As the PSF heads into our end-of-year fundraiser this month, we want to “connect the dots” and share a full picture of our current financial outlook: what’s happening, why, and how you can help sustain the future of Python and the PSF. 🧵

Archive formats like ZIP and tar can be abused to undermine the integrity of Python package users 📦 Learn how PSF Developer-in-Residence Seth Larson is strengthening Python's security with the #Python community in the new white paper "Slippery ZIPs and Sticky tar-pits" with Alpha-Omega:

Software is hard. Context: SFO to EWR (I hope!!!)

This is a great read on how much (or little!) goes into making PyPI a resource most folks don't have to think heavily about, like many utilities or public works. What have you done this year to #OpenSource sustainable?

Hearts at the PSF are full today from the responses about the recent grant turn down news we shared. All of your kind words of support & solidarity, as well as your donations & new memberships, mean the world to us. We're so grateful to be in community with each of you 💛🐍💙

On my way to #GitHubUniverse - anyone I know going to be there as well?

Dunno who or how, but the feature in @brew.sh CLI to display a spinner during downloads instead of a wide progress bar is a nice little improvement. It might have been there for a while, I only noticed it today. Thanks for doing what you do in #OpenSource!

Check out this post by @diegor.it about the latest CPython sprint! We send a special thanks to Arm for hosting the event and investing in the future of #Python 💛🐍💙 pyfound.blogspot.com/2025/10/cpyt...

Does your org run a self-managed version of @gitlab.com and publish your own #Python packages to @pypi.org ? If you want to try out an alpha of Trusted Publishing for GitLab Self-Managed instances, let me know via DM - I'm collecting interest now, and should have something to show soon.

Maybe the friction involved in starting a fresh project helped forestall creating net new things all the time and inspired us to look for existing solutions, and potentially extend/contribute to them. With the ability to quickly imagine your idea into reality, are we in a new era of software slop?

Clear, and to the point. Great way to think about your career, from @danielleheberling.xyz danielleheberling.xyz/blog/time-to...

Just released! 🚀 Please install and enjoy Python 3.14! 🥧 discuss.python.org/t/python-3-1... #Python #Python314 #release

I just backed Container on @kickstarter.com www.kickstarter.com/projects/boa...

The final two games for @gothamderby.bsky.social home season happened last night in Brooklyn. They were both really good games, and the championship game was a close, hard-fought nail-biter with some truly awesome displays of athleticism. Support your local #rollerderby league!

Attackers continue to find creative ways to expose credentials, often the first step in a larger scale supply chain attack.

The PSF joined the @openssf.org & others in signing “Open Infrastructure is Not Free.” Funding gaps in the open source industry mean critical infrastructure lacks support. Corporations benefiting from it must invest to sustain it. Read more ➡️

Cool to see @abc7ny.bsky.social do a short piece on password security, promoting second factor authentication. Progress!!

Oh, Claude. > Thanks for pushing back - you saved me from recommending a square peg for a round hole.

when @miketheman.com tells me how much data has been downloaded from PyPI this year

We're excited to announce the results of the 2025 election for the PSF Board! Sending a big thank you to the nominees, our outgoing Board members, and our community for participating this year- we are so grateful to be in community with all of you 💙💛

An interesting read on pruning tests from a software stack. As someone who enjoys the safety of tests and writes more, I believe the title would be improved a bit with the addition of "unhelpful", "unreliable", "poorly written", or something similar. andre.arko.net/2025/06/30/y...

Attending @fastly.com Xcelerate today, hoping to learn about what is coming up next #XNYC #FastForward

I was honored to be on a panel of really smart people, talking about developer platforms / platform engineering teams. Thanks @cloudiamo.com and @infoq.com for the opportunity!

ATTN PSF Voting Members: The 2025 PSF Board election vote is open now until September 16th! If you affirmed your intention to vote in this year's election, or voted last year, you should have an email with voting instructions 🗳️ Learn more on our blog:

Hot take: Spec-driven development isn't new, it's a reshape of Behavior-driven development

Check out our latest Success Story to learn why #Python matters to PSF partner Arm, as well as all they do to support the Python language and its community! Thank you, Arm 💙💛

If you need a clear & concise piece to share with your company to make the case for supporting OSS projects & orgs like @python.org :

PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over #PyPI accounts through password resets. #Python #OpenSource #SupplyChain #Security

Pet peeve: Principle != Principal

One of the @python.org board members, @cheuk.dev wrote a piece on the board elections, keeping #Python going for everyone. cheuk.dev/posts/2025-0... #OpenSource

This is the culmination of lots of smaller pieces building up to a larger chunk. #OpenSource #Python #SupplyChain #PyPI

I kinda wish there was a way for highly-skilled end users of applications and services could provide material fixes when we find something slightly broken on the web with a service we pay for. Support channels often feel fruitless and demotivate engagement.

The Python Package Index is introducing new restrictions to protect Python package installers and inspectors from ZIP confusion attacks. There is no evidence that this vulnerability has been exploited. Read the blog post for more information:

🗳️ Nominations for the 2025 PSF Board election are open! Help shape the future of the PSF — nominate yourself or someone you think would be a great PSF Board Director by Tuesday, August 12th, 2:00 pm UTC.

The PSF Grants Program has been temporarily paused after hitting our 2025 funding cap early. It was an extremely difficult but necessary decision to ensure the program and foundation’s near and long term sustainability. Learn more on our blog: pyfound.blogspot.com/2025/08/the-...

Incident Report of the recent #PyPI Phishing Campaign TL,DR: • PyPI was not breached • PyPI users were targeted with phishing emails • A single project saw uploads with malicious code and those releases have been removed blog.pypi.org/posts/2025-0... #Python #OpenSource #Security

Heads Up, #Python Developers! There is an active phishing attack targeting PyPI users. • Threat: Emails from [email protected] (with a 'j') link to a fake login page. • Action: Do not click any links. If you already did, change your PyPI password ASAP. • Note: PyPI itself has not been breached.

🚨 Be aware there's a potential phishing campaign targeting #PyPI / #Python package maintainers: discuss.python.org/t/phishing-a...

You can be a part of guiding the future direction of the PSF 🩵🐍💛 Nominate yourself or someone else for the PSF Board for the 2025 election! Nominations open Tuesday, July 29th, 2:00 pm UTC and close Tuesday, August 12th, 2:00 pm UTC. #python

Dear Open Source Supply Chain Security Researchers, I am glad you get paid to to a job in security, it's very important! Please please please read the Acceptable Use Policies of services you "attack" - your work puts an ever-increasing drain on already-thin human resources.

Python jumped 10%+ on the TIOBE index this month 🤩🐍📈 thanks to the entire #Python community—maintainers, educators, contributors, and users—for helping make Python what it is today! www.tiobe.com/tiobe-index/

At AWS Summit NY Keynote, and it's all GenAI or related stuff. All I can hear is this phrase over and over #AWSSummit #AWSSummitNYC

We want your vote! Voting-eligible PSF Members (Supporting, Contributing, and Fellow) need to affirm their membership to vote in this year’s Board election to ensure that we meet quorum as required by our Bylaws 🗳️ #python pyfound.blogspot.com/2025/07/affi...

You know when you've been writing too much code when you routinely mistype `calls` as `class`. Damn muscle memory.

OH: "Sisqó is a Pythong enthusiast"

Check it out later when there's video, but right now @sethmlarson.dev is dropping some critical information about #OpenSource #Security at the #OpenSSFCommunity Day NA

Sad I won't be able to attend @monktoberfest.com as it's overlapping with Yom Kippur this year. Maybe next one.

I arrived in Denver for the #OSSSummit this week. Who else is here?

As part of United Nations Open Source Week, we’re convening a delegation of 12 open source experts whose work sustains the digital infrastructure we all rely on. Their presence brings critical, hands-on experience into international... #UNOpenSourceWeek #maintainathon #MaintainerSpotlight 1/3

In case you missed it last year, a good chat between @rstephens.me of @redmonk.com and @spot.bsky.social of @awscloud.bsky.social on the work on changing the #OpenSource culture to better support and engage in communities youtu.be/m3F4nTtCQBE?...