News for hackers. Stuff that matters.

A comment on Python typosquatting is about more than typos. Parent comment

Re:Python typosquatting is about more than typos by david2ndaccount on Friday October 02, 2020 @04:56PM (#24666947)
Sometimes this is a feature though. PIL is abandoned but was widely used, so its replacement pillow can use the same import as it is a drop-in replacement.
[ Parent | on HN ]
Re:Python typosquatting is about more than typos by RasmusLarsen on Friday October 02, 2020 @07:30PM (#24668097)
Wouldn't it be better to have some explicit method of aliasing your dependencies if this is actually something you want to do? It seems wrong to have that as a feature opaque like that.
[ Parent | on HN ]
Re:Python typosquatting is about more than typos by david2ndaccount on Friday October 02, 2020 @09:27PM (#24668727)
It’d probably be better, but it is an accidental feature of the current system.
[ Parent | on HN ]
Re:Python typosquatting is about more than typos by progval on Friday October 02, 2020 @05:51PM (#24667382)
Agreed. I maintain a fork of a package that loads plugins; and these plugins import from the original package's name. If I couldn't use the same name, users would need to edit every old plugin's code.
[ Parent | on HN ]