-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Paul Moore wrote: > 2009/3/13 Chris Withers <ch...@simplistix.co.uk>: >> If a decent package management system *was* included, this wouldn't be an >> issue.. > > Remember that a "decent package management system" needs to handle > filling in all the forms and arranging approvals to get authorisation > for packages when you download them. > > And no, I'm *not* joking. People in a locked-down corporate > environment really do benefit from just having to get the OK for > "Python", and then knowing that they have all they need.
You are plainly joking: nothing in Python should know or care about the various bureaucratic insanities in some workplaces. Given the *existing* stdlib and network connectivity, nothing any corporate security blackshirt can do will prevent an even moderately-motivated person from executing arbitrary code downloaded from elsewhere. In that case, what is the point in trying to help those who impose such craziness? > Even ignoring the above, Which the language and library should do. > your "decent package management system" has > to deal with systems with no internet connectivity - just copying the > Python installer onto my pen drive to put on my Mum's laptop so I can > write some admin jobs for her, is a lot easier than having to pick and > choose from PyPI what to download before I start. Nobody is arguing that there should be *no* batteries in the stdlib: we are talking about the ones which are leaking acid already, or which might get there soon due to lack of maintenance. > -1 on slimming down the stdlib. > (OTOH, I've no problem with seeing an improved package system - just > don't use it as an excuse to cripple the stdlib!) Part of this discussion is about not *expanding* the stdlib: give a reasonable packaging story, leaving a given component out of the library is a defensible choice. Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 tsea...@palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJumAJ+gerLs4ltQ4RApC7AKDVsIxfBlw6CWWLa+VhaASyDz+LFQCfQp5I yzrdYPo1FbXGAB90Ucf/Le8= =bCTx -----END PGP SIGNATURE----- _______________________________________________ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com