# python packages Published articles for python packages. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Why Backporting Python Security Fixes Is Complex and Risky DevFeed: [Why Backporting Python Security Fixes Is Complex and Risky]() Original publisher: [Read original article]() Published: 2026-02-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Python](), [Security](), [Vulnerabilities](), [chainguard libraries]() Tags: [chainguard-libraries](), [cve](), [dependency](), [machine-learning](), [python](), [python-dependencies](), [python-libraries](), [python-packages](), [secure-software](), [security](), [vulnerabilities](), [zero-cve-python-libraries]() ### AI overview The article explains why updating vulnerable Python dependencies can be difficult when compatibility constraints prevent immediate upgrades. It argues that manually backporting security patches is complex, time-consuming, and risky, and presents Chainguard Libraries as a source of tested and verified patched packages. ### Source excerpt Backporting Python CVE fixes is complex and risky. Chainguard Libraries delivers source-built, tested, and verified patched packages you can trust. ## Introducing automatic, short-lived credentials for Chainguard Libraries for Python DevFeed: [Introducing automatic, short-lived credentials for Chainguard Libraries for Python]() Original publisher: [Read original article]() Published: 2026-01-15T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries for python](), [chainguard libraries](), [Authentication](), [pip](), [developer velocity](), [Usability]() Tags: [authentication](), [chainguard-libraries](), [chainguard-libraries-for-python](), [chainguard-libraries-python](), [chainguard-packages](), [chainguard-python-containers](), [developer-velocity](), [github-actions](), [pypi](), [python-libraries](), [python-packages](), [secure-python-packages](), [security](), [usability]() ### AI overview Chainguard announces integrated authentication for Chainguard Libraries for Python through a keyring package. The package provides short-lived credentials that refresh automatically, enabling secure pip access without repeatedly creating, copying, or managing long-lived tokens. It supports local development and GitHub Actions environments with assumable identities. ### Source excerpt New integrated authentication for Python Libraries with a keyring: use short-lived credentials for pip installs to stay secure without slowing developers down. ## The ultimate guide to creating a secure Python package DevFeed: [The ultimate guide to creating a secure Python package]() Original publisher: [Read original article]() Author: Gourav Singh Bais Published: 2024-05-08T05:00:00Z Content type: tutorial Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Python](), [pip](), [Code](), [Security](), [TLS (Transport Layer Security)](), [GitHub]() Tags: [acquisition](), [awareness](), [blog](), [code](), [code-security](), [developer](), [devsecops](), [documentation](), [draftdotdev](), [engineering](), [github](), [guide](), [how-to](), [installation](), [open-source-security](), [packages](), [pycharm](), [pypi](), [python](), [python-packages](), [security](), [snyk-code](), [snyk-open-source](), [tls](), [tutorial]() ### AI overview This guide explains how to create a modern secure Python package, covering package structure, metadata, tests, documentation, installation, imports, distribution, and use of public or private package indexes. It also discusses using TLS to secure private indexes and provides a GitHub repository with the tutorial code. ### Source excerpt This guide will detail all the steps to build a modern Python package. ## Getting Started with Pipenv DevFeed: [Getting Started with Pipenv]() Original publisher: [Read original article]() Author: masnun Published: 2017-11-25T23:09:32Z Content type: tutorial Language: en Sources: [Abu Ashraf Masnun]() Topics: [Python](), [pip](), [Package manager](), [PyPI](), [Flask](), [PyCharm](), [REST API](), [Windows]() Tags: [dependencies](), [environment-management](), [getting-started](), [install](), [packaging](), [pycharm](), [pypi](), [python](), [python-packages](), [rest-api](), [windows]() ### AI overview A tutorial introducing Pipenv for Python development. It explains how Pipenv combines package installation with isolated virtual environments, records dependencies in a Pipfile, creates a lock file for deterministic builds, and supports installing packages, running applications, activating environments, and managing dependencies. ### Source excerpt If you're a Python developer, you probably know about pip and the different environment management solutions like virtualenv or venv. The pip tool is currently the standard way to install a Python package. Virtualenv has been a popular way of isolating Python environments for a long time. Pipenv combines the very best of these tools [...] The post Getting Started with Pipenv appeared first on Abu Ashraf Masnun. ## Installing Python Packages DevFeed: [Installing Python Packages]() Original publisher: [Read original article]() Author: Map Published: 2011-11-01T20:55:56Z Content type: tutorial Language: en Sources: [Craig Kerstiens]() Topics: [Python](), [pip](), [PyPI](), [Django]() Tags: [install](), [pypi](), [python](), [python-packages](), [requirements](), [version]() ### AI overview A tutorial on installing Python packages with pip, using a virtualenv environment, and recording installed package versions for sharing through a requirements list. It explains that packages are hosted on PyPI and demonstrates creating, activating, and deactivating an isolated project environment. ### Source excerpt Now that you have you system and project environment all setup you probably want to start developing. But you likely don't want to start writing an entire project fully from scratch, as you dive in you'll quickly realize theres many tools helping you build projects and sites faster. For example making a request to a website there's Requests, for handling processing images there's Python Imaging Library, or for a full framework to help you in building a site there's Django. With all of these there's one simple and common way to install them. But first a little more on how it all works. All major Python packages are hosted on PyPi (Pronounced Pi-P or Cheeseshop). When you use a common python installer it will: Search for the package you specify If you specify a version will use it, otherwise will use the latest Will download the source for that package Install it into your Python environment Now for actually installing... Lets get started with installing the three packages below. At this point you should at least have a fresh Python environment, however you don't have an immediate way to install packages. The defacto Python package installer is pip. Earlier we setup virtualenv to help isolate our python packages we were working with. First lets go ahead and create a folder for our project then setup a new environment for the project we'll work on: $ mkdir myapp $ cd myapp $ virtualenv --no-site-packages venv If we list the contents of the directory you'll now see a folder venv. Within this folder you'll find all the parts of the environment that virtualenv just created: $ ls venv $ ls venv bin include lib Now you've got a sandboxed environment that exists but you haven't loaded it. You can now activate and deactivate this any time you like. Once you do this it customizes your path to use the packages you've installed for this environment. To load your environment when in the myapp directory: $ source venv/bin/activate To deactivate this simple: $ deactivate Now that we'