3 ms·

Then outsource the curation to someone else by letting people create a feed of trusted packages that pip can be configured for or something. Then we can point p

Then outsource the curation to someone else by letting people create a feed of trusted packages that pip can be configured for or something. Then we can point pip at pip.name.com/packages.json instead of having to host an artifactory for simple use cases.

woodruffw 3y ago
This is something you can already do: you can host whatever curated package view you'd like using the Simple Repository API defined in PEP 503[1]. That PEP doesn't require that files be hosted on the same origin as the index (which isn't the case for PyPI either), so you could perform the curation there by re-using PyPI's CDN URLs. [1]: https://peps.python.org/pep-0503/ https://peps.python.org/pep-0503/