4 ms·
You can pip install complex stand alone executables, such as nodejs, and it's used in the entire ecosystem. In fact, most packages are now wheels, which are no
by BiteCode_dev 4y ago
You can pip install complex stand alone executables, such as nodejs, and it's used in the entire ecosystem.
In fact, most packages are now wheels, which are not sources: they are compressed, and may contain binaries for compiles extensions, something extremely popular (the scientific and AI stacks exist only because of this).
Some packages need to be compiled after the fact, something that setup.py will trigger, and some even embed a fallback compiler, like some cython based packages.
Also, remember there is very few people working on pypi, there is no moderation, anybody can publish anything, so you would need a bullet proof automated heuristic. That's either impractical, or too expensive.
If you want a secure package distribution platform, there are commercial ones, such as anaconda. You get what you pay for.
- ThePowerOfFuet 4y agoI guess we're finding out the other side of that blade, huh?