3 ms·
> People shouldn’t randomly download packages without understanding and verifying EVERY one yes but people do and all the training in the worldn't isn't going
by katbyte 6y ago
> People shouldn’t randomly download packages without understanding and verifying EVERY one
yes but people do and all the training in the worldn't isn't going to help - the package manager needs safe defaults that prevent this sort of thing.
- prepend 6y agoWhat can the package manager do to prevent someone from typing in the wrong package name? There are some package managers like R’e CRAN that are really thorough on what gets in, so maybe if pypi got more volunteers they could start a “tested” tier where updated require test suites and whatnot.