See also posts by tag or search with DuckDuckGo:
When a security researcher finds a vulnerability in your site, they need a way to tell you about it. Without a clear contact, they may resort to guessing at addresses like security@<yourdomain>, messaging random folks on social media, or give up. And of course, in the worst case, they might just publish the details, leaving you to find out when attackers do.
(n) glob qualifierGlobs sort filenames character by character, so numbered files often come out in a surprising order, with 10 before 2. Zsh has a neat fix for this: the n glob qualifier, which applies a “natural” sort, treating any run of digits as a number rather than a string of characters.
I previously announced my Python optimization workshop in Lisbon, on 10th October (which still has a few places). I am now pleased to add a Python/Django meetup on the Thursday before.
(OL) glob qualifierGot a directory that you want to tidy up bloat from? Whether you’re trying to find bad build artifacts in your work repository or clear out old cat videos from your home directory, Zsh’s (OL) glob qualifier can help you find the largest files.
caffeinate to keep your computer onIf you’re starting a long job on your Apple Macintosh Computer and wandering off for a coffee, the machine may go to sleep before it finishes due to inactivity. To prevent that from happening, also give your computer a boost with the caffeinate command, a macOS built-in since 2012 (OS X Mountain Lion).
I’m running a workshop in Lisbon next month, and you’re invited!
When a password manager detects that a user’s password has been leaked or reused, it can prompt them to change it, but the password change URL varies by site. The web’s answer to such discovery problems is the reserved /.well-known/ URL namespace (RFC 8615), home to machine-readable files and endpoints like security.txt. A Well-Known URL for Changing Passwords is the web specification that uses this namespace to fix password page discovery. It reserves the URL path /.well-known/change-password to redirect to your actual change password page, wherever that lives.
I made another package! Say hello to django-mcpz, for building Model Context Protocol (MCP) servers in your Django project.
:r (root) and :e (extension)Zsh modifiers are a family of suffixes that transform words as they’re expanded. Several of them are dedicated to slicing up filenames, replacing fiddly calls to dirname, basename, and friends. Let’s take a look at them now!
django-upgrade is my tool for automatically upgrading your project code for new Django versions. It rewrites your Python files to fix deprecations and adopt some new features, taking a chunk of the monotony out of upgrading between Django versions.
re.prefixmatch() instead of re.match() from Python 3.15Take this validation function:
SyntaxWarning: invalid octal escape sequenceTake this code:
TypeError: NamedTuple() got an unexpected keyword argumentTake this code, defining a small NamedTuple with a keyword argument per field:
New package just landed!
Back in January, I introduced tprof, a targeting profiler for Python 3.12+ that measures the time spent in specific functions, rather than your whole program. As a reminder, here’s the basic usage, specifying a target function with -t and a script to run:
It’s another day, another new package day here. Say hello to django-msgspec, a package of drop-in replacements for Django and Django REST Framework (DRF) components backed by msgspec.
git stash -p optimization in Git 2.55I got another commit merged in Git 2.55 (2026-06-29), yay! The release note reads:
ls-treeTo list all files in your repository as they were at a given commit, use git ls-tree with its -r and --name-only options:
(e) or + glob qualifiersZsh glob qualifiers can select files by many built-in attributes: type, size, modification time, and more. But when no built-in qualifier fits, you can bring in the e or + qualifiers to run arbitrary code, making globs a fully programmable file filter. With great power comes great responsibility!
git log with --perl-regexpgit log has an --author option to limit the output to commits from matching authors:
(m0) glob qualifiersMy downloads directory is a junk pile that I just never get around to fully clearing. So if I’ve just downloaded a bunch of files, I normally want to work with them and ignore the rest of the files.
time-machine is my library for mocking the current date and time in Python tests. Its headline advantage over freezegun, the library that inspired it, is speed.
time-machine is my library for mocking the current date and time in Python tests. I’ve just released version 3.3.0 with a decent number of changes, so here’s a lovely summary for you.
ValueError: day of month directive '%d' may not be used without a year directiveTake this code, parsing the date of an annually recurring event that only has a month and day, such as a work anniversary:
TypeError: NotImplemented should not be used in a boolean contextTake this class, which implements __eq__() and derives __ne__() from it: