Mailman 3 May 2022 - Python-ideas

TextIOBase: Make tell() and seek() pythonic
by mguinhos＠gmail.com 27 May '22

27 May '22

seek() and tell() works with opaque values, called cookies. This is close to low level details, but it is not pythonic. (Non-pythonic and non-portable behaviour) Currently feeding seek() with wrong values could lead to unexpected behaviour. There should be a safer abstraction to these two basic functions. More details in the issue: https://github.com/python/cpython/issues/93101#issue-1244996658

7 12

Re: Popular Python Package 'ctx' Hijacked to Steal AWS Keys
by George Fischhof 25 May '22

25 May '22

Turritopsis Dohrnii Teo En Ming <tdtemccna(a)gmail.com> ezt írta (időpont: 2022. máj. 25., Sze, 15:49): > Subject: Popular Python Package 'ctx' Hijacked to Steal AWS Keys > > Good day from Singapore, > > Sharing this article for more awareness. > > Article: Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked > to Steal AWS Keys > Link: > https://thehackernews.com/2022/05/pypi-package-ctx-and-php-library-phpass.h… > > Thank you. > > Regards, > > Mr. Turritopsis Dohrnii Teo En Ming > Targeted Individual in Singapore > 25 May 2022 Wed > -- > https://mail.python.org/mailman/listinfo/python-list Hi All, it's got to my mind that PYPA, community, and developers should develop some mechanism to protect against similar threats. For example security checkers could be added to the upload flow, before a package appears, and becomes downloadable. Compiled parts should be allowed only in source, and security checkers would check those too, and compile from source and publish package only after these checks executed and did not found any harmful thing. BR, George

1 0

Whitespace handling for indexing
by Jan Costandius 25 May '22

25 May '22

I think that it would be beneficial for PEP 8 conformance, in the case of large nested dicts, if one were able to separate dict indices by a newline. What I mean is shown below: foo["bar"] ["baz"] ["eggs"] ["spam"] = 1

6 5

Would it be desirable to save the state of functools.cache?
by Neil Girdhar 24 May '22

24 May '22

Would it be desirable to save the state of functools.cache between program executions? For example, by providing cache_state property on the cache that is pickle-able.

2 1

`importlib.resources` access whole directories as resources
by tankimarshal2＠gmail.com 18 May '22

18 May '22

An `importlib.resources.as_file` equivalent but for whole directories. To access a directory of files in a package and load them (for example, a skybox with 6 faces), one would need to use `as_file` 6 times with 6 context managers. Moreover, if the API required a path to a folder that contained the 6 images, this would require manual extraction.

7 15

Re: Time to relax some restrictions on the walrus operator?
by Steven D'Aprano 16 May '22

16 May '22

On Sun, May 08, 2022 at 04:00:47PM +0100, Rob Cliffe wrote: > Yes, I know unrestricted use of the walrus can lead to obfuscated code > (and some of Steven's examples below might be cited as instances 😁). They're intended as the simplest, least obfuscatory examples of using the walrus operator that is not pointless. That is, an example of the walrus as a sub-expression embedded inside another expression. If you think my examples are obfuscated, then that is an argument in favour of keeping the status quo. I could have given an example like this: ((a, b) := [1, 2]) but there is no good reason to use the walrus operator there, it is not a sub-expression, and it Just Works if you use the assignment statement instead. -- Steve

3 2

Improving -x switch on CLI interface
by Rafael Nunes 15 May '22

15 May '22

Hi. What about improving the -x switch by passing the number of lines to ignore? Ex: -x (default=1 line) -x n (Python will ignore first n lines of file). I think it will allow us to execute some Windows commands before running python. Install modules, etc... Thanks in advance. -- Rafael Nunes nunes.rafael(a)gmail.com

3 3

Re: `importlib.resources` access whole directories as resources
by Ray Chen 15 May '22

15 May '22

How would I go about doing it myself then?

1 0

Re: `importlib.resources` access whole directories as resources
by Ray Chen 15 May '22

15 May '22

An example is when an API asks for a folder that contains a set of images, and reads each image one by one. Having a folder is also useful for globbing and selecting certain files.

1 0

Re: Heterogeneous numeric data in statistics library
by Christopher Barker 15 May '22

15 May '22

> > > >I was going to suggest the same thing: type casting can have > >non-obvious effects, so explicit is better than implicit in this case. > > Aye. Did you mean to send this just to me and not the list? > nope -- I know i"m in the minority but i really wish lists had reply-to set to the list. Bringing it back on. A pandas DataFrame comes with a conversion facility as a distinct > method, but it only copes with some basic types (int, float), and most > of the DataFrame operations expect homogenous data. In fact, I think a > given column is always homongenous except for columns of type "object", > but you can't do math operations with "object" columns - they tend to be > labels and stuff like that. > Sure -- Pandas is built on top of numpy arrays -- which have always been homogenous types -- which is quite deliberate -- numpy arrays provide three things: 1) N-dimensionsl arrays -- very handy 2) fast vectorized computations 3) a nifty Python wrapper around C (or Fortran) arrays. 2 and 3 are only possible with homogeneous (fundamental) types. The statistics module doesn't have the same limitations. But no matter how you slide it, if the types are not homogenous, then there will be some loss of some sort. Which is why I think it's better to make it explicit. It's actually hard for me to imagine a case where someone would have mixed types that wasn't an accident -- another reason to be explicit. -CHB -- Christopher Barker, PhD (Chris) Python Language Consulting - Teaching - Scientific Software Development - Desktop GUI and Web Development - wxPython, numpy, scipy, Cython

1 0