4 ms·
It gives false sense of security. What about google_official/tensorflow
by YetAnotherNick 4y ago
It gives false sense of security. What about google_official/tensorflow
- germandiago 4y agoIt would still be an improvement if companies make clear what their namespace is.
- cozzyd 4y agogoogle.com/tensorflow (and you'd have to prove you own google.com) not perfect, but better.
- weberer 4y agoI've always been a fan of how Java packages do it where the TLD is first.
- __warlord__ 4y agoTIL https://www.oracle.com/java/technologies/javase/codeconventions-namingconventions.html https://www.oracle.com/java/technologies/javase/codeconventi...
- comprev 4y agoPerhaps something like Docker hub where "official" images are like "/_/nginx" So "_google/tensorflow" would be official. "google/tensorflow" would not be (plus it would be reserved by default to avoid confusion).
- nine_k 4y agoWhat if the package is signed by a key available at google.com/pypi/key ? Actually it should be not just a key but a whole TLS certificate, with references to a CA, activity dates, etc.