Know what you install: Extra PyPI indices

This is a post in a series that explains potential issues related to dependencies. It does not attempt to explain all nuances of package management and supply chain security, but can serve as an introduction to some Python-specific parts. In this post, we will go through what happens when you use Pip together with multiple indices and show problems related to it. You can find all posts in the series here...

December 4, 2023

Know what you install: Install a package

This post is the first in a series that explains potential issues related to dependencies. It does not attempt to explain all nuances of package management and supply chain security, but can serve as an introduction to some Python-specific parts. In this post, we will go through what happens when you install a package and how to specify a version. We will also go through the dependency resolution that happens when pip tries to find compatible versions and lastly a short explanation about distribution formats....

November 15, 2023