2 ms·
You’re only looking at one side of the cost equation. If a maintainer screws up and lets their account get compromised, and then it uploads malware, it’s PyPI w
by Analemma_ 4y ago
You’re only looking at one side of the cost equation. If a maintainer screws up and lets their account get compromised, and then it uploads malware, it’s PyPI who has to pay the immense cost of cleanup. How is that fair?
- pyrale 4y agoWell, it's PyPi who decides what is critical and what is not. If they're not happy with maintainers not wanting to take that responsibility, they can fork.