Checking Project Dependencies & Python Dev Resource Collections

How can you ensure that you’ve appropriately declared your project’s required dependencies? How do you determine what dependencies are missing from a third-party project that you can’t run? This week on the show, Christopher Trudeau is here, bringing another batch of PyCoder’s Weekly articles and projects.

We discuss a new Python dependency checker called FawltyDeps. The tool helps you determine if you’ve declared too few or too many packages for your project.

Christopher has brought several developer resource collections: a list of assured open-source Python packages from Google, test databases with interesting datasets, and multiple Django third-party packages.

We cover several other articles and projects from the Python community, including a news update, advice on how to pitch yourself as a guest to a podcast, how to submit articles and projects to PyCoders Weekly, PyPI’s introduction of trusted publishers and organizations, a tool for tracking package history, a pixel art paint program written in Python, and a project for efficient string matching with regular expressions.

Course Spotlight: Publishing Python Packages to PyPI

In this video course, you’ll learn how to create a Python package for your project and how to publish it to PyPI, the Python Package Index. Quickly get up to speed on everything from naming your package to configuring it using setup.cfg.

Topics:

00:00:00 – Introduction
00:02:19 – PEP 684 – A Per-Interpreter GIL Accepted
00:03:59 – Python 3.10 Runtime Now Available in AWS Lambda
00:04:19 – PyCon US 2023 Follow Up
00:08:05 – Podcast Topic & Guest Submissions
00:13:45 – Submissions to PyCoders Weekly
00:16:49 – Google’s Assured OSS Python Packages
00:18:27 – Groovy Datasets for Test Databases
00:19:10 – Top 10 Django Third-Party Packages
00:20:27 – Video Course Spotlight
00:21:46 – FawltyDeps - A Dependency Checker for Your Python
00:26:58 – PyPI Introduces “Trusted Publishers”
00:28:27 – Introducing PyPI Organizations
00:29:02 – pypi-diff: PyPI Package History Tracking
00:30:29 – PyDPainter: A usable pixel art paint program written in Python
00:35:19 – trrex: Efficient String Matching With Regular Expressions
00:37:16 – Thanks and Goodbye

News:

Show Links:

PyCon US 2023 - Follow Up
The Real Python Podcast (podcast@realpython.com)
PyCoder’s Weekly - Submit a Link
Google’s Assured OSS Python Packages – Google publishes a list of the open-source packages that it uses and secures within its own software supply chain. The list is public, so you can take advantage of their assessment.
Groovy Datasets for Test Databases – When you experiment with a new-to-you data science skill, you need some sort of data to work with. Why be boring? This article talks about several available datasets that you can use when you practice your coding skills.
Top 10 Django Third-Party Packages – Will covers a list of his favorite third-party packages for Django. This includes old favorites, like Django REST framework, and lesser-known packages, like django-filter and django-environ.
FawltyDeps: A Dependency Checker for Your Python – FawltyDeps is a new tool to help you identify undeclared and unused dependencies in your Python code, making your projects leaner and more reproducible.
PyPI Introduces “Trusted Publishers” – PyPI package maintainers can adopt a new, more secure, OIDC-authenticated publishing method that doesn’t require sharing long-lived passwords or API tokens with external systems.
Introducing PyPI Organizations - The Python Package Index
pypi-diff: PyPI Package History Tracking