Related posts
Simon Willison
GitHub
pypi-datasette-packages — Archive PyPI JSON information for all Datasette related packages
pypi datasette packages
The the words it uses that this site has seen
least often elsewhere. Posts are matched on those words alone —
nothing here is a summary of this one.
Sources
All Writing GitHub Blog x.com Korrents Recommends Mastodon
Top people
Simon Willison
Zvi Mowshowitz
Max Howell
David Crawshaw
Hadley Wickham
Kent C. Dodds
Yihui Xie
Chris Tate
Scott Hanselman
Duncan McClean
Ryan Singer
James Brooks
Showing Profile →
Show everything
Hiding Show them again
Show them again
Further back ↓
Hiding Show them again
21 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
20 September
Statistician and Chief Scientist at Posit (RStudio). Author of the ggplot2, dplyr and tidyverse R packages and of books on R programming and data science.
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
19 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
Software engineer and educator; creator of Testing Library and of the EpicWeb.dev and EpicReact.dev courses.
To be clear you always could do this. I just made it easier but making packages like this is almost always a one-shot with Kody Quoting @kentcdodds You can now easily use Jev in @kodykoala: https://t.co/9wowF8KzV9 You can use this when you need typed decisions fast: - An inbox floods in and you need to know which messages are actionable, which can wait, and which are noise. - A support thread arrives and you want the right team, an urgency sco… Related
Writes Don't Worry About the Vase, a near-daily account of what is happening in AI and what they think it means. Former Magic: the Gathering pro and trader; unusually willing to put a number on a belief and to grade their own past calls.
Their words
Rarer is better, but I still think the right rate of misbehaviors on the level of social engineering to put malicious packages into a public registry is still zero.
Show the whole quote
thezvi.substack.com
18 September
Statistician and software engineer who writes R packages for reproducible research and publishing, including knitr, bookdown and blogdown.
Engineer at Vercel Labs as of 2026. Ships a steady stream of small developer tools — agent-browser, portless, json-render, native-sdk, the v0 SDK — and lists every one of them at ctate.dev.
New in scriptc: --𝚗𝚙𝚖-𝚜𝚝𝚊𝚝𝚒𝚌 Compile npm packages alongside your TS → One executable → Native machine code → No Node.js or JS engine This Commander example builds to 544KB JavaScript Related
17 September
Writes Don't Worry About the Vase, a near-daily account of what is happening in AI and what they think it means. Former Magic: the Gathering pro and trader; unusually willing to put a number on a belief and to grade their own past calls.
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
open source
Their words
Any piece of software that depends on open source (which is almost every piece of software) has a network of human beings who are potential attack vectors - everyone with publishing rights to any of the packages in the dependency network for that software.
Show the whole quote
simonwillison.net
16 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
datasette 1.0a40 Release: datasette 1.0a40 Same security fix as 0.65.5, plus some neat new features and bug fixes: Plugins can now launch and manage background tasks using the new datasette.add_background_task() method. Thanks, Alex Gar…
Related
datasette 0.65.5 Release: datasette 0.65.5 Security fix for an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows, reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m. Tags: securit…
Related
Creator of Homebrew, the macOS package manager, and a Swift developer.
15 September
Programmer, teacher and speaker; long-time Microsoft developer-community figure, host of the Hanselminutes podcast and author of the hanselman.com blog.
14 September
Creator of Homebrew, the macOS package manager, and a Swift developer.
11 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
Their words
If you're running a Datasette instance on a public website you should upgrade.
Show the whole quote
x.com
5 September
Scottish software developer on the Statamic core team; runs a one-person business maintaining Statamic addons such as Runway and writes at duncanmcclean.com.
30 August
Author of Shape Up; formerly head of strategy at Basecamp, where he worked on product design for seventeen years; now runs Felt Presence.
I've been maintaining a Rails app for ~10 years. It has very specific business logic for on-site multi-day course registrations. DDD style like I learned at 37signals. For 10 years, I configured each course in the Rails console. It was never worth it to build out the configurator UI. This year, I just talked to AI to do it. And the payoff from the carefully written model is really amazing. The AI was completely speaking the language of the domain and even raising meaningful pricing/structural questions about how the packages are set up this year vs previous years. Sharing this example because… Related
22 August
British software developer at Laravel and creator of the Cachet open-source status page system. Podcaster; writes at james.brooks.page.
I've updated https://t.co/jtxQc4wgek with some missing packages (whoops!): - laravel/doctor - laravel/folio - laravel/tinker - laravel/wayfinder If we're missing anything else, lemme know! Related
17 August
Programmer, photographer and musician, best known for the Python Requests HTTP library and other Python tooling.
Requests installations via PyPi continue to increase, at over 732.48 downloads / second today. Related
15 June
Full-stack Laravel developer based in Madison, Wisconsin; maintains open-source Laravel, Livewire and Alpine.js packages and writes at randallwilk.dev.
Their words
Since I mostly work on Laravel projects or packages, I usually enable the Laravel Idea plugin. It's a paid plugin, but it's definitely worth the money since it can provide stuff like auto-completions for route names, request fields and more.
Show the whole quote
randallwilk.dev
30 March
JavaScript programmer; creator of the jQuery library, author of Secrets of the JavaScript Ninja, and long-time engineer at Khan Academy.
Anyone at @github know the status of https://t.co/gTNB5bddt3 ? Being unable to give fine-grained read:packages permissions is a pretty big blocker for agentic work. Really want to avoid using a classic PAT which gives way too much access! Related
24 March
Founding member of OpenAI and former director of AI at Tesla; creator of nanoGPT and the term "vibe coding".
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm… Quoting @hnykda LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below crypto Related
9 September 2025
Release engineering manager at the Wikimedia Foundation. Keeps a public log at tylercipriani.com of every book he reads, with a rating and notes.
Failed to fetch https://packages.sury.org/php/dists/buster/InRelease 418 I'm a teapot Well played, Sury. Well. Played. Related
19 January 2025
Growth advisor and operator who has led growth at Miro, Amplitude, Dropbox and SurveyMonkey.
Their words
And my contrarian opinion is that full-time jobs are not the best way to monetize the skill that you have. It's one of the packages that everybody should evaluate and take advantage of, but too many people blindly default to that package
Show the whole quote
youtube.com
6 January 2025
Software engineer; co-founder and former CTO of Tailscale, previously on the Go team at Google.
13 September 2024
Indian software developer working with React and TypeScript; writes and publishes a newsletter at sreetamdas.com.
quick alias to selectively upgrade brew packages gist: Related
15 July 2024
Writer and consultant on formal methods and software correctness; author of Practical TLA+ and Logic for Programmers.
27 February 2024
Swedish software developer writing about tooling, working from home and running a software business at seastone.io.
I wanted ONE app, instead I got *one thousand* packages. #npm #wtf Related
27 May 2023
Software engineer writing about maintenance, open source and the industrial reality of software — the author of "I am not a supplier".
28 April 2019
Software engineer; co-founder and former CTO of Tailscale, previously on the Go team at Google.
Nothing matches. Show everything
A korrent is a belief a person has stated in their own words: one
sentence stating the claim, backed by a quote and a source, kept at
korrents.com .
Under a name here, the quoted block is what they actually said.
The korrent beneath it is the claim those words support, in
korrents' wording — tap it to see the record, its source, and who
else holds it.
Nobody here wrote their own korrents. They are compiled from public
statements, and a person can change their mind, which is recorded too.
Got it
About the English under a post
Some people here publish in a language other than English. Where they
do, this site shows a machine translation beneath the post, in
this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the
serif above is exactly what the person published, and it is what to
quote them on. A translation can be wrong in ways that matter,
especially about tone.
Only the post's own words are translated. A quoted post, a linked
article and a belief on korrents.com
are left in their original language.
Got it