Closed agriyakhetarpal closed 1 month ago
Hi Agriya, thanks for proposing a talk. Would you be available on 20th July (3rd Saturday) to present?
Hi Ishaan, I will be available to present on the 20th, thank you!
Hi again; I think I'll need the talk to last slightly longer (perhaps a margin of ten or so more minutes). Would this be conducive? I thought it would be nice to let this be known beforehand while the venue and the timings are being decided.
Yes, +10 mins is fine, you can go on for longer even if people seem interested. That anyway depends on what happens on the day itself.
The venue is confirmed, it is Sun foundation World class skill center (Blue Line). We haven't announced it yet. The timings will be 1-5 pm.
Thanks for the confirmation on the venue! I'll be there.
Hi, I'm closing the issue since the talk was delivered on 20th July, 2024. Thanks for having me!
[!TIP] The slides shall remain available at the following link: https://slides.com/agriyakhetarpal/pydelhi-july-2024.
[!NOTE] These resources aim to complement what was discussed in the slides. A link to this comment has been added to the final slide.
Python release PEPs
The Python development and release cycle, and related notes
Software Bill-of-Materials, and Python
SLSA and build provenance
Dependency confusion exploits
DoS via typosquatting
Ancillary resources
Scientific Python and Python packaging
Thanks for the talk @agriyakhetarpal and also for updating the issue with resources for further reading!
Title
Let's shadow a Python release: insights from packaging, distribution, and supply-chain security
Describe your Talk
As the Python programming language nears its annual release with version 3.13 in October 2024, there are a bunch of exciting new features, such as a greatly improved interactive read-eval-print-loop (REPL), a just-in-time (JIT) compiler via PEP 744, free-threading builds that disable the global interpreter lock (GIL) via PEP 703, and iOS support via PEP 730.
However, have you ever wondered how one ends up receiving a Python distribution for a particular version with all these features and updates, packaged for convenience and subsequent use for one's desired operating system? Also, what are the intricacies around this process, viz. software project management and security implications? This talk aspires to explore these areas in the Python release process, right from beta versions to the final published builds.
The takeaways from the talk, summarised in a (provisional) outline shall be as follows:
Pre-requisites & reading material
The major prerequisite is an interest in the Python programming language. Some insights into the use of package managers and installation archives might tend to be useful, but will not be needed. No prior knowledge is required or assumptions made w.r.t the concepts of build provenance or SLSA – owing to the advanced nature of these topics, a deep dive into their internals is not planned for inclusion in the material.
Time required for the talk
Thirty minutes; twenty-five for the presentation, five for fielding questions
Link to slides/demos
No response
About you
I am an undergraduate student at the University of Delhi, and a software engineer at Quansight, where my work is aligned towards the packaging and distribution of fundamental open-source software in the PyData ecosystem. My current work assignment is based around @pyodide, a Python implementation designed for the browser based on WebAssembly, and on approaches to interactive documentation for packages and libraries in the Scientific Python ecosystem through it.
My interests include Python packaging, scientific computing, numerical software, compilers and toolchains, and a lot more.
Please feel free to reach out to me through my social media handles:
or contact me via social messaging apps, such as Telegram: https://t.me/agriyakhetarpal or on Signal:
@agriyakhetarpal.01
. For enquiries of private disposition, please reach out to me at my email address:agriyakhetarpal [at] outlook [dot] com
Availability
July/August
Any comments
I am unsure about my availability at this time – hence, I am opening this issue as a placeholder in order to indicate my interest in delivering this talk in the meetups that are to be scheduled for either of these months. I will be in a better position to share my availability and my slides closer to the planned date.