Tag: #python

← All posts

• Scanning the production image with Trivy — 768 findings, and the real work was three packages and one Dockerfile line

  From a signature-verification bypass in the login library (CVE-2026-27962) to a digest-pinned base image that could never receive OS security fixes. The scanner counting itself, false positives in secret detection, and a

  2026-09-10 · 6 min read #security#cve#trivy#docker#python

• Langfuse SDK Instrumentation — What Is Captured Automatically and What You Add by Hand

  Creating traces is not about installing an SDK, it is about drawing boundaries. Working from the Langfuse Python SDK v4, this post lays out what the decorator, the context manager, and manual observation creation each do

  2026-08-14 · 8 min read #observability#langfuse#llm-tracing#instrumentation#opentelemetry

• Open Source Worth Watching Right Now (5) Data and ML Pipelines

  A data pipeline is not something a single scheduler solves. Ingestion, transformation, orchestration, execution engines, the model lifecycle, and search stores have each become the territory of a different tool. This pos

  2026-08-12 · 5 min read #open-source#data-engineering#mlops#python#rust

• The Generational Shift in Languages and Runtimes — Eleven Projects Read Through Their Official EOL Notices

  Eleven languages, frameworks and runtimes with official end-of-life notices on record. Python 2, AngularJS, Vue 2, Nashorn, Java applets and Web Start, Mono, Xamarin, PhoneGap, Atom, io.js and jQuery Mobile, each split i

  2026-08-12 · 10 min read #open-source#javascript#java#python#framework

• SQL Injection and Parameter Binding — The Places That Still Break When You Use an ORM

  The first thing people search for as a defense against SQL injection is an escaping function, but the right answer is parameter binding. Escaping is an attempt to make a value safe inside a string literal, while binding

  2026-07-26 · 16 min read #security#sql#database#orm#python

• Python 3.15's abi3t — The Problem a Stable ABI Solves for Free-Threaded Builds, and What It Costs

  With PEP 779, free-threaded builds shed their experimental tag in 3.14, but one thing besides interpreter performance still stood between here and Phase III, where free-threading becomes the default build — distribution.

  2026-07-16 · 13 min read #python#free-threaded#cpython#concurrency#pep-703

• PySpark 4.2 Puts Python UDFs on Arrow by Default — the Story of 132 out of 225 Type-Coercion Cells Changing

  Apache Spark 4.2.0, released on July 14, 2026, flipped the default of spark.sql.execution.pythonUDF.arrow.enabled from false to true under SPARK-54555. Vendor blogs describe this as a faster columnar path without rewriti

  2026-07-16 · 16 min read #spark#python#arrow#data-engineering

• Why Scarf Reluctantly Left Haskell After 7 Years — The Real Cost of a Language Choice

  Scarf is moving its backend off Haskell to Python after seven years in production. The interesting part is why. Founder Avi Press readily admits Haskell kept most of its promises — reliability, type safety, performance —

  2026-07-11 · 7 min read #haskell#python#engineering-decisions#compile-times#ai-assisted-development

• LiteLLM in Practice — 100+ LLMs Behind One Interface

  A hands-on quickstart for calling OpenAI, Anthropic, Gemini, Bedrock, OpenRouter, and local models through one OpenAI-shaped interface with LiteLLM — from install to streaming, Router, and the Proxy Server.

  2026-07-06 · 9 min read #litellm#llm#ai-gateway#python#openai-compatible

• Not Just Go — Building Operators With Kopf, Metacontroller, and Shell Operator ♪ Listenable

  We break the myth that an Operator must be built with Go and kubebuilder. We compare non-Go options with code: Python Kopf, the declarative-hook approach of Metacontroller, and shell-operator and Ansible Operator. We cov

  2026-06-15 · 19 min read #kubernetes#operator#kopf#metacontroller#python

• Building MCP Servers in Practice — How to Connect Your Tools to Every AI Agent

  A hands-on guide to building MCP (Model Context Protocol) servers, the de facto standard of 2026. We implement an internal wiki search server in TypeScript and Python, and cover tool design principles, OAuth 2.1 authenti

  2026-06-12 · 17 min read #mcp#ai-agent#typescript#python#oauth2

• Python Backend Frameworks 2026 Complete Guide — FastAPI · Litestar · Starlette · Sanic · Quart · Robyn · Django Ninja · BlackSheep Deep Dive ♪ Listenable

  A one-shot overview of the Python backend framework ecosystem as of May 2026. Covers ASGI/WSGI frameworks like FastAPI, Litestar, Starlette, Sanic, Quart, Robyn, Django Ninja, BlackSheep, and Falcon 4; the JIT and free-t

  2026-05-16 · 23 min read #python#backend#fastapi#litestar#starlette

• Python Ecosystem 2026 Deep-Dive — Python 3.13 · FastAPI · Django 5 · Litestar · SQLAlchemy 2 · Polars · Pydantic 2 · Ruff · uv · mypy ♪ Listenable

  A 2026-05 snapshot of the entire Python ecosystem in one post. Python 3.13 free-threaded build and JIT, FastAPI / Django 5 / Litestar / Flask 3 / Sanic / Robyn, SQLAlchemy 2 with Polars / DuckDB / pandas 2, the Pydantic

  2026-05-16 · 20 min read #python#fastapi#django#litestar#sqlalchemy

• Modern Python in 2026 — Python 3.13 / 3.14 / free-threaded / uv / Ruff / Polars 1.0 / FastAPI / Litestar / Robyn deep-dive ♪ Listenable

  In 2026 Python is the first time in 30 years that the language has crossed two huge inflection points at once. The first is the language itself — Python 3.13 brought the free-threaded preview and the JIT preview, and 3.1

  2026-05-16 · 29 min read #python#python-3-13#python-3-14#free-threaded#jit

• Notebook Environments in 2026 — Jupyter / Marimo / Quarto / Observable Framework / Deepnote / Hex / Positron Deep Dive

  The notebook ecosystem split again in 2026. Jupyter Lab 5 and Notebook 7 became the de facto standard, but Marimo (June 2024) attacked the "Hidden state" problem head-on with a reactive model, and Posit reincarnated RStu

  2026-05-16 · 17 min read #notebook#jupyter#marimo#quarto#observable

• Python Type Checkers in 2026 — Mypy, Pyright (Pylance), Pyre, Pyrefly, ty: Deep-Dive Comparison ♪ Listenable

  The Python type-checking landscape exploded in 2025-2026. Astral (the uv and ruff company) shipped ty, a Rust-based checker, in alpha. Meta released Pyrefly, a Rust rewrite of Pyre. Mypy remains the reference implementat

  2026-05-15 · 19 min read #python#mypy#pyright#pylance#pyre

• Python Complete Guide — FastAPI, AsyncIO, Pydantic, uv, Polars, AI Engineering (Season 2 Ep 5, 2025)

  Python used to be the "slow, GIL-locked" language. The 2024-2025 Python is a completely different beast — free-threading (No-GIL) experiment, JIT compiler, the revolutionary uv package manager, Polars with a Rust-backed

  2026-04-15 · 11 min read #python#fastapi#asyncio#pydantic#uv

• CPython Bytecode Interpreter Deep Dive — ceval.c, Specializing Adaptive, PEP 659, Copy-and-Patch JIT (2025)

  Python is slow, but most developers do not actually know why, or how it is getting faster. This post dissects CPython's heart, the ceval.c interpreter, from scratch: source to AST to bytecode, Code/Frame/Cell objects, th

  2026-04-15 · 16 min read #python#cpython#bytecode#interpreter#jit

• Functional Programming Guide for Backend Developers 2025: Immutability, Monads, Composition, Side Effect Management ♪ Listenable

  Everything about FP! Pure functions, immutability, higher-order functions, function composition, monads (Maybe/Either/IO), currying/partial application, side effect management, TypeScript/Python/Rust FP patterns, real ba

  2026-04-14 · 24 min read #functional-programming#immutability#monad#composition#pure-function

• Design Patterns Modern Guide 2025: GoF Patterns + Modern Patterns in TypeScript/Python/Go ♪ Listenable

  Everything about design patterns! GoF 23 patterns in TypeScript/Python/Go — Creational (Factory/Builder/Singleton), Structural (Adapter/Decorator/Proxy/Facade), Behavioral (Strategy/Observer/Command/State), Modern Patter

  2026-04-14 · 30 min read #design-patterns#gof#creational#structural#behavioral