News for hackers. Stuff that matters.

A comment on Malicious software libraries found in PyPI posing as well known libraries.

Re:Malicious software libraries found in PyPI posing as well... by kevin_thibedeau on Friday September 15, 2017 @09:06AM (#15256778)
Python needs a way to run 2to3 during package installation that doesn't use setup.py (setup.cfg or wheels). As it stands now, you have the hassle of building a release four times if you want to support all combos of Py2, Py3, 32-bit, and 64-bit platforms. The absent support for 2 to 3 migration in the safer alternatives is why I stick with setup.py.
[ Parent | on HN ]
Re:Malicious software libraries found in PyPI posing as well... by ThiefMaster- on Saturday September 16, 2017 @09:04AM (#15264474)
No, what you need to do is fix your package's code to work on Python 2 and 3 without running 2to3 on it. The only case where this doesn't work is if you have binary extensions - but then you need separate wheels in any case.
[ Parent | on HN ]