Julian Hofer

@julianhofer.eu

@prefix.dev software engineer who loves languages and trains 🚅

Before pixi was around I used mamba to fully automate my IaC workflows. Pixi makes that type of end-to-end automation and reproducibility even easier! Pixi isn't well know in the infrastructure space, but it should be - Pixi is the one package manager you can use across your entire stack.

Prefix.dev - the Pixi company@prefix.dev · 5mo ago

You thought Pixi was only for data science and Python?! Nope! Pixi is the perfect tool to manage your Kubernetes deployments, turbocharged by the github-releases channel we can offer many of the most used packages! No more curl-pipe-to-bash. Read more: prefix.dev/blog/kubern...

Nothing says LLM security theater like Claude Code asking for permission to run `cat filename` in the terminal to read a file in the project folder. It has tools for that, but sometimes, like a human, it prefers the hard way. We are still obviously in the early days of all this mess.

As AWS open source just turned our request down, anyone have contacts at Google Cloud or Microsoft Azure who thinks they might be interested in donating cloud credits for an educational tutorial at SciPy 2025?

While I've been attending @scipyconf.bsky.social since 2019 and helping to organize SciPy since 2021, #SciPy2025 will be my first time teaching a tutorial at the conference! Hope to see you there, and looking forward to great experiences with the tutorial participants.

Prefix.dev - the Pixi company@prefix.dev · last yr.

Exciting news! Our talk and tutorial at @SciPyConf have been accepted! Learn more about the impact of Pixi on the Science community! Special thanks to @matthewfeickert.com for the initiation of the tutorial! Talk: cfp.scipy.org/scipy2025/t... Tutorial: cfp.scipy.org/scipy2025/t...

The times are a-changing A US colleague just warned me that 'AI is reading every word' when I emailed on the current trumpian disasters for US science (indicating it might cause trouble at future US border crossings) Wow, feels like we're moving back to USSR times with self-imposed censorship

The tj-actions/changed-files compromise prompted me to write up how I secure GitHub Actions workflows using SHAs without maintenance pain Go from insecure to security conscious in < 15 minutes, including configuring automatic updates through Dependabot or Renovate michaelheap.com/pin-your-git...

Pin your GitHub Actions

Secure your GitHub Actions by pinning them to commit SHAs, preventing supply chain attacks. Learn how to automate updates and enforce best security practices.

michaelheap.com

I've seen a lot of Python folks getting super excited about `uv run --with ....` and I get it now. In @conda.org world, you can do the same with @prefix.dev Pixi! A colleague wanted me to debug something with PyArrow on my system and all I had to do was: ``` $ pixi exec -s pyarrow python ``` 🤯

The Python package sbi is now on conda-forge. github.com/conda-forge/... With @prefix.dev's pixi you can now get a full CUDA environment (pixi.sh/dev/features...) and sbi installed and ready to go in under 60 seconds (maybe under 30) with 3 commands (if you count your text editor as 1).

GitHub - conda-forge/sbi-feedstock: A conda-smithy repository for sbi.

A conda-smithy repository for sbi. Contribute to conda-forge/sbi-feedstock development by creating an account on GitHub.

github.com