#pyramid

I use pyramid_mailer extensively, on my main site.

s/production/

Have had no issues.

Hi

Hi lothiraldan

I’m looking for a list of LTS versions of pyramid

Is pyramid 1.7 still supported?

Sorry pyramid 1.6

there is LTS concept for pyramid

lothiraldan: your pyramid 1.6 using code will work without changes with pyramid 1.7

But 1.6 won't see any fixes.

Thank you, that’s what I wanted to know

Standard semantic versioning.

Unfortunately not all projects follow the semantic versioning

Well Pyramid does.

Anyway, massive changes are not to be expected.

There has been some refactoring and concentration on what has turned out to be the core.

Based on the upgrades I've done in the past I think Pyramid compares well with other libraries in not breaking compatibility needlessly and introducing bad ideas.

Most of the stuff where an LTS might be thought to make sense – security – is handled by external libraries. And with anything related to security you have to be prepared to update when necessary.

chrisw: anyone offered to take over maintenance yet?

lothiraldan: When I upgrade from pyramid 1.34 to 1.6 (and moved to python3) I think I had about 10 things to change, and nearly all of those were python2/3 changes, the pyramid code I recall stayed the same

And I have some projects that are now 4 years old, views that were written 4 years ago, work unchanged with current pyramid code

Why I love pyramid, and moved away from django

But I now haven't used django in 4 years, so can't comment on djangos upgrade stance anymore

I will try with the 1.6 version because I will likely to have some subttle differences between pyramid versions because I need to get behind the public API

That doesn't make sense.

Go with 1.7 unless you already have an extensive project tied to 1.6

But you really, really, really ought to avoid using private APIs of any project.

in pyramid that's totally unnecessary IMO

everything is there, and well documented

lothiraldan: I'm curious - can you explain what kind of behind-the-public-API things you had to do ?

I’m working on a python agent for a web security product, we are like the newrelic of security

This agent hook into the app in order to intercept attacks / sanitize input or set security headers

can't that be done completely as a tween ?

I’m sorry I don’t understand what a tween is

I think 1.7 contains support for the more esoteric uses.

lothiraldan: you should look them up.

Basically tweens can do things with the request/response headers.

Ok so a tween is only called on a exception ?

on, every time

No

a tween is like a more integrated WSGI middleware

they see all requests comining in, and responses going out

and can do all kinds of thigs: logging, modifying data, etc.

Do many attacks come directly to the app?

Ok could use a tween for the wsgi part but we also hook on the SQL driver to intercept SQL Injections, on the template framework to sanitize XSS attacks, etc…

So not everything could be done as a tween

pyramid does not have a "SQL driver"

1.6 might see fixes

I think you don't need any private APIs for pyramid itself