4 ms·

That's specific to one scenario for Python. It's hardly the entire ecosystem, which is my point. Decentralization is there already and well-supported in the pr

That's specific to one scenario for Python. It's hardly the entire ecosystem, which is my point. Decentralization is there already and well-supported in the provided tools. You just can't abuse the official PyPI sources, and that's a reasonable approach.

the_mitsuhiko 4y ago
The point I was making is that systems have a tendency to centralize, even in the absence of a bad actor. Decentralization was really well supported in the Python ecosystem in former times, it no longer is. The trend is pretty self evident I would argue.
lmm 4y ago
> It's hardly the entire ecosystem, which is my point. It is, de facto, the entire ecosystem. Everything's on PyPI, and if your package can't interoperate with PyPI then it will wither away very quickly.
- cowsandmilk 4y ago
  From experience, that hasn’t been true. I’ll give an example. Rdkit[0] went for years without being able to be released via pypi and could only be installed easily via conda[1]. Despite this, it thrived enough as a project that users got its postgresql extension to be part of AWS Aurora[2] in 2020, which means wide adoption before rdkit had managed to figured out how to be distributed by pypi in 2021. There are open source projects like this all over the place, thriving outside the centralized repos. [0] https://rdkit.org https://rdkit.org [1] https://stackoverflow.com/questions/58199504/how-to-install-a-package-rdkit-from-conda-with-pip https://stackoverflow.com/questions/58199504/how-to-install-... [2] https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-aurora-postgresql-supports-rdkit-extension/ https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-au...
  - the_mitsuhiko 4y ago
    And yet, all popular projects move to PyPI over time which is in line with the point I was making.

4 ms·

That's specific to one scenario for Python. It's hardly the entire ecosystem, which is my point. Decentralization is there already and well-supported in the pr

by BeefWellington 4y ago

the_mitsuhiko 4y ago
The point I was making is that systems have a tendency to centralize, even in the absence of a bad actor. Decentralization was really well supported in the Python ecosystem in former times, it no longer is. The trend is pretty self evident I would argue.
lmm 4y ago
> It's hardly the entire ecosystem, which is my point. It is, de facto, the entire ecosystem. Everything's on PyPI, and if your package can't interoperate with PyPI then it will wither away very quickly.
- cowsandmilk 4y ago
  From experience, that hasn’t been true. I’ll give an example. Rdkit[0] went for years without being able to be released via pypi and could only be installed easily via conda[1]. Despite this, it thrived enough as a project that users got its postgresql extension to be part of AWS Aurora[2] in 2020, which means wide adoption before rdkit had managed to figured out how to be distributed by pypi in 2021. There are open source projects like this all over the place, thriving outside the centralized repos. [0] https://rdkit.org https://rdkit.org [1] https://stackoverflow.com/questions/58199504/how-to-install-a-package-rdkit-from-conda-with-pip https://stackoverflow.com/questions/58199504/how-to-install-... [2] https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-aurora-postgresql-supports-rdkit-extension/ https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-au...
  - the_mitsuhiko 4y ago
    And yet, all popular projects move to PyPI over time which is in line with the point I was making.