-
Notifications
You must be signed in to change notification settings - Fork 33
Open
Description
I'm creating this issue just to let pip-accel users know that I'm aware of pip 8 being released and will be upgrading pip-accel to use pip 8 soon. For now everything is fine due to the way pip-accel pins the pip dependency (pip will just spam messages to the terminal about not being up to date). Judging by pip's release notes most of the changes shouldn't have a big impact on pip-accel. Only the following items might prove to be relevant and/or tricky from a first cursory reading:
- Implement a top-level
pip download
command and deprecatepip install --download
. - Include the functionality of
peep
into pip, allowing hashes to be baked into a requirements file and ensuring that the packages being downloaded match one of those hashes. This is an additional, opt-in security measure that, when used, removes the need to trust the repository.
sanyer and iFreilicht
Metadata
Metadata
Assignees
Labels
No labels