Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Host psutil on PyPi #410

Closed
giampaolo opened this issue May 23, 2014 · 5 comments
Closed

Host psutil on PyPi #410

giampaolo opened this issue May 23, 2014 · 5 comments
Labels

Comments

@giampaolo
Copy link
Owner

From alex.gay...@gmail.com on July 22, 2013 01:19:58

Currently psutil is hosted off of PyPi, this presents security and performance 
challenges. If you could upload the releases to PyPi and then follow the 
instructions at pypi-externals.caremad.io/help/what/ it'd be great!

Original issue: http://code.google.com/p/psutil/issues/detail?id=410

@giampaolo
Copy link
Owner Author

From g.rodola on July 23, 2013 22:32:45

It certainly seems there's a lot of demand for this so I think it's time to accept it.
I guess we can do this starting from next psutil version.
Out of curiosity, what are the security and performance challenges you are 
referring to?

Status: Accepted

@giampaolo
Copy link
Owner Author

From alex.gay...@gmail.com on July 23, 2013 22:37:09

The performance challenge is that to find externally hosted packages pip needs 
to scrape the URLs, this is extremely slow compared to things hosted on PyPi 
itself, which has a good distributed CDN. (You'd think being on google would 
help things, empirically it does not).

The security concern is that the scraped URLs are not downloaded over HTTPS.

@giampaolo
Copy link
Owner Author

From g.rodola on August 23, 2013 03:53:26

Issue 419 has been merged into this issue.

@giampaolo
Copy link
Owner Author

From g.rodola on September 28, 2013 03:05:47

Here we go: https://pypi.python.org/pypi?:action=display&name=psutil#downloads

Status: Fixed
Labels: Milestone-1.1.0

@giampaolo
Copy link
Owner Author

From g.rodola on September 28, 2013 10:32:46

Closing out as fixed. Release 1.1.0 is now available for download.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant