modern-python

Modern Python project setup with uv, ruff, and ty for Python 3.11+. Guide for modern Python tooling and best practices, based on trailofbits/cookiecutter-python . Key principles: See security-setup.md for configuration and usage. For simple multi-file projects not intended for distribution: If starting from scratch, ask the user if they prefer to use the Trail of Bits cookiecutter template to bootstrap a complete project with already preconfigured tooling. This creates: See pyproject.md for complete configuration reference. Key sections: When a user requests migration from legacy tooling: First, determine the nature of the code: For standalone scripts : Convert to PEP 723 inline metadata (see pep723-scripts.md ) For projects : Then: Use uv run --with for one-off commands that need packages not in your project: When to use --with vs uv add : See uv-commands.md for complete reference. Install with: uv sync --group dev --group test - Replaces pip, Poetry, black, flake8, mypy, and pre-commit with faster, simpler alternatives from the Astral team - Covers new project creation, dependency management via uv add / uv remove , and linting/formatting/type-checking workflows - Includes migration paths from legacy tooling (requirements.txt, setup.py, flake8+black+isort, mypy/pyright) - Provides decision tree for single-file scripts (PEP 723), simple projects, and distributable packages,...