this post was submitted on 28 Oct 2025
102 points (100.0% liked)

Python

7576 readers
32 users here now

Welcome to the Python community on the programming.dev Lemmy instance!

πŸ“… Events

PastNovember 2023

October 2023

July 2023

August 2023

September 2023

🐍 Python project:
πŸ’“ Python Community:
✨ Python Ecosystem:
🌌 Fediverse
Communities
Projects
Feeds

founded 2 years ago
MODERATORS
 

The Python Software Foundation, earlier this year, successfully obtained a $1.5 million grant from the US National Science Foundation "to address structural vulnerabilities in Python and PyPI". The actual grant came with some strings attached though, in the form of a requirement not to pursue diversity, equity, and inclusion programs. So the Foundation has withdrawn the proposal rather than agree to terms that run counter to its own mission.

We're disappointed to have been put in the position where we had to make this decision, because we believe our proposed project would offer invaluable advances to the Python and greater open source community, protecting millions of PyPI users from attempted supply-chain attacks. The proposed project would create new tools for automated proactive review of all packages uploaded to PyPI, rather than the current process of reactive-only review.

all 9 comments
sorted by: hot top controversial new old
[–] onlinepersona@programming.dev 31 points 3 weeks ago

The EU should be stepping in. The entire economic region is dependent on python and even introduced some supply chain security requirements, so this would help resolve those.

[–] __siru__@discuss.tchncs.de 15 points 3 weeks ago (1 children)

I am glad that PSF is not bowing to these requirements in order to get the grant.

[–] Cevilia@lemmy.blahaj.zone 4 points 3 weeks ago (1 children)

That claw-back rule... wow. "Sure, we'll give you lots of money, but if we ask for it back you have to give it to us"