Software Supply Chain11 September 2026
Wrapture's Zero-Code Monkey-Patching Is a Supply-Chain Question, Not Just a Dev One
Graham Dumpleton's new Python library wrapture patches arbitrary call sites for testing and tracing without touching source code — a capability worth reviewing like any other dependency with deep runtime access.
pythonsupply-chain-securitydevsecops
4 min readRead
Software Supply Chain25 August 2026
EVE Online's Python 3 Migration Is a Masterclass in Legacy Runtime Risk
CCP Games is finally moving 2.4 million lines of EVE Online off Python 2 — six years after the interpreter stopped receiving security fixes. It's a useful case study in how technical debt in a runtime, not just an application, becomes a security liability.
software-supply-chainlegacy-systemstechnical-debt
4 min readRead
Software Supply Chain28 June 2026
Strict Dependency Pinning in Python Libraries: Why == Hurts Your Users
A one-line fix to datasette-export-database illustrates a pervasive Python packaging mistake with real supply-chain security implications.
pythonpypidependency-management
4 min readRead