3 ms·
Confused about Python in particular considering a lot of powerful and common dependencies in the ecosystem starting out from numpy and friends all have C/++ com
by evrimoztamur 3y ago
Confused about Python in particular considering a lot of powerful and common dependencies in the ecosystem starting out from numpy and friends all have C/++ components to them for performance improvements. Surely this is a vector to be considered?
- SethMLarson 3y agoPython itself is memory-safe, but you're right that a good chunk of the packaging ecosystem uses memory unsafe languages for performance and interop. The Python Software Foundation noted this in our response to the US Government RFI on open source security. There are efforts to make using Rust easier as a systems language for Python packages and some security-critical packages like 'cryptography' have migrated to Rust.
- pookha 3y agoThat's the irony in all of this. The Fort is sprinkling their wisdom down upon the masses and proclaiming that C++ is unsafe while arguing for a language that's a wrapper for c++ developers...Reminds me of John Gall's book about systems "The system itself does not do what it says it is doing."