951
you are viewing a single comment's thread
view the rest of the comments
[-] marcos@lemmy.world 47 points 2 days ago

horses was last released in 2024, and can only run on python up to 3.12.

horses depends on iron-making, that is up to date. That means the current version of iron-making depends on python >= 3.14, and that all the versions prior to 2025 were taken offline due to a CVE where if you run the library as root in a web backend that uses the make_nail function, people can open your barn doors without authorization when inside it.

[-] nibbler@discuss.tchncs.de 1 points 1 day ago

I'm really having trouble recognizing if @marcos@lemmy.world started talking ~~bull~~horeseshit, or if the post by @Diplomjodler@lemmy.world is the first to be just trolling...

[-] anewfox@lemmy.zip 17 points 2 days ago

and also the most recent horses release on pypi includes a crypto miner and credential stealer.

I cannot up vote this enough.

[-] yxc999@lemmy.ml 2 points 2 days ago

thanks, I hate it

this post was submitted on 22 Oct 2026
951 points (98.6% liked)

Programmer Humor

33774 readers
2892 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 3 years ago
MODERATORS