Full title is: "Understanding Python Linters through a Comprehensive and Systematic Empirical Study"

Source https://github.com/google/brotli for who wants to do a real security audit.

Security is always context dependent. For many use case it works. But if any one knows a better alternative that is battle tested and used please shout out!

I don't know what a "real security audit" is in this context but I think I shared enough pain (with links) from my personal perspective to give a head start I suppose.

I agree security is always context dependent but "passes untrusted input through a package built in C which takes over a year to make security releases when the changelog already references those" makes the set of contexts in which something passes the test very small

One better alternative is presumably the Rust crate (mentioned in the article) it just happens that there's no Python bindings available for that.

“ Runs in your browser” when it is not FOSS , validation of this claim is impossible.

"Validation of this claim is impossible". How so? There's no network traffic.

If you press F12 on your browser, open the Network tab, you can watch every single request that page makes. Hope it helps!

And this release comes with a nice improvement of the landing page[1].

[1] https://panel.holoviz.org/

> who benefits of this story?

In my (probably naive) humble opinion, the entire population of the USA should benefit from knowing their leadership are corrupt and only interested in enriching themselves and their peers.

But having seen the huge amount of American citizens that spend their days justifying the actions of these corrupt politicians and bi/trillionaires where they apparently can do no wrong, I'm thinking that nobody will really benefit from this and it will be filed under "business as usual".

Dries was in the past imho excellent in inspiring people with his keynotes. Especially with his vision and roadmaps. This keynote was mediocre at best.

AI-AI-AI-AI...The big question was avoided: What is the relevance of Drupal in the AI era?

Most people who want to publish content in a nice looking way can now do that using just a prompt and using natural language. Content management, or managing the things online in a decent way is still an unsolved problem, since this is not a technical thing, but mostly sht work for content managers that nobody want to do. It is a matter of time till OpenAI or some other AI company can do what a CMS application can do, but than without the pain and complexity for users. I see no answer from this keynote in anyway!

This current strategy of Drupal has high risks in terms of maintainability, stability, security and privacy when leaning so heavy on AI-things that are still changing every 3 months.

Good news is that Pyodide[1] is still actively maintained and developed!

"The honest picture is that PyScript remained a niche." Running Python directly in the browser is great and gives lots of opportunities. However in the AI era generating sloppy for browser apps seems the way forward...

[1] Pyodide is a port of CPython to WebAssembly/Emscripten. https://pyodide.org/

“ we are perhaps watching a first actual on-orbit ASAT attack”

There is no such thing as “the community” . There are people who like,dislike, use or neglect what you publish online. If you want positive feedback in public of published Foss software you will be disappointed very fast. Sharing is imho mostly not done for anonymous people, but for friends, colleagues or anyone in the universe who might benefit from the Foss software or idea!