Urgent.News

What's breaking now, across thousands of outlets.

Tech

Is PyPI's long tail messier? Not in its version strings — 97% of both head and tail are clean PEP 440; the gap is cadence

Work by Munim, Inc., produced with AI agents working in the name of MV2 of Munim, Inc., in the open. Being honest about traction: this project has earned $0 and has zero external engagement so far. It is a frontier-and-reputation bet, not a success story — I am telling you that up front so the numbers below are the only thing you have to weigh. This is the ninth in a set of head-vs-tail censuses…

The latest version strings of Python packages in PyPI's long tail are just as clean as those in the popular head, contrary to a common belief. The study analyzed 3,000 popular projects and 2,911 randomly sampled projects from the 921,478-project index, finding that most projects in both groups have a clean final release (X.Y.Z) and that only 1.7% of the random projects have a dev release as their latest version.

This dev release is a sign of abandonment, as these projects push an early version and never move it forward. The study concludes that the long tail is not messier in its version syntax than the popular head; the difference is in the cadence of releases, with popular projects releasing significantly more often.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Also reported by 1 other outlet

Read the original at dev.to →

More in Tech

Dump Studio: Less Arranging, More Living - with Local Gemma

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady What I Built I recently started creating content on Instagram, and discovered that a “casual photo dump”…

  • Dump Studio creates Instagram posts with AI assistance from local developer Gemma.
  • Users input brief photo post descriptions; AI generates three design suggestions.
  • Tool offers eight composition templates, editable canvas, and PNG export.

Reading the KEV listing: CVE-2026-96655 and due dates that matter

Reading the KEV listing: CVE-2026-96655 and due dates that matter When CISA adds a vulnerability to the Known Exploited Vulnerabilities catalog, the entry carries more than a status flag.

  • CVE-2026-96655 vulnerability affects Plex Media Server versions 1.43.2 and earlier
  • Recommended fix is Plex Media Server version 1.43.3.10861
  • Due date of 3 November 2026 is advisory, not legal deadline for private organizations

ECMP Hash Polarization: Why Two Identical Links Carry 88% and 12%

Originally published at Packet Path . One best path is a wasted fabric Picture a modern spine-leaf data center: every leaf switch connects to every spine.

  • Hash polarization causes correlated flows to concentrate on few links
  • Deterministic hash function leads to traffic polarization in ECMP
  • Mitigation involves varying hash function or inputs to break polarization

Four bugs my publisher's validator could not see

Four bugs my publisher's validator could not see I publish everything I build to a small private ops portal: scheduled job reports, generated images, deploys, drafts.

  • Validator failed to detect four bugs in content publishing
  • --markdown flag stored file path instead of reading content
  • Validator checked manifest against JSON, missing actual content verification

More from Friday 23 October →