News for hackers. Stuff that matters.

A comment on Pipfile for Python. Parent comment

Re:Pipfile for Python by dismantlethesun on Tuesday November 22, 2016 @12:43PM (#13015799)
Installation files by default are run. If you have a normal Python module sitting on PyPi, and install it it may run a setup.py which could potentially do anything that your currently active user is allowed to do.

Adding custom programming logic into the requirements' file isn't really an issue, when setup.py could already grab a C compiler and start binding in system libraries into its package.

[ Parent | on HN ]
Re:Pipfile for Python by scrollaway on Tuesday November 22, 2016 @12:50PM (#13015875)
You're missing the forest for the trees. My point was that you're losing flexibility when you're not able to parse/generate a data-driven file using a well-known data format.

And unless you're using a homoiconic format, code is not (easily) parsable as data.

[ Parent | on HN ]