#380 Debugging with your eyes

Topics covered in this episode:


NumFOCUS concerns
leaping pytest debugger llm
Extra, Extra, Extra,
PyPI has completed its first security audit
Extras
Joke

Watch on YouTube

About the show

Sponsored by us! Support our work through:


Our courses at Talk Python Training
The Complete pytest Course
Patreon Supporters


Connect with the hosts


Michael: @mkennedy@fosstodon.org
Brian: @brianokken@fosstodon.org
Show: @pythonbytes@fosstodon.org


Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesdays at 11am PT. Older video versions available there too.

Finally, if you want an artisanal, hand-crafted digest of every week of

the show notes in email form? Add your name and email to our friends of the show list, we'll never share it.

Brian #1: NumFOCUS concerns


Suggested by Pamphile Roy
Write up of the current challenges faced by NumFOCUS, by Paul Ivanov (one of the OG of Scientific Python: Jupyter, Matplotlib, etc.)

Struggling to meet the needs of sponsored and affiliated projects.
In February, NumFOCUS announced it is moving in a new direction.
NumFOCUS initiated an effort to run an election for open board seats and proposed changing its governance structure.
Some projects are considering and actively pursuing alternative venues for fiscal sponsorship.
Quite a bit more detail and discussion in the article.

NumFOCUS covers a lot of projects

NumPy, Matplotlib, pandas, Jupyter, SciPy, Astropy, Bokeh, Dask, Conda, and so many more.



Michael #2: leaping pytest debugger llm


You can ask Leaping questions like:

Why am I not hitting function x?
Why was variable y set to this value?
What was the value of variable x at this point?
What changes can I make to this code to make this test pass?



Brian #3: Extra, Extra, Extra,


2024 Developer Summit

Also suggested by Pamphile, related to Scientific Python
The Second Scientific Python Developer Summit , June 3-5, Seattle, WA
Lots of great work came out of the First Summit in 2023

pytest-regex - Use regexs to specify tests to run

Came out of the ’23 summit
I’m not sure if I’m super happy about this or a little afraid that I probably could use this.
Still, cool that it’s here.

Cool short example of using __init__ and __call__ to hand-roll a decorator.
ruff got faster


Michael #4: PyPI has completed its first security audit


Trail of Bits spent a total of 10 engineer-weeks of effort identifying issues, presenting those findings to the PyPI team, and assisting us as we remediated the findings.
Scope: The audit was focused on "Warehouse", the open-source codebase that powers pypi.org
As a result of the audit, Trail of Bits detailed 29 different advisories discovered across both codebases. When evaluating severity level of each advisory, 14 were categorized as "informational", 6 as "low", 8 as "medium" and zero as "high".


Extras

Brian:


pytest course community to try out Podia Communities.
Anyone have a podia community running strong now?

If so, let me know through Mastodon: @brianokken@fosstodon.org

Want to join the community when it’s up and running?

Same. Or join our our friends of the show list, and read our newsletter. I’ll be sure to drop a note in there when it’s ready.



Michael:


VS Code AMA @ Talk Python [video]
Gunicorn CVE
Talk submissions are now open for both remote and in-person talks at the 2024 PyConZA? The conference will be held on 3 and 4 October 2024 in Cape Town, South Africa. Details are on za.pycon.org.
FlaskCon 2024 will be happening Friday, May 17 inside PyCon US 2024. Call for proposals are now live!


Joke: Debugging with your eyes