Python4DataScience
@python4data.science
Teaching materials for the cusy training courses on a Python-based data science workflow: https://cusy.io/seminars
We have expanded the section on mocks for testing and added spies: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #Testing
Mock
In this chapter, we will test the CLI. To do this, we will use the mock library, which has been included as part of the standard Python library since Python 3.3 under the name unittest.mock. Object...
python-basics-tutorial.readthedocs.io
🧵 1/2 Attacks on the software supply chain are increasing rapidly. We have therefore updated our guide on how to make your projects more secure, adding answers to the following questions:
Security
As of July 2026, PyPI hosts over 750,000 packages, and this number is growing daily. An average Python project includes dozens of additional dependencies – packages that you have never explicitly c...
python4data.science
Did you know that with shot-scraper video you can explain your user interface using a storyboard: python-basics-tutorial.readthedocs.io/en/latest/do... #Python #Docs #Video
shot-scraper
shot-scraper is a tool to automate the process of updating screenshots. Installation: Use: shot-scraper can be used in several ways …for single screenshots on the command line: …or with additional ...
python-basics-tutorial.readthedocs.io
Software Bill of Materials (SBOMs) are commonly used to check software and its dependencies for vulnerabilities using CVE and OSV. We have described how to create these for Python packages here: python4data.science/en/latest/pr... #Python #SBOM #Vulnerability
Software Bill of Materials (SBOM)
A Software Bill of Materials (SBOM) is a document used to exchange information about software and its composition. This format is primarily used in the security field to check software and its depe...
python4data.science
Specification-Driven Development (SDD) was developed to improve the predictability and maintainability of agentic software development. In particular, we are continuing to give OpenSpec a chance: agentic-software-engineering.readthedocs.io/en/latest/pr... #CodingAgent #SDD #DX
Spec-Driven Development
Development teams are increasingly facing challenges regarding predictability and maintainability when requirements and context are stored exclusively in short-lived chat threads. To address this i...
agentic-software-engineering.readthedocs.io
We are switching from pre-commit to prek. Whilst prek is also faster, the decisive factors were the security-related features: pinned SHA revisions and cooldown: www.python4data.science/en/latest/pr... #Python #DX #DevOps #DevSecOps #Security
prek
prek is a variant of pre-commit, written in Rust, for managing and maintaining multilingual commit hooks. An essential task is to make the same scripts available to the entire development team. pre...
python4data.science
We have added the `errors` argument to the instructions for reading and writing files, so that files with encoding issues can be read more effectively. And, fortunately, UTF-8 becomes the default in Python 3.15: python-basics-tutorial.readthedocs.io/en/latest/sa... #Python
Files and Directories
pathlib implements path operations using pathlib.PurePath and pathlib.Path objects. The os and os.path modules, on the other hand, provide functions that work at a low level with str and bytes, whi...
python-basics-tutorial.readthedocs.io
We have released a new version. As well as the usual software updates, it includes agent-based code generation and securing the software supply chain: www.python4data.science/en/26.1.0/ #Python #DataScience #AgenticCoding #Claude #SoftwareEngineering #SoftwareSupplyChain #SupplyChain
Python for Data Science
This is a tutorial on Data Science with Python. This immediately raises the question: What is Data Science? The term has become ubiquitous, but there is no single definition. Some even consider the...
python4data.science
#TIL that there is also a pre-commit check for uv audit: www.python4data.science/en/latest/pr... #Python #CVE #Vulnerability #Git #ITSecurity #SupplyChain
Security
In previous chapters, we have already provided some tips designed to help ensure safer operation. Here, we would like to summarise and expand on the individual elements once again. We will be using...
python4data.science
Guardrails enable you to defend against prompt injection or jailbreak attacks by your coding agents. In our tutorial, we show you the options available to you for this purpose: agentic-software-engineering.readthedocs.io/en/latest/se... #PromptInjection #Jailbreak #AI #Agentic #Coding #ITSecurity
Guardrails
The term AI guardrails first appeared in 2023, when ChatGPT launched its consumer service. The initial versions contained numerous security and privacy vulnerabilities, which ultimately prompted ma...
agentic-software-engineering.readthedocs.io
We have added a section on @tiangolo.com’s Library Skills to our agent-based software engineering tutorial: agentic-software-engineering.readthedocs.io/en/latest/sh... #AI #Agentic #Coding #Skills
Skills
As coding agents evolve from simple chat interfaces towards autonomous task execution, context engineering has become a critical challenge. Agent Skills provide an open standard for modularising co...
agentic-software-engineering.readthedocs.io
We have expanded our tutorials to include answers to the question of how coding agents can assist data scientists with programming: • python-basics-tutorial.readthedocs.io/de/latest/li... • github.com/veit/python-... #Python #DataScience #CodingAgents #Claude #Cursor
With uv≥0.11.19, you can check dependencies in your project for known vulnerabilities: • python-basics-tutorial.readthedocs.io/en/latest/li... • www.python4data.science/en/latest/pr... #Python #uv #Vulnerability #ITSecurity
Security
In previous chapters, we have already provided some tips designed to help ensure safer operation. Here, we would like to summarise and expand on the individual elements once again. We will be using...
python4data.science
If uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: python-basics-tutorial.readthedocs.io/en/latest/li... #Python #DevSecOps #ITSecurity
Adding more Python libraries
Although Python’ „Batteries included“ philosophy means that you can already do a lot with the default installation of Python, there will inevitably come a situation where you need functionality tha...
python-basics-tutorial.readthedocs.io
Thanks to Ruff, our Python4DataScience tutorial is now much more consistent: www.python4data.science/en/latest/ #Python
Python for Data Science
This is a tutorial on Data Science with Python. This immediately raises the question: What is Data Science? The term has become ubiquitous, but there is no single definition. Some even consider the...
python4data.science
Yesterday, the article by Frank Hofmann and me on open licences for documents, images, audio, video, fonts and hardware was published in Linux Magazine: www.linux-magazine.com/Issues/2026/... #OpenSource #OpenHardware
Keep It Free » Linux Magazine
Linux users associate open source licenses with software, but a bevy of licenses are available for documents, images, audio/video, fonts, and hardw...
linux-magazine.com
We have integrated two features from Git 2.54: • Git history: www.python4data.science/en/latest/pr... • Configuration-based Git hooks: www.python4data.science/en/latest/pr... #Git
Rewriting history
There are several commands in Git for rewriting history. git rebase -i is the best known and most flexible: you can reorder, merge, edit and remove commits. However, this flexibility comes with a d...
python4data.science
The testing section has been extensively revised: • Test examples for cusy.tasks • Added Hypothesis extensions • Agile software development using test-driven development and behaviour-driven development python-basics-tutorial.readthedocs.io/en/latest/te... #Python #pytest #Agile #TDD #BDD
Testing
Basically, a distinction is made between static and dynamic test procedures. Static test procedures, are used to check the source code, although this is not executed. They are divided into- reviews...
python-basics-tutorial.readthedocs.io
Final preparations for PyConDE & PyData next week in Darmstadt. We’d love to see you there. Please feel free to arrange a meeting with us: cusy.io/en/about/eve... @pyconde.bsky.social #Python #PyData
cusy.io
We have analysed the attacks on the software #SupplyChain of LiteLLM and Telnyx and now recommend dependency cooldowns alongside immutable references, trusted publishers and digital attestations to secure deployments: • python-basics-tutorial.readthedocs.io/en/latest/pa... #Python #ITSec #DevSecOps
Publish package
Finally, you can deploy the package on the Python Package Index( PyPI) or another index, for example GitLab Package Registry or devpi. For the Python Package Index, you must register with Test PyPI...
python-basics-tutorial.readthedocs.io
In future, Open Research Europe (ORE) will no longer be open solely to projects funded under the EU Programmes for Research; instead, all research institutions in the participating countries will be able to use the platform free of charge: research-and-innovation.ec.europa.eu/news/all-res...
A new era for Open Research Europe
European Commission to co-fund new phase of operation for open access publishing platform.
research-and-innovation.ec.europa.eu
We have now significantly expanded our collection of open data and organised it by topic: www.python4data.science/en/latest/da... #Python #DataScience #OpenData #Agriculture #Biology #Chemistry #Climate #Weather #ComputerNetwork #Energy #Finance #GeoScience #Healthcare #ImageProcessing #Medicine
Open data
A topic-based overview of public repositories containing research data. Agricultural sciences: AQUASTAT Dissemination System, Global information system of the Food and Agriculture Organization of t...
python4data.science
The German Research Association (@dfg.de) has established a binding framework for the use of AI. The aim is to ensure the legally compliant and transparent use of AI: www.dfg.de/en/news/news... #Research #RSE #Science #DataScience #ArtificialIntelligence #AI #Compliance
Artificial Intelligence in the Review Process
dfg.de
Since tox 4.44.0, tox.ini has been frozen. Only the toml configuration is supported for further development. We have therefore updated our tutorial accordingly: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #testing #tox
tox
tox is an automation tool that works similarly to a CI tool, but can be run both locally and in conjunction with other CI tools on a server. In the following, we will set up tox for our Items appli...
python-basics-tutorial.readthedocs.io
We are pleased that we were able to develop an idea on how to better deal with LLM agents in the future.
Veit Schiele@veit-schiele.de · 6mo agoI have been thinking about how LLM agents pose a threat to open source projects and what strategies can offer us at least some protection. Nevertheless, this is likely to remain a challenge: cusy.io/en/blog/how-... #OpenSource #Ai #LLM #AISlop
We analyse the memory consumption of our applications with memray and also monitor it continuously with pytest-memray: python4data.science/en/latest/pe... #Python
Memray
Memory usage is difficult to control in Python projects because the language does not explicitly indicate where memory is allocated, module imports can significantly increase consumption, and it is...
python4data.science
Git 2.53 provides faster insights into the repository structure with 'git repo structure'. However, to better understand this, it is helpful to be more familiar with the Git data and storage models: www.python4data.science/en/latest/pr... #Git
Git Internals
So far, we have looked at how you can use Git to manage the different states of your code. Now we want to show you the data and storage models that underlie Git. Data Model: You will be able to use...
python4data.science
The section on performance measurements and finding bottlenecks has been significantly expanded to include cProfile/profiling.tracing, tprof, and profiling.sampling/Tachyon: www.python4data.science/en/latest/pe... #Python #Performance
Performance
Python can be used to write and test code quickly because it is an interpreted language that types dynamically. However, these are also the reasons it is slow when performing simple tasks repeatedl...
python4data.science
