wdm0006/python-skills

"description": "Opinionated, checklist-driven skills for professional software development across languages - Python libraries and web apps, Go projects, Swift/Apple apps, Rust crates, Scala projects, browser extensions, and UI design",    

"version": "2.31.0",     "homepage": "https://github.com/wdm0006/python-skills",     "keywords": ["python", "go", "swift", "rust", "scala", "javascript", "browser-extension", "library", "packaging", "testing", "ci", "api-design", "xss", "sa

"homepage": "https://github.com/wdm0006/python-skills",     "keywords": ["python", "go", "swift", "rust", "scala", "javascript", "browser-extension", "library", "packaging", "testing", "ci", "api-design", "xss", "sanitization", "sync-jobs",

[Credential-related source omitted]

# axe reports contrast failures with the exact ratio and element npx --yes @axe-core/cli "http://127.0.0.1:$PORT/" --tags wcag2a,wcag2aa

npx --yes @axe-core/cli "http://127.0.0.1:$PORT/" --tags wcag2a,wcag2aa

description: Add and review preconditions on operations that delete, overwrite, rewrite history, or resolve a caller-supplied name to a filesystem path — refusing instead of warning, placing the guard ahead of the first mutation, structural

description: Add and review preconditions on operations that delete, overwrite, rewrite history, or resolve a caller-supplied name to a filesystem path — refusing instead of warning, placing the guard ahead of the first mutation, structural

// `rm -rf --ignore-unmatch .`, keeping only the state files it rewrites.

// `rm -rf --ignore-unmatch .`, keeping only the state files it rewrites.

description: Prevents, detects, and remediates files that should never be committed — secrets (.env, API tokens, hardcoded credentials) and dev artifacts (build output, scratch databases, editor/OS files). Covers .gitignore (and why it does

description: Prevents, detects, and remediates files that should never be committed — secrets (.env, API tokens, hardcoded credentials) and dev artifacts (build output, scratch databases, editor/OS files). Covers .gitignore (and why it does

git rm --cached path/to/file        # untrack, leave working-tree copy in place

git rm --cached path/to/file        # untrack, leave working-tree copy in place

git rm -r --cached some/dir/        # for a directory

git rm -r --cached some/dir/        # for a directory

2. **Untrack going forward** (`git rm --cached` + `.gitignore` + `.env.example`

2. **Untrack going forward** (`git rm --cached` + `.gitignore` + `.env.example`

# .pre-commit-config.yaml repos:   - repo: https://github.com/gitleaks/gitleaks

# .pre-commit-config.yaml repos:   - repo: https://github.com/gitleaks/gitleaks

repos:   - repo: https://github.com/gitleaks/gitleaks     rev: v8.18.0

repos:   - repo: https://github.com/gitleaks/gitleaks     rev: v8.18.0

- repo: https://github.com/gitleaks/gitleaks

- repo: https://github.com/gitleaks/gitleaks

rev: v8.18.0     hooks: [{id: gitleaks}]   - repo: https://github.com/Yelp/detect-secrets

rev: v8.18.0     hooks: [{id: gitleaks}]   - repo: https://github.com/Yelp/detect-secrets

hooks: [{id: gitleaks}]   - repo: https://github.com/Yelp/detect-secrets     rev: v1.5.0

hooks: [{id: gitleaks}]   - repo: https://github.com/Yelp/detect-secrets     rev: v1.5.0

- repo: https://github.com/Yelp/detect-secrets

- repo: https://github.com/Yelp/detect-secrets

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- [ ] `git rm --cached` + .gitignore entry for each offending file

- [ ] `git rm --cached` + .gitignore entry for each offending file

run: |           set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

run: |           set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

run: |           set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip           unzip -oq /tmp/sl.zip -d /tmp/sl

set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip           unzip -oq /tmp/sl.zip -d /tmp/sl

set -euxo pipefail           curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip           unzip -oq /tmp/sl.zip -d /tmp/sl

curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

curl -fsSL -o /tmp/sl.zip https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip

unzip -oq /tmp/sl.zip -d /tmp/sl           sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

unzip -oq /tmp/sl.zip -d /tmp/sl           sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

unzip -oq /tmp/sl.zip -d /tmp/sl           sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip           unzip -oq /tmp/sf.zip -d /tmp/sf

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip           unzip -oq /tmp/sf.zip -d /tmp/sf

sudo install -m0755 /tmp/sl/swiftlint-static /usr/local/bin/swiftlint           curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip           unzip -oq /tmp/sf.zip -d /tmp/sf

curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

curl -fsSL -o /tmp/sf.zip https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip

sudo install -m0755 /tmp/sf/swiftformat_linux /usr/local/bin/swiftformat

sudo install -m0755 /tmp/sf/swiftformat_linux /usr/local/bin/swiftformat

sudo install -m0755 /tmp/sf/swiftformat_linux /usr/local/bin/swiftformat

which needs a Swift runtime the bare runner lacks) and SwiftFormat's `swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

which needs a Swift runtime the bare runner lacks) and SwiftFormat's `swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

which needs a Swift runtime the bare runner lacks) and SwiftFormat's `swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

`swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the exact binary names rather than a fragile `find`.

`swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the exact binary names rather than a fragile `find`.

`swiftformat_linux` — both are statically linked and run on plain `ubuntu-latest`. Pin versions in the URL, `curl -f` to fail on a bad download, and reference the exact binary names rather than a fragile `find`.

Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

Pin versions in the URL, `curl -f` to fail on a bad download, and reference the

Verify both a passing matrix and a deliberately failing cell on a disposable branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-reques

Verify both a passing matrix and a deliberately failing cell on a disposable branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-reques

Verify both a passing matrix and a deliberately failing cell on a disposable branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-reques

branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-chec

branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-chec

branch, then confirm the PR reports the original required check name. See [GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-chec

[GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-checks)

[GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-checks)

[GitHub's required-check troubleshooting guidance](https://docs.github.com/en/pull-requests/how-tos/merge-and-close-pull-requests/troubleshooting-required-status-checks)

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

var scrapeClient = &http.Client{Timeout: 30 * time.Second}

var scrapeClient = &http.Client{Timeout: 30 * time.Second}

So the sign of the offset decides which failure you get: west of UTC you over-fetch (free, if the merge is idempotent), east of UTC you silently

So the sign of the offset decides which failure you get: west of UTC you over-fetch (free, if the merge is idempotent), east of UTC you silently

over-fetch (free, if the merge is idempotent), east of UTC you silently

over-fetch (free, if the merge is idempotent), east of UTC you silently

def test_markdown_measures_as_its_plain_equivalent():     markdown = "# Title\n\nSome [linked](https://example.com/a/long/path) text.\n"

def test_markdown_measures_as_its_plain_equivalent():     markdown = "# Title\n\nSome [linked](https://example.com/a/long/path) text.\n"

markdown = "# Title\n\nSome [linked](https://example.com/a/long/path) text.\n"

markdown = "# Title\n\nSome [linked](https://example.com/a/long/path) text.\n"

uvx --from playwright playwright screenshot --viewport-size "1280,800" "http://127.0.0.1:$PORT/" before-home-desktop.png

uvx --from playwright playwright screenshot --viewport-size "1280,800" "http://127.0.0.1:$PORT/" before-home-desktop.png

uvx --from playwright playwright screenshot --viewport-size "390,844"  "http://127.0.0.1:$PORT/" before-home-phone.png

uvx --from playwright playwright screenshot --viewport-size "390,844"  "http://127.0.0.1:$PORT/" before-home-phone.png

# The exact URL, including the collection-vs-item distinction curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

# The exact URL, including the collection-vs-item distinction curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

# The exact URL, including the collection-vs-item distinction curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

# The exact URL, including the collection-vs-item distinction curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things/1

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things/1

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things/1

curl -s -o /dev/null -w '%{http_code}\n' https://api.example.com/v1/things/1

client := &http.Client{Timeout: 15 * time.Second}

client := &http.Client{Timeout: 15 * time.Second}

client := &http.Client{Timeout: 15 * time.Second}

req, _ := http.NewRequestWithContext(ctx, http.MethodGet, url, nil) req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)") resp, err := client.Do(req)

req, _ := http.NewRequestWithContext(ctx, http.MethodGet, url, nil) req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)") resp, err := client.Do(req)

req, _ := http.NewRequestWithContext(ctx, http.MethodGet, url, nil) req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)") resp, err := client.Do(req)

req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)")

req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)")

req.Header.Set("User-Agent", "project/1.0 (+https://github.com/owner/project)")

hazard, it does not remove it — prefer a machine-readable attribute   (`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

hazard, it does not remove it — prefer a machine-readable attribute   (`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

hazard, it does not remove it — prefer a machine-readable attribute   (`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

(`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)   so tests can swap its transport for an `httptest` server and assert the headers

(`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)   so tests can swap its transport for an `httptest` server and assert the headers

(`data-date`, a JSON endpoint) when the source offers one. - **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)   so tests can swap its transport for an `httptest` server and assert the headers

- **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

- **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

- **Hold the client in a package-level `var`** (`var httpClient = &http.Client{...}`)

def fetch(url, *, verify=_UNSET):

def fetch(url, *, verify=_UNSET):

result = parse("https://x.com/y")

result = parse("https://x.com/y")

This skill is based on the [Ergonomics](https://mcginniscommawill.com/guides/python-library-development/#ergonomics-the-joy-of-good-design) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/gui

This skill is based on the [Ergonomics](https://mcginniscommawill.com/guides/python-library-development/#ergonomics-the-joy-of-good-design) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/gui

- [The Art of API Design](https://mcginniscommawill.com/posts/2025-02-03-art-of-api-design/)

- [The Art of API Design](https://mcginniscommawill.com/posts/2025-02-03-art-of-api-design/)

- [Designing for Developer Joy](https://mcginniscommawill.com/posts/2025-02-06-designing-for-developer-joy/)

- [Designing for Developer Joy](https://mcginniscommawill.com/posts/2025-02-06-designing-for-developer-joy/)

[Credential-related source omitted]

[Credential-related source omitted]

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). See these posts for related coverage:

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). See these posts for related coverage:

- [Makefiles for Python Development](https://mcginniscommawill.com/posts/2025-04-08-makefiles-for-python/)

- [Makefiles for Python Development](https://mcginniscommawill.com/posts/2025-04-08-makefiles-for-python/)

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

[Credential-related source omitted]

[Credential-related source omitted]

# Optional def fetch(url: str, timeout: int | None = None) -> bytes: ...

# Optional def fetch(url: str, timeout: int | None = None) -> bytes: ...

def fetch(url: str, timeout: int | None = None) -> bytes: ...

def fetch(url: str, timeout: int | None = None) -> bytes: ...

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

- [Linting & Formatting with Ruff](https://mcginniscommawill.com/posts/2025-01-30-linting-formatting-ruff/)

- [Linting & Formatting with Ruff](https://mcginniscommawill.com/posts/2025-01-30-linting-formatting-ruff/)

- [Understanding McCabe Complexity](https://mcginniscommawill.com/posts/2025-04-24-understanding-mccabe-complexity/)

- [Understanding McCabe Complexity](https://mcginniscommawill.com/posts/2025-04-24-understanding-mccabe-complexity/)

- [Adding Type Hints](https://mcginniscommawill.com/posts/2025-04-03-pygeohash-type-hints/)

- [Adding Type Hints](https://mcginniscommawill.com/posts/2025-04-03-pygeohash-type-hints/)

# Keyword-only after * def fetch(url: str, *, timeout: int = 30) -> bytes:

# Keyword-only after * def fetch(url: str, *, timeout: int = 30) -> bytes:

def fetch(url: str, *, timeout: int = 30) -> bytes:

def fetch(url: str, *, timeout: int = 30) -> bytes:

git clone https://github.com/user/package.git

git clone https://github.com/user/package.git

Use [Contributor Covenant](https://www.contributor-covenant.org/) - the standard for open source.

Use [Contributor Covenant](https://www.contributor-covenant.org/) - the standard for open source.

This skill is based on the [Maintenance](https://mcginniscommawill.com/guides/python-library-development/#maintenance-the-long-game) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pyt

This skill is based on the [Maintenance](https://mcginniscommawill.com/guides/python-library-development/#maintenance-the-long-game) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pyt

- [Building Engaging Community](https://mcginniscommawill.com/posts/2025-01-22-building-engaging-community/)

- [Building Engaging Community](https://mcginniscommawill.com/posts/2025-01-22-building-engaging-community/)

- [Inner Source Introduction](https://mcginniscommawill.com/posts/2025-02-11-inner-source-introduction/)

- [Inner Source Introduction](https://mcginniscommawill.com/posts/2025-02-11-inner-source-introduction/)

- [Building Internal Library Community](https://mcginniscommawill.com/posts/2025-02-15-building-internal-library-community/)

- [Building Internal Library Community](https://mcginniscommawill.com/posts/2025-02-15-building-internal-library-community/)

- [From Silos to Shared Libraries](https://mcginniscommawill.com/posts/2025-02-18-silos-to-shared-libraries/)

- [From Silos to Shared Libraries](https://mcginniscommawill.com/posts/2025-02-18-silos-to-shared-libraries/)

- [Cursor for Library Maintenance](https://mcginniscommawill.com/posts/2025-03-09-cursor-for-library-maintenance/)

- [Cursor for Library Maintenance](https://mcginniscommawill.com/posts/2025-03-09-cursor-for-library-maintenance/)

We use [uv](https://docs.astral.sh/uv/) for environment and dependency management.

We use [uv](https://docs.astral.sh/uv/) for environment and dependency management.

git clone https://github.com/user/package.git

git clone https://github.com/user/package.git

Adopt the [Contributor Covenant](https://www.contributor-covenant.org/) rather than writing your own. It is the de facto standard, translated into many languages, and instantly recognizable to contributors.

Adopt the [Contributor Covenant](https://www.contributor-covenant.org/) rather than writing your own. It is the de facto standard, translated into many languages, and instantly recognizable to contributors.

1. Download version 2.1 from the [Contributor Covenant site](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).

1. Download version 2.1 from the [Contributor Covenant site](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).

contact_links:   - name: Questions & Discussion     url: https://github.com/user/package/discussions

contact_links:   - name: Questions & Discussion     url: https://github.com/user/package/discussions

- name: Questions & Discussion     url: https://github.com/user/package/discussions     about: Ask usage questions and share ideas here.

- name: Questions & Discussion     url: https://github.com/user/package/discussions     about: Ask usage questions and share ideas here.

url: https://github.com/user/package/discussions

url: https://github.com/user/package/discussions

[![PyPI](https://badge.fury.io/py/package.svg)](https://pypi.org/project/package/)

[![PyPI](https://badge.fury.io/py/package.svg)](https://pypi.org/project/package/)

Full docs at [package.readthedocs.io](https://package.readthedocs.io/)

Full docs at [package.readthedocs.io](https://package.readthedocs.io/)

This skill is based on the [Documentation](https://mcginniscommawill.com/guides/python-library-development/#documentation-your-librarys-ambassador) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill

This skill is based on the [Documentation](https://mcginniscommawill.com/guides/python-library-development/#documentation-your-librarys-ambassador) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill

- [Writing Effective Docstrings](https://mcginniscommawill.com/posts/2025-03-06-writing-effective-docstrings/)

- [Writing Effective Docstrings](https://mcginniscommawill.com/posts/2025-03-06-writing-effective-docstrings/)

- [Getting Started with Sphinx](https://mcginniscommawill.com/posts/2025-03-15-getting-started-sphinx/)

- [Getting Started with Sphinx](https://mcginniscommawill.com/posts/2025-03-15-getting-started-sphinx/)

- [Automating Docs Deployment](https://mcginniscommawill.com/posts/2025-03-23-automating-docs-deployment/)

- [Automating Docs Deployment](https://mcginniscommawill.com/posts/2025-03-23-automating-docs-deployment/)

- [Documenting Your Library's API](https://mcginniscommawill.com/posts/2025-03-30-documenting-library-api/)

- [Documenting Your Library's API](https://mcginniscommawill.com/posts/2025-03-30-documenting-library-api/)

# Cross-link identifiers to the stdlib and common libraries. intersphinx_mapping = {     "python": ("https://docs.python.org/3", None),

# Cross-link identifiers to the stdlib and common libraries. intersphinx_mapping = {     "python": ("https://docs.python.org/3", None),

intersphinx_mapping = {     "python": ("https://docs.python.org/3", None),     "numpy": ("https://numpy.org/doc/stable/", None),

intersphinx_mapping = {     "python": ("https://docs.python.org/3", None),     "numpy": ("https://numpy.org/doc/stable/", None),

"python": ("https://docs.python.org/3", None),

"python": ("https://docs.python.org/3", None),

"numpy": ("https://numpy.org/doc/stable/", None),

"numpy": ("https://numpy.org/doc/stable/", None),

git clone https://github.com/user/package && cd package

git clone https://github.com/user/package && cd package

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). The review criteria in this skill draw from

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). The review criteria in this skill draw from

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/).

source:   url: https://pypi.io/packages/source/m/my-package/my_package-1.0.0.tar.gz

source:   url: https://pypi.io/packages/source/m/my-package/my_package-1.0.0.tar.gz

url: https://pypi.io/packages/source/m/my-package/my_package-1.0.0.tar.gz

url: https://pypi.io/packages/source/m/my-package/my_package-1.0.0.tar.gz

about:   home: https://github.com/user/my-package

about:   home: https://github.com/user/my-package

home: https://github.com/user/my-package

home: https://github.com/user/my-package

[project.urls] Homepage = "https://github.com/user/package"

[project.urls] Homepage = "https://github.com/user/package"

Homepage = "https://github.com/user/package"

Homepage = "https://github.com/user/package"

Documentation = "https://package.readthedocs.io"

Documentation = "https://package.readthedocs.io"

A dependency such as `toolkit @ https://example.com/toolkit.whl` may resolve in

A dependency such as `toolkit @ https://example.com/toolkit.whl` may resolve in

[project] dependencies = [     "toolkit @ https://example.com/releases/toolkit.whl",

[project] dependencies = [     "toolkit @ https://example.com/releases/toolkit.whl",

dependencies = [     "toolkit @ https://example.com/releases/toolkit.whl", ]

dependencies = [     "toolkit @ https://example.com/releases/toolkit.whl", ]

"toolkit @ https://example.com/releases/toolkit.whl",

"toolkit @ https://example.com/releases/toolkit.whl",

This skill is based on the [Distribution](https://mcginniscommawill.com/guides/python-library-development/#distribution-reaching-your-users) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/gu

This skill is based on the [Distribution](https://mcginniscommawill.com/guides/python-library-development/#distribution-reaching-your-users) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/gu

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

- [Publishing PyGeohash](https://mcginniscommawill.com/posts/2025-04-06-pygeohash-publishing/)

- [Publishing PyGeohash](https://mcginniscommawill.com/posts/2025-04-06-pygeohash-publishing/)

This skill is based on the [Performance](https://mcginniscommawill.com/guides/python-library-development/#performance-beyond-raw-speed) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

This skill is based on the [Performance](https://mcginniscommawill.com/guides/python-library-development/#performance-beyond-raw-speed) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

- [Performance Benchmarking](https://mcginniscommawill.com/posts/2025-02-22-testing-benchmark/)

- [Performance Benchmarking](https://mcginniscommawill.com/posts/2025-02-22-testing-benchmark/)

- [Profiling with PyInstrument](https://mcginniscommawill.com/posts/2025-02-25-testing-profiling-pyinstrument/)

- [Profiling with PyInstrument](https://mcginniscommawill.com/posts/2025-02-25-testing-profiling-pyinstrument/)

- [Memory Profiling with Memray](https://mcginniscommawill.com/posts/2025-03-01-testing-profiling-memray/)

- [Memory Profiling with Memray](https://mcginniscommawill.com/posts/2025-03-01-testing-profiling-memray/)

# .pre-commit-config.yaml repos:   - repo: https://github.com/pre-commit/pre-commit-hooks

# .pre-commit-config.yaml repos:   - repo: https://github.com/pre-commit/pre-commit-hooks

# .pre-commit-config.yaml repos:   - repo: https://github.com/pre-commit/pre-commit-hooks

repos:   - repo: https://github.com/pre-commit/pre-commit-hooks     rev: v4.5.0

repos:   - repo: https://github.com/pre-commit/pre-commit-hooks     rev: v4.5.0

repos:   - repo: https://github.com/pre-commit/pre-commit-hooks     rev: v4.5.0

- repo: https://github.com/pre-commit/pre-commit-hooks

- repo: https://github.com/pre-commit/pre-commit-hooks

- repo: https://github.com/pre-commit/pre-commit-hooks

- repo: https://github.com/astral-sh/ruff-pre-commit

- repo: https://github.com/astral-sh/ruff-pre-commit

- repo: https://github.com/astral-sh/ruff-pre-commit

- repo: https://github.com/pre-commit/mirrors-mypy

- repo: https://github.com/pre-commit/mirrors-mypy

- repo: https://github.com/pre-commit/mirrors-mypy

rm -rf build dist *.egg-info .pytest_cache .mypy_cache .ruff_cache .coverage htmlcov

rm -rf build dist *.egg-info .pytest_cache .mypy_cache .ruff_cache .coverage htmlcov

find . -type d -name __pycache__ -exec rm -rf {} +

find . -type d -name __pycache__ -exec rm -rf {} +

[project.urls] Homepage = "https://github.com/username/my-library"

[project.urls] Homepage = "https://github.com/username/my-library"

[project.urls] Homepage = "https://github.com/username/my-library"

Homepage = "https://github.com/username/my-library"

Homepage = "https://github.com/username/my-library"

Homepage = "https://github.com/username/my-library"

Documentation = "https://my-library.readthedocs.io"

Documentation = "https://my-library.readthedocs.io"

Documentation = "https://my-library.readthedocs.io"

Repository = "https://github.com/username/my-library"

Repository = "https://github.com/username/my-library"

Repository = "https://github.com/username/my-library"

Changelog = "https://github.com/username/my-library/blob/main/CHANGELOG.md"

Changelog = "https://github.com/username/my-library/blob/main/CHANGELOG.md"

Changelog = "https://github.com/username/my-library/blob/main/CHANGELOG.md"

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). See these posts for deeper coverage:

This skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). See these posts for deeper coverage:

- [Defining Library Scope](https://mcginniscommawill.com/posts/2025-01-17-defining-library-scope/)

- [Defining Library Scope](https://mcginniscommawill.com/posts/2025-01-17-defining-library-scope/)

- [Dependency Management](https://mcginniscommawill.com/posts/2025-01-21-dependency-management/)

- [Dependency Management](https://mcginniscommawill.com/posts/2025-01-21-dependency-management/)

- [Licensing Your Project](https://mcginniscommawill.com/posts/2025-01-24-licensing-your-project/)

- [Licensing Your Project](https://mcginniscommawill.com/posts/2025-01-24-licensing-your-project/)

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

- [pyproject.toml Explained](https://mcginniscommawill.com/posts/2025-01-26-pyproject-toml-explained/)

#!/usr/bin/env python3

#!/usr/bin/env python3

[project.urls]         Homepage = {_toml_string(f"https://github.com/username/{name}")}

[project.urls]         Homepage = {_toml_string(f"https://github.com/username/{name}")}

Homepage = {_toml_string(f"https://github.com/username/{name}")}

Homepage = {_toml_string(f"https://github.com/username/{name}")}

Repository = {_toml_string(f"https://github.com/username/{name}")}

Repository = {_toml_string(f"https://github.com/username/{name}")}

git clone https://github.com/username/{name}

git clone https://github.com/username/{name}

\tfind . -type d -name __pycache__ -exec rm -rf {{}} +

\tfind . -type d -name __pycache__ -exec rm -rf {{}} +

pre_commit = dedent('''         repos:           - repo: https://github.com/pre-commit/pre-commit-hooks

pre_commit = dedent('''         repos:           - repo: https://github.com/pre-commit/pre-commit-hooks

repos:           - repo: https://github.com/pre-commit/pre-commit-hooks             rev: v4.5.0

repos:           - repo: https://github.com/pre-commit/pre-commit-hooks             rev: v4.5.0

- repo: https://github.com/pre-commit/pre-commit-hooks

- repo: https://github.com/pre-commit/pre-commit-hooks

- repo: https://github.com/astral-sh/ruff-pre-commit

- repo: https://github.com/astral-sh/ruff-pre-commit

- repo: https://github.com/pre-commit/mirrors-mypy

- repo: https://github.com/pre-commit/mirrors-mypy

One tag-triggered workflow builds the distribution with `uv`, creates a GitHub release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

One tag-triggered workflow builds the distribution with `uv`, creates a GitHub release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

One tag-triggered workflow builds the distribution with `uv`, creates a GitHub release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

release, and publishes to PyPI via [trusted publishing](https://docs.pypi.org/trusted-publishers/)

[Unreleased]: https://github.com/user/repo/compare/v1.2.0...HEAD

[Unreleased]: https://github.com/user/repo/compare/v1.2.0...HEAD

[1.2.0]: https://github.com/user/repo/releases/tag/v1.2.0

[1.2.0]: https://github.com/user/repo/releases/tag/v1.2.0

This skill is based on the [Maintenance](https://mcginniscommawill.com/guides/python-library-development/#maintenance-the-long-game) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pyt

This skill is based on the [Maintenance](https://mcginniscommawill.com/guides/python-library-development/#maintenance-the-long-game) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pyt

- [Semantic Versioning](https://mcginniscommawill.com/posts/2025-01-28-semantic-versioning/)

- [Semantic Versioning](https://mcginniscommawill.com/posts/2025-01-28-semantic-versioning/)

#!/usr/bin/env python3

#!/usr/bin/env python3

# .pre-commit-config.yaml repos:   - repo: https://github.com/Yelp/detect-secrets

# .pre-commit-config.yaml repos:   - repo: https://github.com/Yelp/detect-secrets

repos:   - repo: https://github.com/Yelp/detect-secrets     rev: v1.5.0

repos:   - repo: https://github.com/Yelp/detect-secrets     rev: v1.5.0

- repo: https://github.com/Yelp/detect-secrets

- repo: https://github.com/Yelp/detect-secrets

value = eval(expr)  # nosemgrep: python.lang.security.audit.eval-detected

value = eval(expr)  # nosemgrep: python.lang.security.audit.eval-detected

[Credential-related source omitted]

[Credential-related source omitted]

This skill is based on the [Security](https://mcginniscommawill.com/guides/python-library-development/#security-a-matter-of-trust) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pytho

This skill is based on the [Security](https://mcginniscommawill.com/guides/python-library-development/#security-a-matter-of-trust) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/pytho

- [Avoiding Injection Flaws](https://mcginniscommawill.com/posts/2025-01-18-avoiding-injection-flaws/)

- [Avoiding Injection Flaws](https://mcginniscommawill.com/posts/2025-01-18-avoiding-injection-flaws/)

- [Intro to Bandit](https://mcginniscommawill.com/posts/2025-01-25-intro-to-bandit/)

- [Intro to Bandit](https://mcginniscommawill.com/posts/2025-01-25-intro-to-bandit/)

- [Advanced Bandit Configuration](https://mcginniscommawill.com/posts/2025-08-22-advanced-bandit-configuration/)

- [Advanced Bandit Configuration](https://mcginniscommawill.com/posts/2025-08-22-advanced-bandit-configuration/)

- [SQL Injection Detection](https://mcginniscommawill.com/posts/2025-08-25-sql-injection-detection-b608/)

- [SQL Injection Detection](https://mcginniscommawill.com/posts/2025-08-25-sql-injection-detection-b608/)

- [Dependency Security with pip-audit](https://mcginniscommawill.com/posts/2025-01-27-dependency-security-pip-audit/)

- [Dependency Security with pip-audit](https://mcginniscommawill.com/posts/2025-01-27-dependency-security-pip-audit/)

- [Handling Sensitive Data](https://mcginniscommawill.com/posts/2025-01-29-handling-sensitive-data/)

- [Handling Sensitive Data](https://mcginniscommawill.com/posts/2025-01-29-handling-sensitive-data/)

- [Secure Coding Practices](https://mcginniscommawill.com/posts/2025-02-02-secure-coding-practices/)

- [Secure Coding Practices](https://mcginniscommawill.com/posts/2025-02-02-secure-coding-practices/)

# Vulnerable — shell parses the string, so filename can inject `; rm -rf /`

# Vulnerable — shell parses the string, so filename can inject `; rm -rf /`

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# Vulnerable — attacker points url at internal metadata / localhost services url = request.args["url"] resp = requests.get(url)

# Vulnerable — attacker points url at internal metadata / localhost services url = request.args["url"] resp = requests.get(url)

resp = requests.get(url)

resp = requests.get(url)

if any(ipaddress.ip_address(item[4][0]).is_private for item in addresses):     raise ValueError("Disallowed URL") resp = requests.get(url, timeout=5)  # resolves the hostname again

if any(ipaddress.ip_address(item[4][0]).is_private for item in addresses):     raise ValueError("Disallowed URL") resp = requests.get(url, timeout=5)  # resolves the hostname again

resp = requests.get(url, timeout=5)  # resolves the hostname again

resp = requests.get(url, timeout=5)  # resolves the hostname again

#!/usr/bin/env python3

#!/usr/bin/env python3

# GOOD — pins both the count and the values. canonicals = re.findall(r'<link rel="canonical" href="([^"]*)"', html) assert canonicals == ["https://example.com/guide/"]

# GOOD — pins both the count and the values. canonicals = re.findall(r'<link rel="canonical" href="([^"]*)"', html) assert canonicals == ["https://example.com/guide/"]

# GOOD — pins both the count and the values. canonicals = re.findall(r'<link rel="canonical" href="([^"]*)"', html) assert canonicals == ["https://example.com/guide/"]

# GOOD — pins both the count and the values. canonicals = re.findall(r'<link rel="canonical" href="([^"]*)"', html) assert canonicals == ["https://example.com/guide/"]

assert canonicals == ["https://example.com/guide/"]

assert canonicals == ["https://example.com/guide/"]

assert canonicals == ["https://example.com/guide/"]

assert canonicals == ["https://example.com/guide/"]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

This skill is based on the [Code Quality](https://mcginniscommawill.com/guides/python-library-development/#code-quality-the-foundation) section of the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/

- [Testing with Pytest](https://mcginniscommawill.com/posts/2025-02-04-testing-pytest-intro/)

- [Testing with Pytest](https://mcginniscommawill.com/posts/2025-02-04-testing-pytest-intro/)

- [Testing with Pytest](https://mcginniscommawill.com/posts/2025-02-04-testing-pytest-intro/)

- [Testing with Pytest](https://mcginniscommawill.com/posts/2025-02-04-testing-pytest-intro/)

- [Testing Coverage](https://mcginniscommawill.com/posts/2025-02-09-testing-coverage/)

- [Testing Coverage](https://mcginniscommawill.com/posts/2025-02-09-testing-coverage/)

- [Testing Coverage](https://mcginniscommawill.com/posts/2025-02-09-testing-coverage/)

- [Testing Coverage](https://mcginniscommawill.com/posts/2025-02-09-testing-coverage/)

- [Testing with Tox](https://mcginniscommawill.com/posts/2025-02-13-testing-tox/)

- [Testing with Tox](https://mcginniscommawill.com/posts/2025-02-13-testing-tox/)

- [Testing with Tox](https://mcginniscommawill.com/posts/2025-02-13-testing-tox/)

- [Testing with Tox](https://mcginniscommawill.com/posts/2025-02-13-testing-tox/)

- [Testing with Mocking](https://mcginniscommawill.com/posts/2025-02-16-testing-mocking/)

- [Testing with Mocking](https://mcginniscommawill.com/posts/2025-02-16-testing-mocking/)

- [Testing with Mocking](https://mcginniscommawill.com/posts/2025-02-16-testing-mocking/)

- [Testing with Mocking](https://mcginniscommawill.com/posts/2025-02-16-testing-mocking/)

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

resource "stripe_webhook_endpoint" "app" {   url            = "https://${var.app_host}/api/v1/stripe/webhook"

resource "stripe_webhook_endpoint" "app" {   url            = "https://${var.app_host}/api/v1/stripe/webhook"

url            = "https://${var.app_host}/api/v1/stripe/webhook"

url            = "https://${var.app_host}/api/v1/stripe/webhook"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

license = "MIT OR Apache-2.0" description = "One line; required by crates.io" repository = "https://github.com/owner/my-crate"

license = "MIT OR Apache-2.0" description = "One line; required by crates.io" repository = "https://github.com/owner/my-crate"

repository = "https://github.com/owner/my-crate"

repository = "https://github.com/owner/my-crate"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- run: sudo xcode-select -s /Applications/Xcode_26.2.app

- run: sudo xcode-select -s /Applications/Xcode_26.2.app

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

key_id: ENV.fetch("ASC_KEY_ID"),

key_id: ENV.fetch("ASC_KEY_ID"),

issuer_id: ENV.fetch("ASC_ISSUER_ID"),

issuer_id: ENV.fetch("ASC_ISSUER_ID"),

key_filepath: ENV.fetch("ASC_KEY_PATH"),

key_filepath: ENV.fetch("ASC_KEY_PATH"),