#483 Thanks Brian

#483 Thanks Brian

From Python Bytes by Michael Kennedy and Brian Okken

June 9, 2026 · 29 min · Episode 483

About this episode

This episode discusses vulnerability and malware checks in Python's uv library, critical vulnerabilities in open source packages, and updates on the live show.

Topics covered in this episode: Vulnerability and malware checks in uv HTTP GET requests with the Python standard library Millions of AI agents imperiled by critical vulnerability in open source package alembic-git-revisions Extras Joke Watch on YouTube About the show Goodbye and Thanks Brian Thanks Calvin for being part of this and future episodes! Also new time for the live show. Thanks Brian for all the hard work over the years. Calvin #1: Vulnerability and malware checks in uv release just yesterday by Astral https://astral.sh/blog/uv-audit uv audit scans dependencies for known vulnerabilities and abandoned packages via the OSV database — runs 4–10x faster than pip-audit Malware check runs on every install/sync, catching actively malicious packages (credential stealers, etc.) before they execute — including ones PyPI quarantined but lockfiles can still reference Enable malware scanning with UV_MALWARE_CHECK=1 — it's opt-in and in preview Future roadmap includes a resolver that steers toward vulnerability-free versions and install-time warnings scoped to newly added deps only Michael #2: HTTP GET requests with the Python standard library If you’re doing HTTP in Python, you’re…

People in this episode

Hosts: Michael Kennedy, Brian Okken

Topics covered

  • vulnerability checks
  • malware detection
  • Python HTTP libraries
  • open source vulnerabilities
  • AI agents
  • live show updates

Keywords

  • uv library
  • malware checks
  • HTTP GET requests
  • Python standard library
  • open source
  • AI agents
  • vulnerabilities

Mentioned in this episode

Organizations: uv, OSV

Products: alembic-git-revisions, requests, httpx, urllib3, Niquest

More episodes of Python Bytes

Explore listener stats, chart rankings, contacts and more on the Python Bytes podcast page.