Anthropic invests $1.5M in the Python Software Foundation

kept by eddie jan 14

Anthropic donated $1.5 million over two years to the Python Software Foundation, earmarked primarily for improving Python ecosystem security and supply-chain protection.

What’s new in Python 3.15 — Python 3.15.0b2 documentation
Python 3.15 introduces PEP 810, which enables explicit lazy imports to defer module loading and improve startup performance.
also on Python Software Foundation, #python, #open-source
Python 3.15's JIT is now back on track
CPython's volunteer-driven JIT project achieved 11-12% speedups on macOS AArch64 and is back on track for Python 3.15, overcoming funding loss and earlier performance setbacks.
also on CPython, #python, #open-source
GitHub Actions is the weakest link
GitHub Actions' default features—mutable tags, pull_request_target, template injection, and write-scoped tokens—have enabled a chain of supply-chain attacks on open-source registries, and GitHub's opt-in security roadmap won't fix the root causes.
also on PyPI, #security, #open-source
GitHub - cased/kit: The toolkit for AI devtools context engineering. Build with codebase mapping, symbol extraction, and many kinds of code search.
Kit provides a Python toolkit for codebase mapping, symbol extraction, and code search to build LLM-powered developer tools and agents.
also on PyPI, #open-source, #ai-coding
the problem isn’t OpenClaw. it’s the architecture.
The article argues that the security risks from AI agent frameworks like OpenClaw are inherent to the architecture of autonomous tool use and marketplaces, not just a single platform.
also on #supply-chain, #security, Anthropic, #open-source