Relative “Dependency Cooling” in pip v26.0 with crontab
WARNING: Most of this blog post is a hack, everyone should probably just wait for relative dependency cooling to come to a future version of pip. pip v26.0 added support for the --uploaded
Python Software Foundation Security Developer. urllib3 maintainer. Writes about Python and open source security.
https://sethmlarson.devWARNING: Most of this blog post is a hack, everyone should probably just wait for relative dependency cooling to come to a future version of pip. pip v26.0 added support for the --uploaded
I played “The Legend of Zelda: Link’s Awakening” for the first time in January and early February. The game took me 13 hours to complete the main story and a few optional side quests. I started playin
The os.path.commonprefix() function has been an API in the Python standard library for at least 35 years (since February 1991) and in that time has been confusing users and creating security issues, e
Generative AI tools becoming more common means that vulnerability reports these days are loooong. If you're an open source maintainer, you unfortunately know what I'm talking about. Markdown-formatted
This is a follow-up to “New era of slop security reports for open source”. Matplotlib, the unfortunate target of this new type of harassment, publishes a clear generative AI use policy. That boundary
You don't need analytics on your blog, but maybe you need analytics for your cooler? The last place you’d expect to find analytics. Last Sunday was the Superbowl in the USA, where former Vikings
The Nintendo e‑Reader was a peripheral released for the Game Boy Advance in 2001. The Nintendo e‑Reader allowed scanning “dotcode strips” to access extra content within games or to play mini-games. To
Two years ago I discovered a potential foot-gun with the Python standard library “re” module. I blogged about this behavior, and turns out that I wasn't only one who didn't know this: The article was
mGBA requires a GBA BIOS file to connect to Dolphin emulator via link cable emulation, which isn't documented clearly.
urllib3 has a new lead maintainer in 2025, Illia Volochii, who now blogs about the project. Follow his blog for urllib3 updates.
Masahiro Sakurai has used flat, stock photo-style food images as a consistent artistic choice across 8 games spanning 25 years, starting with Super Smash Bros. Melee.
Epilogue's new SN Operator ($60) lets collectors legally dump and archive their SNES/Super Famicom game ROMs for preservation and emulation.
A Python tool called "sugarcookie" uses Pillow to automatically cut spritesheets into individual sprites based on mask colors and size constraints.