Re: pip + safety

Joni Orponen <[email protected]>
Newsgroups gmane.comp.python.distutils.devel
Message-ID <CA+LW3i0cXoW1PWHkHuPg_2VhWXgij0emRzJEqH7kh7HZb0krNw@mail.gmail.com>
On Tue, Feb 12, 2019 at 5:24 AM Tzu-ping Chung <[email protected]> wrote:

> One way to avoid disclosing user environments to a third party is to build
> this into PyPI instead. The API could generate the warning for pip to
> display.
>

How large are these kinds of databases? Would it be a conceivable thought
end users and/or CI infrastructures of organisations keep and update their
local copies and thus only disclose the fact they're using such a database?

-- Joni Orponen

--
Distutils-SIG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at https://mail.python.org/archives/list/[email protected]/message/ERBNV6DJ5MTXF5KOHXZDABPQAEUJELMF/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.