Seth Larson

@sethmlarson
1.9K Followers
406 Following
931 Posts

Security and Fellow at the Python Software Foundation 🐍 Trans rights, BLM, Minnesoootan, retro gaming, he/him



Blog: https://sethmlarson.dev

Bloghttps://sethmlarson.dev
Signalsethmlarson.99

Today I learned #TIL: "How to automatically build a human.json file in Hugo"

👉 https://foosel.net/til/how-to-automatically-build-a-humanjson-file-in-hugo/

How to automatically build a human.json file in Hugo

As I mentioned the other day, I recently added a human.json file to this site. However, it became a bit annoying adding new vouches to the json manually. So today I sat down and made it get created automatically during my page build powered by Hugo, based on a list of vouches stored in a vouches.yaml data file1. For this I first created said data file in data/vouches.yaml: - url: https://food.foosel.net date: "2026-03-14" - url: https://chaos.social/@foosel date: "2026-03-14" - url: https://octoprint.org date: "2026-03-14" # ... Then I created a new output format humanjson in my config.yaml, making sure to also add it to the home page:

foosel.net
@sethmlarson @pradyunsg dependency cooldowns come to android

I just received my pre-ordered GameSir “Pocket Taco” this morning and found the setup to be non-trivial for pairing with an iPhone and configuring the controller with the @delta_emulator Here’s the exact steps to setup and start playing with this new controller:

🌮 https://sethmlarson.dev/getting-started-with-gamesir-pocket-taco-iphone-delta-emulator

#gaming #delta #emulation #retrogaming #controller #gamesir #pockettaco #iphone #ios

Getting started with the GameSir “Pocket Taco” with iPhone and Delta emulator

GameSir shipped the pre-orders for the “Pocket Taco” mobile controller on March 15th and I received mine today. This controller uses Bluetooth and a padded grip mechanism to add physical buttons to...

sethmlarson.dev

We’re looking at adding inline types to Requests. If you have typed codebases that use Requests, we’d love feedback!

https://github.com/psf/requests/issues/7271

RFC: Adding inline type annotations to Requests · Issue #7271 · psf/requests

TipWant to skip the background? Jump to How to test or What feedback we need. Motivation Requests has notably been without inline type annotations since type hints entered the Python ecosystem. We'...

GitHub

The popular #Python library “Requests” needs your help! @nateprewitt plans to add type hints to the API and is requesting feedback:

https://sethmlarson.dev/python-library-requests-is-adding-type-hints-and-needs-your-help

#typing #http #typehints

Python library “Requests” needs you to test type hints

Requests is a popular HTTP client library available on the Python Package Index (PyPI). Sitting in the top 10 packages by downloads on PyPI, this library is used by many, many projects. This librar...

sethmlarson.dev

👀 Inline type annotations in the Python requests library. What do you think? 🤔

https://github.com/psf/requests/issues/7271

#python

RFC: Adding inline type annotations to Requests · Issue #7271 · psf/requests

TipWant to skip the background? Jump to How to test or What feedback we need. Motivation Requests has notably been without inline type annotations since type hints entered the Python ecosystem. We'...

GitHub
If you're going to PyConUS and planning out your talk schedule, I scraped the website talks and saved the title, times, room, speaker, and description into a CSV. You can find it in this Github gist (https://gist.github.com/ptmcg/d851232d6b90812e1c01c990ecec516c), which uses littletable and rich packages to provide a simple REPL to search the talks by keyword, title, and speaker. #pycon #pyconus #python #littletable
It's a good problem to have that I'm having a difficult time thinking of a website that /doesn't/ have an RSS feed. Where's "https://neverrss.com" when you need it? :)

This matches my suggestion in “Open Source Security work isn't Special”, where I argued against the assumption that security work is done only by few privileged maintainers.

https://sethmlarson.dev/security-work-isnt-special

Kudos to GitHub for improving this important feature! 🚀

Open Source Security work isn't “Special”

I gave this keynote at OpenSSF Community Day NA 2025 in Denver, Colorado. There is a recording published on YouTube. This talk was given as the Security-Developer-in-Residence at the Python ...

sethmlarson.dev

Exciting news for projects on GitHub looking to use the private vulnerability reporting / security advisories features:

“We're working toward enabling fine-grained permissions for security advisories - create, read, edit, and close/accept/publish - that can be assigned at the repository level through custom repository roles”

https://github.com/orgs/community/discussions/189802

Investing in the security advisory experience on GitHub 🔐 · community · Discussion #189802

We hear you: the signal-to-noise problem is real Over the past few months, we've heard from maintainers across the ecosystem - in community discussions, in support channels, and directly - that the...

GitHub