PSF Hires PyPI Safety and Security Engineer

Re:PSF Hires PyPI Safety and Security Engineer by alanfranz on Friday August 04, 2023 @01:33PM (#37003167)

PyPI is just one gear in the quite broken Python packaging mess. But I hope it’s a good starting point!

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by aeurielesn on Friday August 04, 2023 @01:59PM (#37003494)

I'm waiting for the day when setuptools and pip are a thing of the past.

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by simonw on Friday August 04, 2023 @02:15PM (#37003698)

What would you expect to replace pip?

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by bombolo on Friday August 04, 2023 @03:19PM (#37004563)

Another layer on top of another layer, on top of another layer, that ultimately uses pip. Of course!

People want to replace pip with poetry, despite poetry being just an extra layer of complication on top of pip.

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by alexk307 on Friday August 04, 2023 @04:22PM (#37005356)

Nah we just want some security

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by crabbone on Friday August 04, 2023 @03:38PM (#37004826)

Military vehicle rolls through the desert, US soldiers in the desert wind, IED hits the vehicle, guitar solo starts playing...

Waiting for the one...

More guitar solo, then drums

day that never comes

[ Parent | on HN ]

Re:PSF Hires PyPI Safety and Security Engineer by demizer on Friday August 04, 2023 @03:23PM (#37004624)

As someone that has dealt with PSF and PyPI at a product level for packaging at the intersection of Python and AI for compute hardware, we consider PyPI an immature ecosystem. It's absolutely great for python libraries, but that's it. It's not ready for the flood of AI hardware that is coming. Mojo looks promising, but not sure how it's going to interact with PyPI.

[ Parent | on HN ]