose release is too old or has been marked as yanked on PyPi. Also package names and versions also hyperlink appropriately. #python

If someone is quick you can give pip-audit its thousandth star github.com/pypa/pip-audit #python

I released uv-secure 0.7.1 to PyPi - minor UI changes but I've now integrated the hishel package for caching API requests which can give a significant speed boost when running uv-secure multiple times. Big thanks to github.com/Vizonex for contributing too! I'd love even more contributors. #python

I just discovered the hishel #python package for persistently caching httpx requests. Really pretty docs: hishel.com sync and async API, lots of supported backends for caching to, and very configurable. Thought it might interest you @mkennedy.codes / @brianokken.bsky.social

I've released uv-secure 0.6.0 to PyPi. Pretty minor release this time - I've added hyperlinks for vulnerability aliases if you enabled aliases, fixed some documentation, and added a running in development guide. I'll be trying to make it easier for new contributors to join going forward. #python

I recently noticed this github.com/mufeedvh/cod... #rust CLI app with #python bindings. I use LLMs for code help often but it's onerous to share enough context about my repos for them to help. code2prompt converts the whole file structure/contents to a single prompt you can paste. @pythonbytes.fm

Python Bytes #416: A Ghostly Episode with @mkennedy.codes and @brianokken.bsky.social pythonbytes.fm/episodes/sho...

Achievement unlocked - triple shout out on Python Bytes: www.youtube.com/live/gZUpvyR... Thanks @pythonbytes.fm ! #python

I've released uv-secure 0.5.0 on PyPi. It now has the same vulnerability table format and formatting options (--aliases and --desc) as pip-audit. Except it leverages @willmcgugan.bsky.social 's Rich to look prettier (and even has clickable hyperlinks if your terminal supports it). #python

We now have first-class documentation for using uv with AWS Lambda docs.astral.sh/uv/guides/in...

I just released uv-secure 0.4.1 which adds support for scanning uv generated requirements.txt files in addition to uv.lock files for vulnerabilities. pypi.org/project/uv-s... #python CC @mkennedy.codes

Just released uv-secure 0.3.1 - pypi.org/project/uv-s... - now with hierarchical configuration that should work just like Ruff's for proper mono repo support. Albeit the only configuration is which vulnerabilities to ignore at present... I'm open to feature requests! Also now 100% test cover #Python

youtu.be/w4ftxgdIa_4?... I was inspired by some of the AI generated code related songs I heard on @pythonbytes.fm so I've tried my own hand at making a very angry server singing the HTTP status codes.

Introducing @talkpython.fm "Episode Deep Dives" I am personally enjoying all the episode details, tools, and back stories revealed. Even I as the host forget everything we've covered. They take some effort to create, so please let me know if you enjoy them. Try it at talkpython.fm/485

I just created a new blog post here: owenlamont.github.io/home/blog/20... about my learnings from setting up a GitHub workflow to test a #python package using uv, pytest, and coverage across multiple platforms and python versions with a combined coverage report.

Just released version 0.2.2 of uv-secure pypi.org/project/uv-s... now with support for toml configuration including pyproject.toml - still got lots of catching up to do with pip-audit but happy to have one small feature they don't yet. Hope to support hierarchical config for mono repos soon. #python

Hi @mkennedy.codes / @brianokken.bsky.social - I've recommended other devs packages to mention on @pythonbytes.fm but I finally have my own to share: pypi.org/project/uv-s... for scanning uv.lock files for vulnerabilities. It's like a more specialised version of pip-audit but easier to use with uv.

Proud to announce my first PyPi #Python package: pypi.org/project/uv-s... A CLI (and pre-commit runnable) app for scanning your uv.lock files for known vulnerabilities. There's plenty more features to add, but I hope it's useful already.

Everyone who just joined and is looking for Python people to connect with, I made a "starter pack" with many of the fun accounts. Add them to your followers list, #python: go.bsky.app/3Uzma1g