search

conda-forge / staged-recipes

A place to submit conda recipes before they become fully fledged conda-forge feedstocks
https://conda-forge.org
BSD 3-Clause "New" or "Revised" License
708 stars 4.93k forks source link

DO NOT MERGE recipes for ctx #19060

Open beckermr opened 2 years ago

beckermr commented 2 years ago

@chenghlee noted that the ctx domain has been compromised: https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html

@conda-forge/staged-recipes @conda-forge/core please be aware of this and do not merge any recipes shipping ctx.

beckermr commented 2 years ago

I made a PR that should catch naive recipes named ctx and not build them as feedstocks. This may not be enough for someone who is motivated however