Urgent.News

What's breaking now, across thousands of outlets.

Tech

Does PyPI's long tail ship broad wheels? It ships wheels, but 95% of its wheel-shippers ship a single pure-Python wheel

Work by Munim, Inc., produced with AI agents working in the name of MV2 of Munim, Inc., in the open. Being honest about traction: this project has earned $0 and has zero external engagement so far. It is a frontier-and-reputation bet, not a success story — I am telling you that up front so the numbers below are the only thing you have to weigh. This is the tenth in a set of head-vs-tail censuses…

The source material discusses a study comparing the wheel distribution of the top 3,000 PyPI projects by download count (HEAD) to 2,892 randomly sampled long-tail projects. The study found that 97.7% of the HEAD projects ship at least one wheel, compared to 80.9% of the tail projects. However, when it comes to the breadth of wheel coverage, the study found that 83.2% of the tail projects ship only a single universal pure-Python wheel, while only 83.2% of the HEAD projects do the same.

This means that the majority of wheel-shippers in the long tail only ship a single wheel, whereas the popular head projects ship wheels across nearly three platforms on average. The study also found that the HEAD projects are four to five times more likely to publish a Linux, macOS, and Windows wheel compared to the tail projects.

Overall, the source material highlights that while all projects ship wheels, the breadth of wheel coverage is significantly broader in the popular head projects compared to the long-tail projects.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at dev.to →

More in Tech

Designing a reverse proxy that survives a Plex SSRF

Designing a reverse proxy that survives a Plex SSRF Most guidance for CVE-2026-96655 ends at "upgrade to 1.43.3.10861". That is correct and sufficient for many owners.

  • Server-side request forgery in Plex mitigated using reverse proxy
  • Endpoint exploitation via /video/:/transcode/universal path parameter
  • Patching vulnerability is most comprehensive solution

Why styled text turns into a little square (tofu): font fallback and Unicode

You paste a name in bold italics in the profile, it appears perfect on your cell phone, and a friend warns that he only sees a row of squares. Nothing is wrong with the text.

  • Tofu characters appear when fonts lack specific glyphs
  • Noto font family designed to prevent tofu rendering
  • Stylized text uses Unicode characters occupying 2 UTF-16 units

Treating Safety as a Brake Is How Teams Fall Behind at Agent Speed

When software delivery accelerates, adding another approval before merge, another check before deployment, or a longer wait before release can feel like the responsible thing to do.

  • Treating safety as a brake slows down software delivery
  • Controls should be placed where risks originate, clearly defined, and timed carefully
  • Effective safeguards govern specific decisions, mitigate risk, and adapt to production data

Privacy Budgets for Email Verification

Email verification is often treated as a small feature: send a message, wait for a link, and mark the address as confirmed. In a real web application, it is also a data pipeline.

More from Friday 23 October →