324
Package managers be like (linux.community)
submitted 2 years ago by to c/programmerhumor@lemmy.ml
159 comments fedilink hide all child comments
 

Sorry Python but it is what it is.

you are viewing a single comment's thread
view the rest of the comments
[–] 23 points 2 years ago (1 child)

Maybe I’m misremembering, but didn’t pip have it’s own security concerns earlier this year?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 2 years ago (1 child)

    I believe that was just name squatting.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 2 years ago (1 child)

    It’s less the name squatting and more pip not supporting a certain PyPI resolution order: https://github.com/pypa/pip/issues/8606

    For example, I have A, B and C in my requirements.txt but I want to install C from my own private PyPI. Everything works fine until someone uploads a package name C to the public PyPI then suddenly I’m not installing my private package anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •