Replying to
@davidism my favourite example is "I can run code when you run Python during/after pip install (with extra conditions), give me remote RCE CVE rated 9+ plz". 😅
Remote
Pradyun Gedam
@pradyunsg@mastodon.social
mastodon 4.8.0-nightly.2026-10-06he/him. Probably trying to make refined sand do something useful.
Wearer of many hats in OSS spaces: CPython, pip, packaging, TOML, Furo, Sphinx extensions, Executable Books and more.
683 Followers
218 Following
9 Posts
Joined November 07, 2019
GitHub:
Website:
Replying to
@webology@mastodon.social @miketheman@hachyderm.io
https://peps.python.org/pep-0541/#invalid-projects
[...] considered invalid and will be removed from the Index: [...] project uses obfuscation to hide or mask functionality
https://policies.python.org/pypi.org/Acceptable-Use-Policy/
We do not allow content or activity on PyPI that: [...] uses obfuscation techniques to hide or mask functionality;
Replying to on mastodon.social
@andrewnez@mastodon.social "the supply chain sees a directed acyclic graph"
No... Wait...
"with cycle detection issues"
It's only the second paragraph, I shouldn't be laughing this loud already. 😂
Replying to
@andrewnez@mastodon.social where do I file issues to request extending the specification? There's this sandwich chutney I make myself, and the SURL specification doesn't cover it.
@pfmoore I end up putting the CSS and JS files next to html file, and pull the in via link and script.
Replying to
@hynek@mastodon.social Depending on what kind of interest / investment / effort you're interested in treating this as, hiring a part-time editor is an option.