[issue37343] pip: Warn on vulnerable packages

2019-06-19 Thread Andrew Pennebaker
New submission from Andrew Pennebaker : Compared to pip, NPM warns users when a dependency subtree about to be installed, includes known vulnerabilities. This helps devs catch security issues earlier, so they can update or replace critical dependencies. Similarly, the dependency-check pip

Windows: python3.exe missing

2017-07-07 Thread Andrew Pennebaker
Could the Windows installer for Python 3 provide a "python3" command, such as a python3.bat or python3.exe file, to help with scripts that rely on the interpreter being called "python3"? The py launcher is somewhat helpful, but a proper python3 runnable is preferable. --

Bundle pip with Python for Windows users

2013-09-05 Thread Andrew Pennebaker
In the future, could Python for Windows come with pip? It would simplify package installation for users and developers, often a quite involved and tricky process. http://www.pip-installer.org/en/latest/ -- https://mail.python.org/mailman/listinfo/python-list