pip v26.1 adds support for relative dependency cooldowns
Posted by overandoutage@reddit | programming | View on Reddit | 6 comments
Posted by overandoutage@reddit | programming | View on Reddit | 6 comments
retr0h@reddit
who even uses pip now days ? uv and pyproject is the de facto
Sigmatics@reddit
How are you gonna install uv if you don't want to rely on random hosted shell scripts? And there's plenty of uses in CI as well. Admittedly the Ubuntu 24 change put a real damper on those
tilitatti@reddit
well I do, for all the random stuff I need toy language, python, pip works good, it even now has "dependency cooldown"
tilitatti@reddit
hahaha, I love this timeline, no real fixes, but a janky ass patch "this is fine", and the house just keeps burning.
fiskfisk@reddit
What's your wishlist and suggestion?
RustOnTheEdge@reddit
This is a great solution, why wouldn’t it be? It mitigates for a significant part the creep and automatic spread of hijacked packages. This is absolutely well wanted in my circle, and can’t even imagine why it wouldn’t be tbh.