Fabric Runtime - Python Library Origin

[sjmartin]

Hi all,

Can anyone advise if Fabric Runtime 1.3 also uses Anaconda to source its Python libraries?

I looked at the specification for Fabric Runtime 1.2 here and it mentions there is a 'full Anaconda installation'. There is no mention of this for the latest Fabric Runtime 1.3 here.

I am mainly interested in this from a security perspective to check that the Python libraries in Fabric are sourced from a secure / validated location (e.g. the library repository managed and monitored by Anaconda).

Thanks for any help!

[v-jingzhan-msft]

Hi @sjmartin 

The official documentation does not specify which repository the built-in libraries are installed from, but I believe they are sourced from secure and reliable repositories because Microsoft takes the security of its software products and services seriously. Since the Fabric runtime includes not only Python modules but also Java, Scala, and R libraries, they are probably not sourced from a single repository but from several repositories. You don’t need to worry about the security of the library sources.

To view which built-in libraries are installed by default, you can try creating a new environment, switching to the runtime you want to explore from the runtime dropdown at the top, and going to the Built-in libraries page. If you switch to the Public libraries page, you can install additional libraries from PyPI or Conda repositories.

For more detailed information about every update within Fabric Runtime 1.3, please go to the following Github page: synapse-spark-runtime/Fabric/Runtime 1.3 (Spark 3.5) · GitHub

Best Regards,
Jing
If this post helps, please Accept it as Solution to help other members find it. Appreciate your Kudos!