4 ms·
If there was a business/enterprise offering with extra security I'm sure they'd have a long list of people who would sign up and happily pay for it.
by cdnsteve 9y ago
If there was a business/enterprise offering with extra security I'm sure they'd have a long list of people who would sign up and happily pay for it.
- raesene6 9y agoThose service already exit, e.g. https://www.sourceclear.com/ https://www.sourceclear.com/ whilst I hope they're doing well, I don't think they've made significant in-roads into the volume of people using open source software library repo's.
- cdnsteve 9y agoIt needs to be part of PyPi directly, I would have a difficult time trusting and unknown third-party.
- simon3 9y agoThe conda package manager is free and generally feels like a professional package manager like yum or apt-get.
- edraferi 9y agoYes, Conda [0] is a package manager designed by Continuum Analytics (now Anaconda, Inc.) to support their Anaconda Distribution [1]. The distribution is free, and the Conda client is open source. However, Anaconda sells several enterprise products, including an on-premise Conda server ("Anaconda Repository"). In general, Conda does more package verification than pip, and the packages in the Anaconda distribution are more thoroughly vetted than PyPi. Conda-Forge [2] provides an escape hatch for less-vetted community code. [0] https://conda.io/docs/index.html https://conda.io/docs/index.html [1] https://www.anaconda.com/distribution/ https://www.anaconda.com/distribution/ [2] https://conda-forge.org/ https://conda-forge.org/