Spotlight · Module · week of 2026-09-21
Type::Tiny
Type constraints that work with Moo, Moose, or nothing
Type::Tiny is a small constraint library you can drop on a Moo or Moose class, or use on its own with Type::Params to check subroutine arguments. Declare Int, ArrayRef[Str], or a Dict of named keys once, then reuse those types in attributes, signatures, and test assertions. On 5.36+ it pairs cleanly with native signatures: validate the incoming values, then let the rest of the sub assume they already match. Install via cpm; Types::Standard covers the usual scalars, refs, and Maybe wrappers without pulling in Moose.
One-liner of the week · 2026-09-21
Hour-of-day request counts from a Combined Log
perl -nE '/:(\d{2}):\d{2}:\d{2} / and $h{$1}++; END { say sprintf("%s\t%d", $_, $h{$_}//0) for map { sprintf "%02d", $_ } 0..23 }' access.logBins Combined Log timestamps by hour so a quiet-versus-peak day is visible without a log parser.
News
All newsUpdated 2026-09-21
-
Weekly Challenge 392 opens with Convert Palindrome and Words Length Product
Week 392 of The Weekly Challenge, dated 21 September, asks for the shortest palindrome formed by prepending characters to a given string, then the largest product of two word lengths whose letters do not overlap. Lance Wicks returned with Perl solutions for week 391. Solutions are due 23:59 UK time Sunday 27 September.
-
Dancer2 2.2.1 blocks YAML object and code injection in request bodies
Jason A. Crome released Dancer2 2.2.1 on 19 September as a security follow-up to 2.2.0. Serializer::YAML no longer lets YAML::Load instantiate blessed objects or eval code from request bodies; YAML 1.30 is now the floor, and CLI::Osprey 0.09 is declared. Apps that never set a YAML serializer can still be reached through Serializer::Mutable on text/x-yaml and text/html.
-
HTTP::API::Core splits JSON client policy from the HTTP transport
Shingo Kawamura published HTTP::API::Core, a small layer for JSON HTTP API clients that leaves the actual request to HTTP::Tiny, LWP, Mojo::UserAgent, or Furl. The library owns retries, pagination helpers, and default headers so a client does not have to pick one UserAgent forever. The code is on GitHub at kawamurashingo/HTTP-API-Core.
-
Dancer2 2.2.0 ships path-traversal and session-id security fixes
Dancer2 2.2.0, dated 16 September, patches a high-severity static-file path traversal (GHSA-6xw8-v24c-m783) affecting 2.1.0 and earlier, plus a moderate hook-halt bypass (GHSA-v527-r4px-7vx7). Session IDs now always come from Crypt::URandom. The Data::Dumper serializer left core; apps that still need it should take Dancer2::Serializer::Dumper from CPAN.
-
New PSC plans 5.44 and 5.42 point releases
The newly elected Perl Steering Council posted its first minutes as meeting 235 on 14 September. After GitHub and mailing-list handover, the group said it intends point releases of 5.44 and 5.42 for security and build fixes, and is taking suggestions for other backports. The same notes start a discussion of core support for local::lib-style layouts across perl upgrades, and of a less error-prone dual-life release process.
More
- Homelab — Pi, cron, local dashboards
- Cookbook — APIs, JSON, metrics snippets
- Ecosystem — stacks and tools
- Resources — docs and reading
- Contact · RSS / Atom · Plain text (
curl)