urllib3

In the final blog post in a series about @urllib3 a Python package that is downloaded billions of times a year, @bill_nottingham reviews lessons learned and how paying the maintainers makes all of this work possible bit.ly/3FIxE95

In the second blog post in a series about @urllib3, a Python package that is downloaded billions of times a year, we explore how the urllib3 team establishes account security, fine tunes processes, and more bit.ly/3SOl8b1

In the first in a series of posts about @urllib3, a Python package that is downloaded billions of times a year, we dive into how maintainers keep the project secure (and why you should care) bit.ly/3SCSn0D

Introducing the brand new Sigstore landscape! As the ecosystem grows quickly, this landscape (which is part of @theopenssf ) highlights: - @projectsigstore projects - integrations - signed projects - language clients - case studies & more! landscape.openssf.org/sigstore

today's video is about a neat python packaging hack that `urllib3` did to deprecate `urllib[secure]` -- I explain how it works and why it's such a clever idea -- youtu.be/_jUXdX8e9Wg

New from Scorecards - Badges that show off your hard work to improve security practices - especially useful for maintainers to assess dependencies at a glance openssf.org/blog/2022/09/0… Examples from @TensorFlow @FlutterDev @urllib3

Got a whole bunch of @urllib3 stickers ready for @PyConUK !

In a wholesome collaboration between open source projects, @SeleniumHQ quickly merged and released a deprecation warning fix submitted by the @urllib3 team, making it actionable for all users 🤗

PSA: urllib3 v2.0 (due later this year) will follow Python 3.10 and PEP 644 by only supporting OpenSSL 1.1.1 and greater, not alternatives like LibreSSL. This will increase the security of all our users and will help us move faster!

The provenance of the wheel and source distribution can be verified using slsa-verifier v1.3.0:

📦urllib3 v1.26.12 has been released! 🎉 This release deprecates the urllib3[secure] extra and the urllib3.contrib.pyopenssl module. Both will be removed in a future v2.x version. This release is also the first with SLSA provenance information: github.com/urllib3/urllib…

We are critical infrastructure for #Python. If your organization uses Python, you depend on urllib3. github.com/sponsors/urlli…

urllib3 has been downloaded 6 billion times! 🎉🥳🎉 0 @ 2008-11-23 (first release) 1B @ 2019-10-11 (~11 years) 2B @ 2020-08-20 (314 days) 3B @ 2021-06-22 (306 days) 4B @ 2021-11-02 (133 days) 5B @ 2022-03-21 (139 days) 6B @ 2022-07-28 (129 days) pepy.tech/project/urllib3

Just released version 0.2.0 of Sublime REST Client 🚀 Powered by @urllib3 If you use Sublime Text 4 give it a try, let me know what you think packagecontrol.io/packages/REST%…

The @projectsigstore community is hosting user-facing office hours tomorrow Tue July 19th at 12.30pm ET. Join us for demos & discussions featuring: 🔒Sigstore in production @EdgelessSystems - @datosh18 🐍Sigstore + @urllib3 - @sethmlarson 🦀Sigstore + @rustlang - @decodebytes

Welcome aboard, Python community!

Thanks @SpotifyEng! 🌻

CPython has experimental support for OpenSSL 3.0 with "known performance regressions, missing features and potential bugs". Major distributions ship Python with OpenSSL 3.0 though, which breaks urllib3 tests. 😿 Help us understand why and get paid $300! github.com/urllib3/urllib…

@pradyunsg Thanks for making our docs beautiful and functional 🎉🥳🎉

We reached 5 BILLION (5,000,000,000) total downloads last week! 🥳🎉 Help support #Python's most downloaded package: github.com/sponsors/urlli…