Python Tooling Blog
RSS-
Locking dependencies for PEP 723 single-file scripts in May 2026
PEP 723 made single-file Python scripts shareable. Reproducibility is still half-solved. Here's what actually works in May 2026.
-
Ruff Already Rewrites Your Python to Be More Idiomatic
Ruff's FURB rules catch non-idiomatic patterns and auto-fix them into cleaner Python. 36 rules, all with auto-fix, and most projects haven't enabled them.
-
Lightning Got Owned: When `import lightning` Steals Your Credentials
Malicious lightning PyPI versions 2.6.2 and 2.6.3 shipped a daemon-thread payload that runs on import, steals credentials, and worms into npm.
-
What Reddit taught me about why people switch to uv
A 476-upvote r/Python thread asked 'But really, why use uv?' The OP was a casual user who only installs packages a few times a month. The comments convinced them anyway.
-
ty and pyrefly find different bugs
Running ty 0.0.32 and pyrefly 0.62.0 on Textualize/rich raised 49 errors from ty and 20 from pyrefly. The 2.5x gap mostly disappears once you account for how each tool handles `# type: ignore` comments. Each tool also catches real bugs the other misses.
-
Did pip 26 close the gap with uv?
pip 26.0 shipped two flagship uv features in January 2026: PEP 723 inline scripts and --uploaded-prior-to. Here's where the actual gap sits in April 2026.
-
How Astral Uses Its Own Tools
A teardown of the ruff, ty, and uv repositories shows how Astral wires its own toolchain into the projects that produce it.
-
Astral told you how they secure uv. Here's what to keep.
Astral published a detailed writeup of how they secure their org. Most of it is team-scale GitHub policy. Four things translate directly to a solo Python maintainer.
-
PyPI's Second Audit Found 14 Bugs. Two Remain.
Trail of Bits audited PyPI. Twelve issues were patched, two accepted. The accepted ones tell you more about PyPI than the twelve that were fixed.
-
Your Python Wheels Still Target 2009 CPUs
The wheel format cannot describe a CPU's instruction set, so default wheels compile for the lowest common denominator. Wheel variants would end that.