Forking confusing: Vulnerable Rust crate exposes uv Python packager

A vulnerability in the popular Rust crate async-tar has affected the fast uv Python package manager, which uses a forked ...
SD Times

ActiveState Launches Python Package Manager Index (PyPM Index)

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...

Python Software Foundation: Equal Opportunity More Important Than US Funding

The PSF forgoes potential funding because the requirements explicitly prohibit programs promoting equal opportunity under DEI ...

Python rejects $1.5M grant from U.S. govt. fearing ethical compromise

The Python Software Foundation (PSF) has withdrawn its $1.5 million grant proposal to the U.S. National Science Foundation ...
Business Wire

Anaconda’s Embedded Repository and Package Manager in Snowpark for Python to Enter Public Preview

AUSTIN, Texas--(BUSINESS WIRE)--Anaconda Inc., provider of the world’s most popular data science platform, today announced that Snowpark for Python, an Anaconda-embedded repository and package manager ...
ZDNet

Malicious Python libraries targeting Linux servers removed from PyPI

A security firm found three malicious Python libraries uploaded on the official Python Package Index (PyPI) that contained a hidden backdoor which would activate when the libraries were installed on ...