There are 580,000 Python libraries on PyPi. But you only need 11 for quant finance:

Well it doesn't LOOK like much but got a ton of Django and PyPI updates done to https://t.co/ofebcJfalE Moved the homepage to Tailwind and spruced up this page with some new Tailwind design and copy. Thoughts?

I was working on a project and needed a Python-native way to interact with the Strapi API but realized that the official client only has a TS implementation. So I wrote one in Python. Clean interface, easy to use. PyPI: https://t.co/2ACXjhkJks GitHub: https://t.co/HSmMOEIGd5 .

30 low-high level honeypots in a single PyPI package https://t.co/sH0hx43Dcp

Interesting to see Reversing Labs poking at my tokens I didn't know a malware unpacker packer would go poke at keys lol. More so that they're watching/actively scanning PyPI and NPM!

Wow, PyPI, I really got it, you don't need to send me 40+ emails because of each workflow run that has happened :(.

🎉 Just published official @XposedOrNot clients on npm and PyPI. You can now check email addresses and domains for breach exposure directly in your code.

Gemini 3 and I designed this general REPL bridge library yesterday called brepl. In one hour this morning, Claude Code, Gemini, and I made the library and pushed it to PyPI. With brepl, you can get LLMs (any MCP clients) to use CLIs and TUIs and get their autocompletes. What

Wow! WxData has surpassed 1,000 downloads on PIP (PYPI) in the first 2 weeks after release! This is even a faster takeoff than FireWxPy in October 2024. Definitely a promising sign early on for potential package popularity. #python #wxdata #dataengineering #datascience #weather

The Python Software Foundation is now asking for donations with a self-aware and passive aggressive banner at https://t.co/OER27CzHdg and https://t.co/mReJ68N6Hv “keep Python and PyPI free, forever”, so you are going to start selling a “Python Pro” otherwise?

📊 Thousands of malicious packages have been found in PyPI and npm. Attackers flood the software supply chain with fake and hijacked projects, exploiting trust in familiar libraries. Always verify, never assume. #CybersecurityBytes Src: Datadog, 2025 State of DevSecOps Report

🚨 GlassWorm Returns! 24 NEW malicious Python packages on PyPI! Web developers and Python users, be EXTRA cautious! Visit @TheHackerNews for more info!

ReversingLabs researchers have discovered vulnerable code in legacy Python packages that could make possible an attack on the Python Package Index (PyPI) via a domain compromise. https://t.co/WxgPGBMKt1

[Wagtail CMS News] Our package maintainers were productive in 2025 Analysis shows the Wagtail ecosystem produced 714 package releases in 2025, with maintainers compiled using PyPI BigQuery and PyPI page scraping due to incomplete metadata. #djangonews https://t.co/uHdp49kCSd

SBOMでの脆弱性管理は不可能に近いと思う。一方で昨今脅威を増しているnpmやPyPIなどのパッケージ侵害時には、その有無を特定するのに非常に効果的なので、そういう使い方をしてほしい。 https://t.co/TjbxkK1UMT

There are 580,000 Python libraries on PyPi. But you only need 11 for Algorithmic Trading:

Utility for securely publishing Python packages to PyPI https://t.co/hirWBNvaxr

Day 11 was a full debugging day 😅 Discovered my audit app doesn't detect outdated packages at all. Spent the ENTIRE day: - Parsing requirements.txt for versions - Hitting PyPI API for latest versions - Building comparison logic - Testing edge cases No feature shipped. Just bugs

It's... been a while since the last objection release got tagged. We finally landed a 1.12 release today which also means pypi is up to date again, and for the foreseeable future! Work never really stopped, and plenty of bug fixes are included. More in 🧵 https://t.co/6WV5eUyck5