← Feed

Posts

• View post

  RE: https://mas.to/@davidism/117292399049862157 The beginning of the month, when every junk producer's token limit resets, and we get a whole new wave of junk. Turning off PRs helped a lot, but they just started opening "test issue, checking if my API access is broken", or commenting or emailing their patches instead. I really wish I knew how to escape this without turning off community interaction entirely. #python #flask #opensource

• View post

  I've turned off pull requests from non-members for Flask, Werkzeug, Jinja, and Click this week, and have enjoyed not waking up to a fresh wave of AI junk every morning. I think I'm going to update our contributing guide to say "introduce yourself and how you use the library in chat first if you want to contribute pull requests". Sad that we had to go here, but aside from conference sprints we weren't really getting outside contribution anyway (which is also sad, but that&#3...

• View post

  Click through the pages of closed pull requests for Flask. It's not until page 9 (end of 2024) that you see a majority are merged instead of closed. Only 38 of the last 200 PRs are merged. Similar story for Werkzeug, Jinja, and Click. LLMs and genAI are such an obvious negative on maintainer time. https://github.com/pallets/flask/pulls?page=9&q=is%3Apr+is%3Aclosed

• View post

  Rest and recharge, most of us are not working in an ER,. ... And it turns out running around panicked also doesn't produce good results in an actual ER. @baconandcoconut #nbpy

• View post

  Clapping every time the projector detects the laptop. It's trying its best. #nbpy

• View post

  Web app db design: if you have optional string fields, do you make the column nullable, or not nullable with a default empty string. Consider HTML form data (empty field is sent as empty string, not omitted), and rendering (rendering empty for None has to be remembered everywhere). I've never seen any consensus. Comment if you want to explain why you choose one over the other! #python #flask #django :boostplease:

• View post

  Yeah, Pallets and Flask sponsored North Bay Python! But I know you all actually want the cat pics from my slides 🐈‍⬛🐈‍⬛ Here's a link to the slides in blog form: https://davidism.com/sponsoring-north-bay-python-2026/ #nbpy #python #flask

• View post

  RE: https://mas.to/@davidism/116483352787950950 Was surprised how close this stayed. At a few points it was an even 50/50 split. No one picked the chaos option, which is a good sign. People made good arguments for both options. A little confusion over "default" whether that was at the SQL, form, or code level. I ended up picking "not null, default empty" for my current project because I don't need to distinguish "no response" from &a...

• View post

  So tired of "security" reports like "if an attacker can place a symlink / set an env var / write a file in a higher directory". How did the attacker get there? That's the security issue. I think I need to add "The system the app is deployed on is expected to be fully trusted and otherwise secure." to our security policy.

• View post

  Road trip from San Diego to Petaluma for North Bay Python! With our six month old! In the longest trip in our Ioniq 5 yet! We’re totally fine! #NBPy

• View post

  I brewed a witbier and am bring some cans for North Bay Python attendees. Limited supply! 👀 #NBPy

• View post

  North Bay Python begins! And what's that logo in the background? Yep, Pallets and Flask is sponsoring the conference, to give back to the great community that I look forward to visiting every year ❤️ #nbpy #python #flask

• View post

  "So why didn't you use Click?" ... "It just didn't click with me." @pathunstrom @astraluma I clapped. #nbpy #flask

• View post

  RE: https://hachyderm.io/@MaggieFero/116445302463030214 North Bay Python lunch has turned into everyone pointing at birds and saying "Bird!". I just pledged $4/per bird to our local conference team @MaggieFero and @phildini, help them raise money with birds! #nbpy #python

• View post

  @NorthBayPython @chrisjrn @robin my wife and I are planning to drive up with our 7 month old daughter 😊 Do you have any recommendations for kids things to do during the day, like library story time, parks, children's museums, etc?

• View post

  @AlSweigart huh, why does OEIS https://oeis.org/A000040 have so few? I bet there's some mailing list discussion somewhere explaining why

• View post

  I tried applying my own knowledge of where to start looking in a prompt to Claude Code: "Consider how rule matching is done by looking at `Map.match` in @src/werkzeug/routing/map.py and rule definition in @src/werkzeug/routing/rules.py. Does `Rule.__eq__` adequately check for duplicate rules? How can it account for `strict_slashes` behavior?" Even with all that, it missed the true cause completely, in two fresh sessions. So you can't even rely on being an expert to successfully use...

• View post

  company making maintainer work easier is now owned by company making that work harder https://astral.sh/blog/openai #Python

• View post

  Keynote by Brandon Sanderson "We Are The Art" https://www.youtube.com/watch?v=mb3uK-_QkOo

• View post

  Most security reports could be a couple sentences and a small code snippet, and would be better for it. I hate that every report is written as if it were a blog post about their finding and how it's the greatest disaster of all time. Write as if you're having a dialog with a knowledgeable maintainer, wait for questions to elaborate if needed. LLMs have not made this better either.

• View post

  "Stop using LLMs to generate output at us." Multiple times per day now, we get issues, comments, and PRs that are clearly copy paste LLM output, with no apparent care or interest in the project and community. They all sound the same, the initial post, the way they respond to feedback, walls of text with 5 subheadings even for 1 line docs changes. Every user profile is the same, one or more of: 1 month old, a giant flashy readme with no substance, 1000 PRs opened yesterday.

• View post

  It's really hard to hear about how helpful LLMs are when I deal with the opposite multiple times per day now. There are techniques experienced developers use to get better LLM results, but that's not simple and so approximately no one does it. Everyone who talks about how to use them correctly is a rounding error compared to the total number using them.

• View post

  FlaskCon is happening again this year at PyCon US 2025! https://flaskcon.com/2025/ The first day of PyCon, Friday May 16, 2 - 6 PM. We're looking for talk proposals about using Flask or the other Pallets projects, CFP closes April 17! #python #pyconus #flask

• View post

  FlaskCon is at PyCon US 2025, and we're currently looking for talk proposals! Anything related to Flask, Quart, Click, or Jinja; such as open source, community, web applications, monitoring, deployment, HTML, CSS, CLI, async, JavaScript, APIs, etc. Submit your talk proposal today: https://www.papercall.io/flaskcon-pyconus2025 #Python #Flask #PyConUS #FlaskCon

• View post

  FlaskCon call for proposals is open until April 17th, and we still need more submissions! Talk about Flask, Jinja, Click, Quart, HTMX, metrics, deployment, OpenAPI, Pydantic, GraphQL, internals, extensions, community, or anything else that might be related to Flask and the Pallets projects! #Python #Flask #PyConUS #FlaskCon https://flaskcon.com/2025/

• View post

  FlaskCon was a huge success! Thanks to all our amazing speakers, their talks, and our wonderful audience. The theme this year was overwhelmingly "live demos", and somehow they all went right. Was very rewarding to have a full room the entire time! Recordings will be up in the next week. #PyConUS #FlaskCon

• View post

  FlaskCon 2025 talks are now available to watch! https://www.youtube.com/playlist?list=PL-MSuSC-Kjb5QUUucArxREc8Ix3S1cPsk #Python #Flask #PyConUS2025 #FlaskCon