Modern Python developers use virtual environments (venvs), to keep their projects and dependencies separate. Managing project dependencies gets more complex as the number of dependencies grows.

A recently spotted supply chain attack abused an old but legitimate Python package to deliver a malicious payload. Read more on how the attacker managed to do it and how to protect yourself from it.

PyApp seems to be taking the Python world by storm, providing long-awaited click-and-run Python distribution. For developers who need a little more versatility, there’s uv. Find these tools and more ...