A developer blog by QuantCo engineers.https://tech.quantco.com/https://tech.quantco.com/blog/github-actions-environments/https://tech.quantco.com/blog/github-actions-environments/We discovered and responsibly disclosed a vulnerability in GitHub Actions that allowed any collaborator to bypass deployment branch protections and access environment secrets and OIDC tokens — even if none of the repository's workflows use pull_request_target.Tue, 17 Mar 2026 00:00:00 GMTgithubsecuritygithub-actionsvulnerabilityhttps://tech.quantco.com/blog/diffly/https://tech.quantco.com/blog/diffly/Introducing diffly, a polars-native Python package to summarize and explore data differences.Fri, 06 Feb 2026 00:00:00 GMTpythonpolarsdatahttps://tech.quantco.com/blog/conda-regulation-support/https://tech.quantco.com/blog/conda-regulation-support/We outline the efforts we bring into the conda(-forge) ecosystem to ensure it provides the basic requirements to meet the foudations of many (cyber) regulationsThu, 10 Jul 2025 00:00:00 GMTcondaregulationeucrahttps://tech.quantco.com/blog/dataframely/https://tech.quantco.com/blog/dataframely/We present dataframely, a declarative data frame validation library with first-class support for polars data frames.Wed, 16 Apr 2025 00:00:00 GMTpythonpolarsdata validationhttps://tech.quantco.com/blog/debug-feedstock-updates/https://tech.quantco.com/blog/debug-feedstock-updates/The autotick-bot is a crucial part of the conda-forge packaging ecosystem, but lacked local debugging capabilities. Learn how we addressed this and how to debug your feedstock's updates.Fri, 14 Mar 2025 00:00:00 GMTcondaconda-forgeautotick-botpackaginghttps://tech.quantco.com/blog/conda-deny/https://tech.quantco.com/blog/conda-deny/How we automatically check our software for license compliance.Thu, 24 Oct 2024 00:00:00 GMTcondalicense-checkingpixihttps://tech.quantco.com/blog/ndonnx/https://tech.quantco.com/blog/ndonnx/ndonnx is an ONNX-backed Python array library that implements the Array API standard. It aims to simplify the transfer of models from research to production.Tue, 01 Oct 2024 00:00:00 GMTonnxarray-apinumpyndonnxhttps://tech.quantco.com/blog/spox/https://tech.quantco.com/blog/spox/Spox provides an efficient and Pythonic way to define ONNX graphs.Tue, 03 Sep 2024 00:00:00 GMTonnxpythonmlopsspoxarray-apindonnxhttps://tech.quantco.com/blog/tabular-delta/https://tech.quantco.com/blog/tabular-delta/TabularDelta reports table comparisons in different formats for various types of tables and use cases.Wed, 14 Aug 2024 00:00:00 GMTpythonpandaspolarssqlalchemydatahttps://tech.quantco.com/blog/persisting-models-with-onnx/https://tech.quantco.com/blog/persisting-models-with-onnx/Introduction into ONNX, an open-source specification that allows us to persist the state of a trained model as well as its inference logic.Fri, 09 Aug 2024 00:00:00 GMTonnxpythonmlopsspoxarray-apindonnxhttps://tech.quantco.com/blog/metalearners/https://tech.quantco.com/blog/metalearners/Estimating Conditional Average Treatment Effects with the metalearners libraryFri, 12 Jul 2024 00:00:00 GMTpythoncausal-inferencehttps://tech.quantco.com/blog/pixi-production/https://tech.quantco.com/blog/pixi-production/We show how we ship conda environments into production using the pixi package manager. To do that, we introduce a tool called pixi-pack.Thu, 11 Jul 2024 00:00:00 GMTpythoncondapixipackaginghttps://tech.quantco.com/blog/automatic-repo-updating/https://tech.quantco.com/blog/automatic-repo-updating/We built a tool to automatically keep all of our repositories up-to-date with the latest best practices and dependency versions.Tue, 18 Jun 2024 00:00:00 GMTgithubautomationhttps://tech.quantco.com/blog/glum-v3/https://tech.quantco.com/blog/glum-v3/The new glum release introduces a formula interface that simplifies preprocessing and offers various enhancements for categorical and mixed sparse and dense data.Fri, 07 Jun 2024 00:00:00 GMTpythonperformanceglmhttps://tech.quantco.com/blog/polarify/https://tech.quantco.com/blog/polarify/Tired of writing complicated Polars expressions? polarIFy automatically translates your easy-to-read Python methods into efficient Polars expressions!Fri, 25 Aug 2023 00:00:00 GMTpolarspythonastcompilershttps://tech.quantco.com/blog/multiregex/https://tech.quantco.com/blog/multiregex/In this post we discuss how we improved the runtime performance of a text mining step in a machine learning pipeline by a factor of 12.Sun, 31 Jul 2022 00:00:00 GMTpythonperformanceregexhttps://tech.quantco.com/blog/dtype-reduction-sklearn/https://tech.quantco.com/blog/dtype-reduction-sklearn/We present an open source library to shrink pickled scikit-learn and lightgbm models. We will provide insights of how pickling ML models work and how to improve the disk representation. With this approach, we can reduce the deployment size of machine learning applications up to 6x.Thu, 23 Jun 2022 00:00:00 GMTsklearnpythoncompressionpicklinghttps://tech.quantco.com/blog/datajudge/https://tech.quantco.com/blog/datajudge/Datajudge is a Python library for expressing and testing expectations against data from database.Mon, 20 Jun 2022 00:00:00 GMTdatatestshttps://tech.quantco.com/blog/enterprise-ui-components/https://tech.quantco.com/blog/enterprise-ui-components/How to properly set up a React UI component library and share it across your organization.Thu, 19 May 2022 00:00:00 GMTuihttps://tech.quantco.com/blog/snowflake-testsuite-performance/https://tech.quantco.com/blog/snowflake-testsuite-performance/When running the integration test suite of a data validation tool against a Snowflake instance, we saw a massive slow-down compared to Postgres or MS SQL.Thu, 12 May 2022 00:00:00 GMTsnowflakepythonsqlalchemyintegration-testshttps://tech.quantco.com/blog/conda-in-pre-commit/https://tech.quantco.com/blog/conda-in-pre-commit/Developing code involves several tasks that are simple yet repetitive. This includes styling your code (we use `black`) and checking for common issues. These tasks can be easily automated.Tue, 10 Mar 2020 00:00:00 GMTcondapythonpre-commit