Topics covered in this episode:

<ul>
	<li>* <a href="http://pypistats.org?featured_on=pythonbytes">pypistats.org</a> was down, is now back, and there’s a CLI*</li>
<li>* <a href="https://blog.jetbrains.com/pycharm/2025/08/the-state-of-python-2025/?featured_on=pythonbytes">State of Python 2025</a>*</li>
<li>* <a href="https://wrapt.readthedocs.io/en/develop/index.html?featured_on=pythonbytes">wrapt: A Python module for decorators, wrappers and monkey patching.</a>*</li>
<li><a href="https://pysentry.com?featured_on=pythonbytes">pysentry</a></li>
<li>Extras</li>
<li>Joke</li>

</ul><a href='https://www.youtube.com/watch?v=eLBwqF-zc3I' style='font-weight: bold;'data-umami-event="Livestream-Past" data-umami-event-episode="446">Watch on YouTube</a>

About the show

Sponsored by us! Support our work through:

<ul>
<li>Our <a href="https://training.talkpython.fm/?featured_on=pythonbytes">courses at Talk Python Training</a></li>
<li><a href="https://courses.pythontest.com/p/the-complete-pytest-course?featured_on=pythonbytes">The Complete pytest Course</a></li>
<li><a href="https://www.patreon.com/pythonbytes">Patreon Supporters</a></li>
</ul>

Connect with the hosts

<ul>
<li>Michael: <a href="https://fosstodon.org/@mkennedy">@mkennedy@fosstodon.org</a> / <a href="https://bsky.app/profile/mkennedy.codes?featured_on=pythonbytes">@mkennedy.codes</a> (bsky)</li>
<li>Brian: <a href="https://fosstodon.org/@brianokken">@brianokken@fosstodon.org</a> / <a href="https://bsky.app/profile/brianokken.bsky.social?featured_on=pythonbytes">@brianokken.bsky.social</a></li>
<li>Show: <a href="https://fosstodon.org/@pythonbytes">@pythonbytes@fosstodon.org</a> / <a href="https://bsky.app/profile/pythonbytes.fm">@pythonbytes.fm</a> (bsky)</li>
</ul>

Join us on YouTube at <a href="https://pythonbytes.fm/stream/live">pythonbytes.fm/live</a> to be part of the audience. Usually Monday at 10am PT. Older video versions available there too.

Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to <a href="https://pythonbytes.fm/friends-of-the-show">our friends of the show list</a>, we'll never share it.

Brian #1: <a href="http://pypistats.org?featured_on=pythonbytes">pypistats.org</a> was down, is now back, and there’s a CLI

<ul>
<li><a href="https://pypistats.org?featured_on=pythonbytes">pypistats.org</a> is a cool site to check the download stats for Python packages.</li>
<li>It was <a href="https://github.com/psf/pypistats.org/issues/82?featured_on=pythonbytes">down for a while</a>, like 3 weeks?</li>
<li>A couple days ago, <a href="https://fosstodon.org/@hugovk@mastodon.social/115074427645537464">Hugo van Kemenade announced that it was back up</a>.</li>
<li>With some changes in stewardship

<ul>
<li>“<a href="http://pypistats.org/?featured_on=pythonbytes">pypistats.org</a> is back online! 🚀📈

Thanks to @jezdez for suggesting the @ThePSF takes stewardship and connecting the right people, to @EWDurbin for migrating, and of course to Christopher Flynn for creating and running it for all these years!”</li>
</ul></li>
<li>Hugo has a CLI version, <a href="https://github.com/hugovk/pypistats?featured_on=pythonbytes">pypistats</a>

<ul>
<li>You can give it a command for what you want to search for
<ul>
<li>recent,overall, python_major, python_minor, system</li>
</ul></li>
<li>Then either a package name, a directory path, or if nothing, it will grab the current directory package via pyproject.toml or setup.cfg</li>
<li>very cool</li>
</ul></li>
</ul>

Michael #2: <a href="https://blog.jetbrains.com/pycharm/2025/08/the-state-of-python-2025/?featured_on=pythonbytes">State of Python 2025</a>

<ul>
<li>Michael’s Themes
<ul>
<li>Python people use Python: 86% of respondents use Python as their main language</li>
<li>We are mostly brand-new programmers: Exactly 50% of respondents have less than two years of professional coding experience</li>
<li>Data science is now over half of all Python</li>
<li>Most still use older Python versions despite benefits of newer releases: <a href="https://blog.jetbrains.com/pycharm/2025/08/the-state-of-python-2025/#most-still-use-older-python-versions-despite-benefits-of-newer-releases">Compelling math to make the change</a>.</li>
<li>Python web devs resurgence</li>
</ul></li>
<li>Forward-looking trends
<ul>
<li>Agentic AI will be wild</li>
<li>Async, await, and threading are becoming core to Python</li>
<li>Python GUIs and mobile are rising</li>
</ul></li>
<li>Actionable ideas
<ul>
<li>Action 1: Learn uv</li>
<li>Action 2: Use the latest Python</li>
<li>Action 3: Learn agentic AI</li>
<li>Action 4: Learn to read basic Rust</li>
<li>Action 5: Invest in understanding threading</li>
<li>Action 6: Remember the newbies</li>
</ul></li>
</ul>

Brian #3: <a href="https://wrapt.readthedocs.io/en/develop/index.html?featured_on=pythonbytes">wrapt: A Python module for decorators, wrappers and monkey patching.</a>

<ul>
<li>“The aim of the wrapt module is to provide a transparent object proxy for Python, which can be used as the basis for the construction of function wrappers and decorator functions.

An easy to use decorator factory is provided to make it simple to create your own decorators that will behave correctly in any situation they may be used.”</li>
<li>Why not just use <code>functools.wraps()</code>?

<ul>
<li>“The wrapt module focuses very much on correctness. It therefore goes way beyond existing mechanisms such as <code>functools.wraps()</code> to ensure that decorators preserve introspectability, signatures, type checking abilities etc. The decorators that can be constructed using this module will work in far more scenarios than typical decorators and provide more predictable and consistent behaviour.”</li>
</ul></li>
<li>There’s a <a href="https://github.com/GrahamDumpleton/wrapt/tree/master/blog?featured_on=pythonbytes">bunch of blog posts</a> from 2014 / 2015 (and kept updated) that talk about how wrapt solves many issues with traditional ways to decorate and patch things in Python, including <a href="https://github.com/GrahamDumpleton/wrapt/blob/master/blog/01-how-you-implemented-your-python-decorator-is-wrong.md?featured_on=pythonbytes">“How you implemented your Python decorator is wrong”</a>.</li>
<li><a href="https://wrapt.readthedocs.io/en/latest?featured_on=pythonbytes">Docs</a> are pretty good, with everything from simple wrappers to an example of building a wrapper to handle <a href="https://wrapt.readthedocs.io/en/latest/examples.html#thread-synchronization">thread synchronization</a></li>
</ul>

Michael #4: <a href="https://pysentry.com?featured_on=pythonbytes">pysentry</a>

<ul>
<li>via <a href="https://bsky.app/profile/owen7ba.bsky.social/post/3lwojcl4ycs2a?featured_on=pythonbytes">Owen Lamont</a></li>
<li>Install via <code>uv tool install pysentry-rs</code></li>
<li>Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner.</li>
<li>PySentry audits Python projects for known security vulnerabilities by analyzing dependency files (<code>uv.lock</code>, <code>poetry.lock</code>, <code>Pipfile.lock</code>, <code>pyproject.toml</code>, <code>Pipfile</code>, <code>requirements.txt</code>) and cross-referencing them against multiple vulnerability databases. It provides comprehensive reporting with support for various output formats and filtering options.</li>
<li>Key Features:

<ul>
<li>Multiple Project Formats: Supports <code>uv.lock</code>, <code>poetry.lock</code>, <code>Pipfile.lock</code>, <code>pyproject.toml</code>, <code>Pipfile</code>, and <code>requirements.txt</code> files</li>
<li>External Resolver Integration: Leverages <code>uv</code> and <code>pip-tools</code> for accurate requirements.txt constraint solving</li>
<li>Multiple Data Sources:

<ul>
<li>PyPA Advisory Database (default)</li>
<li>PyPI JSON API</li>
<li>OSV.dev (Open Source Vulnerabilities)</li>
</ul></li>
<li>Flexible Output for different workflows: Human-readable, JSON, SARIF, and Markdown formats</li>
<li>Performance Focused:

<ul>
<li>Written in Rust for speed</li>
<li>Async/concurrent processing</li>
<li>Multi-tier intelligent caching (vulnerability data + resolved dependencies)</li>
</ul></li>
<li>Comprehensive Filtering:

<ul>
<li>Severity levels (low, medium, high, critical)</li>
<li>Dependency scopes (main only vs all [optional, dev, prod, etc] dependencies)</li>
<li>Direct vs. transitive dependencies</li>
</ul></li>
<li>Enterprise Ready: SARIF output for IDE/CI integration</li>
<li>I tried it on <a href="http://pythonbytes.fm">pythonbytes.fm</a> and found only one issue, sadly can’t be fixed:

<pre><code>PYSENTRY SECURITY AUDIT
=======================

SUMMARY: 89 packages scanned • 1 vulnerable • 1 vulnerabilities found

SEVERITY: 1 LOW

UNFIXABLE: 1 vulnerabilities cannot be fixed

VULNERABILITIES
---------------

1. PYSEC-2022-43059 aiohttp v3.12.15 [LOW] [source: pypa-zip]
 AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE:...

Scan completed
</code></pre></li>
</ul></li>
</ul>

Extras

Michael:

<ul>
<li>I’ve been rumbling with <a href="https://github.com/rvben/rumdl?featured_on=pythonbytes">rumdl</a>.
<ul>
<li>Ruben fixed one of my complaints about it with <a href="https://github.com/rvben/rumdl/issues/58?featured_on=pythonbytes">issue #58</a>.</li>
<li>Config seems like it might be off. Here’s mine <a href="https://gist.github.com/mikeckennedy/ec708e48b21d89c259eebf39e172b72c?featured_on=pythonbytes">.rumdl.toml</a>.</li>
<li>I’ve been using it on the upcoming <a href="https://talkpython.fm/books/python-in-production?featured_on=pythonbytes">Talk Python in Production book</a>
<ul>
<li><a href="https://talkpython.fm/books/python-in-production?featured_on=pythonbytes">Read the first third online</a> and <a href="https://talkpython.fm/books/python-in-production/buy?featured_on=pythonbytes">get notified when its out</a>.</li>
<li>20 or so Markdown files</li>
<li>45,000 words of content</li>
</ul></li>
</ul></li>
<li>I asked if 3.13.6 would be the last 3.13 release? No.
<ul>
<li><a href="https://mastodon.social/@hugovk/115051786032886280?featured_on=pythonbytes">Thanks Hugo</a>.</li>
<li><a href="https://discuss.python.org/t/python-3-14-0rc2-and-3-13-7-are-go/102403?featured_on=pythonbytes">Python 3.13.7 is now out</a>.</li>
</ul></li>
</ul>

Joke: <a href="https://x.com/pr0grammerhum0r/status/1956023038278840407?s=12&featured_on=pythonbytes">Marked for destruction</a>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

#446 State of Python 2025

Python Bytes

AI Chapters

AI Insights

Reviews