Journal

All Posts

• Taming the Python Chaos: Linting & Formatting with Ruff

  January 30, 2025 · ci-cd code-quality development

  What linting and formatting actually are, why they matter (a lot!), and how the speedy tool Ruff can save your Python project (and your sanity).

• Handling Sensitive Data Securely Within Your Python Library

  January 29, 2025 · development library python

  Handle sensitive data in Python libraries securely. Learn best practices for managing API keys, passwords, PII, and other secrets without exposing them in code.

• Decoding Library Updates: Understanding Semantic Versioning (SemVer)

  January 28, 2025 · dependencies development library

  Guide to Semantic Versioning (SemVer) for Python library authors. Understand MAJOR.MINOR.PATCH rules to communicate changes and manage dependencies.

• Dependency Security: Managing Vulnerabilities with pip-audit

  January 27, 2025 · dependencies development library

  Your library relies on packages. Learn how to use pip-audit to scan your dependencies for known security vulnerabilities and keep your users safe.

• The Center of Your Python Project: Understanding pyproject.toml

  January 26, 2025 · development library packaging

  From setup.py chaos to pyproject.toml clarity. Learn why it exists, how it standardizes Python packaging/tool config via PEPs (518, 517, 621), and its anatomy.

• Bandit Security Rules: Finding Common Python Security Issues

  January 25, 2025 · development library python

  Learn how to use Ruff's Bandit integration to automatically scan your Python code for common security pitfalls through static analysis.

• Don't Forget the Fine Print: Licensing Your Python Library

  January 24, 2025 · compliance dependencies development

  Choosing an open-source license is crucial. Understand common options (MIT, Apache, GPL), why compatibility matters, and how to comply with obligations.

• NASA Technology Readiness Levels

  January 23, 2025 · innovation nasa product-development

  A detailed look at NASA's Technology Readiness Level (TRL) system and how this framework, from its space program origins, can guide technology development.

• Building and Engaging a Community Around Your Open Source Library

  January 22, 2025 · community development github

  Attract users, encourage contributions, and build a welcoming environment for your open source library. Learn practical steps for community engagement.

• The Library Author's Dilemma: Managing Python Dependencies

  January 21, 2025 · best-practices dependencies development

  Python library dependency management balances features vs user pain. Explore best practices for choosing, versioning (~= compatible release), and maintenance.