Seth Larson

List of Nintendo racing games like Mario Kart, F-Zero, and Kirby Air Ride grouped by console.

TIL about the <optgroup> #HTML element. I feel like I learn so much about HTML and JS whenever I create an interactive piece for the blog 🤩

developer.mozilla.org/en-US/docs/W...

Pocket friend here! I'm pretty sure I think "primarily" "in words" and don't believe LLMs are sentient.

I'll be giving a talk about Rust for CPython at #PyConUS this year! Very excited to share about what we've been working on and our plans!

This will be my first time speaking at PyConUS, so I'm also a bit nervous 😅

A table showing different Mario Kart titles along with the columns "Platform", "Year", "Portable?", "Local?", "LAN?", "Wireless?", and "Game Sharing?". The columns contain true or false boolean values, and the "true" values are highlighted in green.

Preview for an upcoming article 👀

#mariokart #nintendo #gaming

Relative “Dependency Cooldowns” in pip v26.0 with crontab WARNING: Most of this blog post is a hack, everyone should probably just wait for relative dependency cooldowns to come to a future version of pip. pip v26.0 added support for th...

I got too excited about "set-and-forget" relative dependency cooldowns coming to #pip that I hacked them together using cron and a script that calculates uploaded-prior-to in pip.conf 👀

sethmlarson.dev/pip-relative...

#python #pypi #dependencycooldowns #security

Why Apple’s move to video could endanger podcasting's greatest power - Anil Dash A blog about making culture. Since 1999.

Apple's got a lot of announcements this week, but one huge risk might get overshadowed amidst the noise — the way they're adding support for video podcasts threatens to enshittify the last truly open online media. It's not too late to push them to keep it open. www.anildash.com/2026/02/28/a...

Package Managers Need to Cool Down A survey of dependency cooldown support across package managers and update tools.

Requested post by @sethmlarson.dev: Package Managers Need to Cool Down

nesbitt.io/2026/03/04/p...

We should all be using dependency cooldowns

More reading if you are interested! blog.yossarian.net/2025/11/21/W...

Implement a relative cooldown in `--exclude-newer` · Issue #13674 · pypa/pip What's the problem this feature will solve? I think it would be great if pip implements a "cooldown" feature. This has been recently widely discussed in the security community after the npm being t...

#GoodFirstIssue adding support for relative dependency cool-downs to pip. This would be a massive security improvement for users who can then set-and-forget a reasonable cooldown duration in their global pip config.

github.com/pypa/pip/iss...

#opensource #security #oss #python

Huge thanks to @fastly.com for 10+ years of keeping #PyPI up and running! PyPI serves 800K+ users at ~100K requests/sec. With a small team behind the service, that kind of scale is only possible because of infrastructure partners who invest in the sustainability of the #Python ecosystem.

@evanhahn.com shared this website, a podcast that has one episode per tile in the Link's Awakening world map describing the tile in as much detail as possible:

rcveeder.net/koholint/

We should have never legitimized gambling or outsourced our thinking.

“The Legend of Zelda: Link’s Awakening” respects your time I played “The Legend of Zelda: Link’s Awakening” for the first time in January and early February. The game took me 13 hours to complete the main story and a few optional side quests. I started p...

I don't play a lot of Legend of Zelda games. Link’s Awakening surprised me how much the game respects your time and fit into my life. Now I am looking for more pocket-sized LOZ games to play next.

sethmlarson.dev/links-awaken...

#retrogaming #nintendoswitch #legendofzelda #loz #gaming

“The Legend of Zelda: Link’s Awakening” respects your time I played “The Legend of Zelda: Link’s Awakening” for the first time in January and early February. The game took me 13 hours to complete the main story and a few optional side quests. I started p...

I don't play a lot of Legend of Zelda games. Link’s Awakening surprised me how much the game respects your time and fit into my life. Now I am looking for more pocket-sized LOZ games to play next.

sethmlarson.dev/links-awaken...

#retrogaming #nintendoswitch #legendofzelda #loz #gaming

@nedbat.com Thank you for writing about this API 16 years ago, it made a difference 💜

Deprecate confusing APIs like “os.path.commonprefix()” The os.path.commonprefix() function has been an API in the Python standard library for at least 35 years (since February 1991) and in that time has been confusing users and creating security issues...

Deprecate confusing APIs like “os.path.commonprefix()”. After fixing a vulnerability in #pip, I started digging into the confusing API and found more than I expected.

👉 sethmlarson.dev/deprecate-co...

#python #oss #opensource #security

The only reason there isn’t a Minnesota flag hanging off my house right now is that Flags for Good has been out of double-sided flags and flagpole kits for weeks. If you had told me at any other point in my life that someday I would even be considering this I would have laughed at you

Infrastructure Engineer - Python Software Foundation - Career Page Apply to Infrastructure Engineer at Python Software Foundation in Remote.

We're hiring! The PSF is looking for a full-time, remote, US-based Infrastructure Engineer to help keep PyPI, python.org, docs.python.org, and PyCon US running for millions of Python users worldwide 🐍 Apply here:

She’s raised almost $20m to help Minnesota – she thinks you can do it too Ashley Fairbanks launched Stand with Minnesota as ICE raids rocked her home town – now donations are pouring in, and families’ rent is being paid

I need to address this immediately, because I am WAY too Minnesotan to ever claim credit for this.

I built a thing to point the fire hose of people's generosity in the right direction. That's it.

I am thankful for the piece, because hopefully it means people will donate more money.

Respecting maintainer time should be in security policies Generative AI tools becoming more common means that vulnerability reports these days are loooong. If you're an open source maintainer, you unfortunately know what I'm talking about. Markdown-format...

Respecting maintainer time should be in security policies. Even better: you don't even have to mention the elephant in the room!

sethmlarson.dev/respecting-m...

#opensource #oss #security

I want you to put the word out there that we back up.

Quick update on Dizzy Sheep Disaster: EX: the project is still going strong! All cards are now designed, and I'm looking closely at options for printing.

Not sure on a release date just yet, but I'm hoping to have more information soon.

Subcommands with lazy imports In case you didn't hear, PEP 810 got accepted which means Python 3.15 is going to support lazy imports! One of the selling points of lazy imports is with code that has a CLI so that you only import co...

I've started to play with lazy imports thanks to my WASI build script being in CPython's repo, and so I wrote a post about how to adapt your code for running subcommands with argparse to play nicely with lazy imports.

snarky.ca/subcommands-...

Join the Python Security Response Team! Thanks to the work of the Security Developer-in-Residence Seth Larson, the Python Security Response Team (PSRT) now has an approved public governance document (PEP 811). Following the new governance structure the PSRT now publishes a public list of members, has documented responsibilities for members and admins, and a defined process for onboarding and offboarding members to balance the needs of security and sustainability. The document also clarifies the relationship between the Python Steering Council and the PSRT.

🔒 Python security just got stronger! The PSRT now has official governance (PEP 811) and a clear process for growing the team. Interested in joining? Learn more in this blog post from PSF Security Developer in Residence @sethmlarson.dev:

OSS Is Going Just Great A timeline of generative AI’s impact on open source maintainers and software supply chain security.

OSS Is Going Just Great: nesbitt.io/oss-is-going...

Someone was abducted at 10 AM by ICE on Central Ave. Their coworker says they’ve lived here for over 20 years, are documented, and have 3 kids who were born here.

Don’t be fooled by headlines when they’ve been lying to us the whole time. We still need you out patrolling until every agent is gone.

Dear neighbor, I am proud of you and our immigrant residents. Your resiliency, strength, and dedication have led to the announcement that “Operation Metro Surge” will end soon. It’s clear that the commitment of our neighbors made it untenable for ICE and federal agents to continue to operate its occupation of our city and state. This isn’t as a result of capitulation from elected leaders. This victory is yours, but we must not stop until ICE is completely abolished, and no more families are ever separated again. I will forever be thankful to those who patrolled, observed, and supported our community with mutual aid and daily tasks during these horrific times. Our community is full of heroes who will always be remembered as caring and loving. There are no words to show how thankful I am of every single one of you who showed up day in and day out. I hope you’ll join me in continuing to carry the whistle of resistance as our work is not done. I am still asking the community to remain cautious and vigilant until we can confirm what this truly means. They said they are not backing down from mass deportation but will be ending the operation in Minnesota soon. I recommend you continue your current plan until we can give you more information. We still need observers and the community to be on the lookout. These “draw-downs” are expected to continue through next week, which means we will still need help now and in the future. Additionally, we must never forget what they did to our neighbors and loved ones. They murdered Renee Good and Alex Pretti, shot Julio Cesar Sosa-Celis in the leg, and kidnapped Victor Manuel Diaz, who then died under ICE custody. We are still mourning, demanding justice, and we will never forget. They targeted our immigrant neighbors and children, discriminated against our community based on skin color and accents, lobbed weapons of war on our parks, and completely shattered families who simply wanted to work, take their kids to schools, and

I am proud of you and our immigrant residents. Your resiliency, strength, and dedication have led to the announcement that “Operation Metro Surge” will end soon. 1/

They made the grave mistake of invading the Northland in the dead of winter.

They’re retreating because Minnesotans are stronger than they’ll ever be – driven by an unshakeable love for our neighbors.

Automated public shaming of open source maintainers This is a follow-up to “New era of slop security reports for open source”. Matplotlib, the unfortunate target of this new type of harassment, publishes a clear generative AI use policy. That bou...

Deploying generative AI agents in this way is deeply irresponsible and results in real harms to open source maintainers.

sethmlarson.dev/automated-pu...

#genai #ai #aislop #slop #opensource #oss