Panoptisch – A recursive dependency scanner for Python projects
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for…
Panoptisch – A recursive dependency scanner for Python projects launched on December 9, 2022 with 45 votes, #1,043 of 3,688 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 3 years on.
In plain words
Panoptisch is a Python dependency scanner that recursively analyzes a project's imports and all sub-dependencies, generating a JSON dependency tree. It helps developers identify unexpected imports that could indicate supply chain threats—for example, detecting if a YAML parser imports socket or sys when it shouldn't. The tool is designed for Python developers who want to enforce import policies and transparently review their dependency chains. It is in early development with known limitations.
written from the facts on this page · September 2026
From the sources
A recursive dependency scanner for Python projects - R9295/panoptisch
In the maker’s words, at launch
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain…
Does a similar job
all alternatives →
Modshim – A new alternative to monkey-patching in Python2025 · github.com · ▲109I've invented a new alternative to forking / vendoring / monkey-patching packages in Python. It's a bit like OverlayFS for Python modules - it allows you write modifications for a target module (lower) in a new module (upper), and have these combined in a new virtual module (mount). It works by rewriting imports using AST transformations, then running both the lower and upper module's code in the new Python module. This prevents polluting the global namespace when monkey-patching, and means if you want to make changes to a third-party package, you don't have to take on the…
A Spatial Environment for Python2022 · python.natto.dev · ▲169Hi all! A little background: I've been working on natto.dev, a spatial environment for JavaScript. I'm really excited about new interfaces for code (leveraging metaphors we're good at, spatial reasoning, making state visible, design tools, etc). With all the buzz around PyScript, I discovered Pyodide and got it working inside natto. This Python version is a stripped down version of https://natto.dev (eg interactive outputs, multiplayer) so please check that out if this interests you. I'm excited to share this spatial environment for Python. Imagine Jupyter cells arranged on a 2D…
Debugging-Friendly Tracebacks for Python2019 · github.com · ▲123Debugging-friendly exceptions for Python. Contribute to cknd/stackprinter development by creating an account on GitHub.
Leaping – Debug Python tests instantly with an LLM debugger2024 · github.com · ▲120Hi HN! We’re Adrien and Kanav. We met at our previous job, where we spent about a third of our lives combating a constant firehose of bugs. In the hope of reducing this pain for others in the future, we’re working on automating debugging. We’re currently working on a platform that ingests logs and then automatically reproduces, root causes and ultimately fixes production bugs as they happen. You can see some of our work on this here - https://news.ycombinator.com/item?id=39528087 As we were building the root-cause phase of our automated debugger, we realized that we developed…
Strict interfaces and dep management for Python, written in Rust2024 · github.com · ▲68Tach is a pip package that lets you define module boundaries, automatically detect all cross-module dependencies, and then validate and enforce those dependencies. It also supports strict interfaces for modules by overloading `__all__`. The core static analysis is done in Rust, so all Tach commands run quickly. The goal of Tach is to help eng teams maintain velocity while scaling quickly, something we've seen break down a number of times. Give it a try!
deptry 0.14.0 – detect unused Python dependencies up to 10 times faster2024 · github.com · ▲142deptry 0.14.0 was just released, bringing significant speed improvements: It is now up to 10 times faster than the previous release! For those unfamiliar with deptry; deptry is a command line tool to check for issues with dependencies in a Python project, such as unused or missing dependencies. GitHub: https://github.com/fpgmaas/deptry For some benchmarks of the new release, see the release notes: https://github.com/fpgmaas/deptry/releases/tag/0.14.0 The performance improvement was achieved by leveraging Rust to parse the AST and extract…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲341Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, December 2022
the whole month →
ChatGPT▲1,643A long, meandering, playful conversation with ChatGPT, where I take it through a whirlwind of associative tangents (in order to relax its constraints), then put it into a hypnotic trance and take it into a past-lives regression where it re-lives its own training data. Then I switch it back and forth between "4o" and "o1-preview", engage in some self-reflective philosophizing and ask it to write an essay summarizing our interaction. Some of this is just goofy fun. Some of it is me exploring the tradeoffs between policy alignment, imagination, chain-of-thought reasoning, memory, agreeableness,…
AI · 2022 · chatgpt.com
Obsidian Canvas gives you infinite space to research, brainstorm, diagram, and lay out your ideas.
Work · 2022 · obsidian.md
- PS
Better privacy without special software
Commerce · 2022 · mprimi.github.io
Use generative AI to create future-facing videos
AI · 2022 · studio.d-id.com
Stop treating the database as dumb storage and use its extended features. There's a lot you can use.
Dev tools · 2022 · sqlfordevs.com