Latest

We discovered and responsibly disclosed a vulnerability in GitHub Actions that allowed any collaborator to bypass deployment branch protections and access environment secrets and OIDC tokens — even if none of the repository's workflows use pull_request_target.

Introducing diffly, a polars-native Python package to summarize and explore data differences.

We outline the efforts we bring into the conda(-forge) ecosystem to ensure it provides the basic requirements to meet the foudations of many (cyber) regulations

We present dataframely, a declarative data frame validation library with first-class support for polars data frames.

The autotick-bot is a crucial part of the conda-forge packaging ecosystem, but lacked local debugging capabilities. Learn how we addressed this and how to debug your feedstock's updates.