Slothy

@[email protected]
Papo, compañero, developer y cosa humana.
🦀🐍

[Charlie Marsh @charliermarsh]

Announcing uv audit: native support for vulnerability scanning across your project's dependencies

[Slothy @slothy]

@charliermarsh Port rust to zig

[Slothy @slothy]

@zeddotdev are you aware of https://t.co/jiAA2OkCKP ? not trolling, just asking, in the current agentic era, seems a very interesting approach.

[Andrej Karpathy @karpathy]

New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads.

Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned.

It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I think ultimately the defaults of package management projects (pip, npm etc) have to change so that a single infection (usually luckily fairly temporary in nature due to security scanning) does not spread through users at random and at scale via unpinned dependencies.

More comprehensive article:
https://t.co/EJAZbqAPIQ

[Slothy @slothy]

Perfa, retweet ;)

[Slothy @slothy]

Permitir playa para perros en Benicassim durante todo el año - ¡Firma la petición! https://t.co/TsrI6mb4Vm a través de @change_es

[Slothy @slothy]

Permitir playa para perros en Benicassim durante todo el año - ¡Firma la petición! https://t.co/TsrI6mb4Vm a través de @change_es

[Soul of Justice @Majorblues]

@thematrixb0t

[Slothy @slothy]

@bcherny @karpathy And what will happen to the open source?

[Slothy @slothy]

@charliermarsh Serious question, will open source survive?

[Will McGugan @willmcgugan]

I'd like to compare Toad's UI against "native" CLIs.

In the following videos, both terminals should be working with the same agents. It's only how the output is presented that should differ. Although in practice, there does seem to be some differences introduced by the ACP layer.

I'd like to compare and contrast the UI, which will reflect my personal opinion of how these things should work. The differences in the tech will also make a difference. Specifically the holy war of scrollback vs alternate screen.

Not dissing any of the builders behind the CLI agents. Toad couldn't exist without their work. By implementing ACP or providing an SDK to do so, they allow you to use any UI you like.

[Giampaolo Rodola @grodola]

Wheels for free-threaded Python now available in psutil. Here's a blogpost explaining what it means:
https://t.co/6YStSL935f

[Zed @zeddotdev]

🤠

[Slothy @slothy]

@davekopec Arrived today!!!! Thanks @davekopec

[Slothy @slothy]

@AmpCode is there a way to use Claude code subscription to use amp?

[Zed @zeddotdev]

Python in Zed is finally… fun 😎
• basedpyright by default
• auto-activated venvs + per-project interpreters
• monorepo-ready (multi-venv? yup)
• run/launch configs that don’t fight you

Bonus: ty + Ruff, out of the box (@astral_sh)

[David Kopec @davekopec]

Computer Science from Scratch: Building Interpreters, Art, Emulators, and ML in Python comes out today!

This is the perfect book for an intermediate Python programmer who wants to learn more about the layers of the software stack under their programs.
https://t.co/WRJ2Fc3o2a

[Jorge Corrales @Yosoycorra]

Mira este reloj y dime qué hora es.

Las 7:15, ¿verdad?

Pues no exactamente. Fíjate otra vez...

¿Ahora lo ves? No tiene 12 horas.

Bienvenido al reloj decimal de Ruth Ewan, un reloj revolucionario para pensar en cómo es el tiempo.

Un hilo de #MaterialNarrativo