Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: Philippe Cerfon Newsgroups: linux.debian.maint.python Subject: Re: can pip be made using local Debian packages for any dependencies Date: Fri, 17 Feb 2023 03:40:01 +0100 Message-ID: References: X-Original-To: Ian Norton , Philippe Cerfon , Donald Stufft , debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Fri Feb 17 02:36:11 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AO0yUKUcXAT3vr/iTV9lyyEm+BqBGaLc7wTUaUSH3I8PwKKfFvc+a3Ej NPJiMXMpM+FijRn3bNIexKMvNW3Ji70XOfPexoI= X-Google-SMTP-Source: AK7set/dnW7zb1HKJN0f+N1+GNo2VsfGu0PvyFojjA8bOYHJB6V8NhQbx+J2UT2aS0UZsUIOTSbDPDI/t7qj6lSK4Eg= X-Received: by 2002:a17:90b:2683:b0:234:3620:4ac0 with SMTP id pl3-20020a17090b268300b0023436204ac0mr1125238pjb.110.1676600280124; Thu, 16 Feb 2023 18:18:00 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Mailing-List: archive/latest/20831 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAN+za=MhwSzXe3K4_QGF9mQSghAgCUzYNbPediXMD9DHfPxSQw@mail.gmail.com Approved: robomod@news.nic.it Lines: 20 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 17 Feb 2023 03:17:49 +0100 X-Original-Message-ID: X-Original-References: <20230215163553.dky22eeiwdwdabnm@satie.tumbleweed.org.za> <20230215200949.5zrdyu5p33nhahgz@satie.tumbleweed.org.za> Xref: csiph.com linux.debian.maint.python:14932 On Wed, Feb 15, 2023 at 9:09 PM Stefano Rivera wrote: > And our selection of Python modules is far from complete. It's not > Debian's intent to provide a mirror of PyPI within Debian. Generally > speaking, we package the modules that we find useful for supporting > building and shipping other python modules and applications. > > We'll only have a single version of each package. And they're usually > not the versions developers want, because in any stable release they're > probably out of date. Well in my case the main motivation was security (i.e. only using code) that has security support by Debian. But shouldn't that use case also be interesting for Debian Maintainers? Whenever their pip would need to download something from PyPI, it would mean that some dependency is likely not fulfilled in Debian (unless of course that Debian package is simply not installed). Cheers, Philippe