Re: Question about python packaging

2018-08-05 Thread Brett Cannon
On Thu, 19 Jul 2018 at 16:01 蕭毅 wrote: > It seems that originally I posted to wrong place. > https://groups.google.com/forum/#!topic/python-virtualenv/iExzUJhC_PY > > Hi all: > > I have a new Python package https://github.com/NAL-i5K/GFF3toolkit with > new release. > > In this new release, I

Re: Figuring out library holes in the package installation process

2018-04-06 Thread Brett Cannon
Based on no one speaking up, I'm assuming I wasn't wrong with my outline. ;) That looks like there may be one PEP to write and a few things to add to 'packaging' (or other projects as appropriate). On Monday, 19 March 2018 19:39:43 UTC-7, Brett Cannon wrote: > > With the big push we a

Figuring out library holes in the package installation process

2018-03-19 Thread Brett Cannon
With the big push we are all working towards standards, I thought it would be interesting to outline the steps it takes to go from requesting a package to be installed to it ending up on disk (see my first email on such an outline

Re: Trying to outline the steps taken to go from "I want this package" to it being installed

2018-12-24 Thread Brett Cannon
On Sat, 22 Dec 2018 at 12:22, Brett Cannon wrote: > > > On Fri, 21 Dec 2018 at 12:08, Sumana Harihareswara > wrote: > >> Brett, did you end up making progress on this? If not, would you be open >> to someone else picking it up? >> > > The complete outline

Re: Trying to outline the steps taken to go from "I want this package" to it being installed

2018-12-22 Thread Brett Cannon
5 support to 'packaging': https://github.com/pypa/packaging/pull/156 . -Brett > > Thanks! > > -- > Sumana Harihareswara > Changeset Consulting > https://changeset.nyc > > On 3/5/18 1:01 PM, Brett Cannon wrote: > > Thanks for the extra details, Nick! I have some docu

Re: Handling packages with known vulnerabilities

2019-02-12 Thread Brett Cannon
Since PyPI is an open package host/index there is no policy here. It is up to the package maintainers to remove vulnerable packages or for users to do their best to not use vulnerable packages (PyPA doesn't have the staffing to police this sort of thing). On Tue, Feb 12, 2019 at 1:50 PM Alex

Re: pypi stats page down

2019-07-11 Thread Brett Cannon
It's probably been retired. https://status.python.org/ is the page the 404 page links to and it covers all Python infrastructure services. On Thu, Jul 11, 2019 at 11:49 AM micah page wrote: > Why does has this page been down for 2+ months? > https://pypi.org/stats/ > > -- > You received this

Re: package verification

2019-07-26 Thread Brett Cannon
Sviatoslav On Fri, Jul 26, 2019 at 4:58 AM Ioakim Ioakim wrote: > I am not sure. I am just looking to find where in the source code a > package gets verified before being installed on a client's machine > Unfortunately something stripped out what you were replying to, Ioakim, but I assume it

Re: Pip not responding to pyenv

2020-03-11 Thread Brett Cannon
The easiest solution to this is to run pip via `python -m pip`. That way it is directly ties to the Python you use to execute it. On Wed, Mar 11, 2020 at 1:46 AM Shlok Sinha wrote: > Hello > The heading is pretty explanatory. I had started to use pyenv, but > unfortunately, pip did not take