Securing PyPI accounts via Two-Factor Authentication - The Python Package Index Blog

The Blog of Thomas Depierre, Elixir and DevOps consultant.

An interoperability layer for open educational resources and learning materials - data-literacy-alliance/oerbservatory

📛 A Python package for using ontologies, terminologies, and biomedical nomenclatures - biopragmatics/pyobo

📘 Generate and apply coherent biomedical lexical indices for NER and NEN - biopragmatics/biolexica

🗺️ Community curated and predicted equivalences and related mappings between named biological entities that are not available from primary sources. - biopragmatics/biomappings

An opinionated implementation of a simple subset of SSSOM, based on Pydantic - cthoyt/sssom-pydantic

A python data model for JSKOS. Contribute to cthoyt/jskos development by creating an account on GitHub.

🛣️ Semantic Mapping Reasoning Assembler (SeMRA): tooling for semantic mappings - biopragmatics/semra

Prediction and curation of semantic mappings in SSSOM - cthoyt/sssom-curator

A Python client to OpenCitations. Contribute to cthoyt/opencitations-client development by creating an account on GitHub.

Recently, PyPI announced that they would force everyone that maintains a project or an organization on the platform will have to enable 2FA. This is one more step in the direction of strongly protecting the package providers and their users. I am not opposed to it. But it made me think of the discussions we have around FOSS about reciprocity and unfair burden1. And about double standards. And how it is hard to make corporations understand the upside of Open Source, and how diffuse it is. Let’s talk about security tokens, 2FA, and how corporations do not understand their place in the FOSS ecosystem. I do not think PyPI do this here, they seem to have taken the decision ↩

A comprehensive guide to securing your Python dependencies from ingestion to deployment, covering linting, pinning, vulnerability scanning, SBOMs, and attestations

Les paquets permettent d’installer des logiciels et des bibliothèques sur un ordinateur, mais quel format pour quelle tache ?