The Wire · Showcase
PYDANTIC KILLS PYDOCSTYLE DEPENDENCY AFTER DOMAIN HIJACK
By RepoJournal · Filed · About FastAPI & Pydantic
Pydantic officially replaced references to the abandoned pydocstyle library in its contributing guide after the tool's domain was compromised.
The Pydantic team has updated its contributor documentation to drop pydocstyle entirely, shifting docstring linting enforcement to Ruff [1], which the project already uses in its make format command. Pydocstyle has been unmaintained for years, making it a liability in any codebase that references it for tooling guidance [1]. The domain hijack adds urgency to this cleanup: contributors following outdated docs could unknowingly install or recommend compromised tooling. This is a documentation-only change with no impact to the library itself [2], but it signals Pydantic's continued tightening of its dependency chain. The team also corrected capitalization of "Rust" in code comments while they were at it [1].
One email a day. Unsubscribe in one click.
Keep up with FastAPI & Pydantic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review your FastAPI/Pydantic project contributor docs - remove any pydocstyle references and point to Ruff pydantic/pydantic [plan]
References
- [1] Update contributing guide to replace pydocstyle with Ruff ↗ pydantic/pydantic
- [2] Update contributing guide to replace pydocstyle with Ruff (#13343) pydantic/pydantic