Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5986

Re: Considering letting python-pip use vendored dependencies

From stefanor@debian.org
Newsgroups linux.debian.security
Subject Re: Considering letting python-pip use vendored dependencies
Date 2021-12-31 22:50 +0100
Message-ID <DAxWF-6qL-1@gated-at.bofh.it> (permalink)
References <CXMFs-7iS-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Hi debian-security (2021.09.15_23:32:14_+0000)
> As mentioned in debian-devel recently [1], at the DebConf 21 Debian
> Python BoF [2] we discussed the idea of reverting our unbundling patches
> to python-pip. The group consensus was that it wasn't worth the effort
> to maintain these patches.
> 
> Debian Security Team and my co-maintainers: Do you have an opinion on
> doing this?

Several months later, I haven't received a reply to this, yet.
I'll take silence as no objection to letting pip bundle dependencies.

SR

-- 
Stefano Rivera
  http://tumbleweed.org.za/
  +1 415 683 3272

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Considering letting python-pip use vendored dependencies Stefano Rivera <stefanor@debian.org> - 2021-09-16 01:50 +0200
  Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2021-12-31 22:50 +0100
  Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2022-01-16 16:10 +0100
    Re: Considering letting python-pip use vendored dependencies Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-16 16:20 +0100

csiph-web