Re: pre-PEP: transition to release-file hosting at pypi site
Jacob Kaplan-Moss <[email protected]> Tue, 12 Mar 2013 13:56:00 -0500
| Newsgroups | gmane.comp.python.catalog |
|---|---|
| Message-ID | <CAK8PqJEaUfuDQOt=MzpKXLfhjd8ro0vWYP1xJsLsdOceYJOhsQ@mail.gmail.com> |
On Tue, Mar 12, 2013 at 1:00 PM, M.-A. Lemburg <[email protected]> wrote: > The whole Python package eco-system works based on trust and > injecting fear into this system is not helpful, IMO. I'm sorry if my words came across that way; I'm not trying to scare anyone. I'm trying to emphasize that this isn't an academic discussion; the insecurity of PyPI is something that actively prevents the adoption of Python. I think I'm probably right in saying that everyone here wants to push Python forward; I'm trying to articulate how security fits into that. Again, sorry for not being clearer; you're totally right that fear-mongering isn't helpful. Jacob