pypa / pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
https://pypi.org/project/pip-audit/
Apache License 2.0
979 stars 62 forks source link

Caching: Use a more respectful default location? #342

Closed woodruffw closed 2 weeks ago

woodruffw commented 2 years ago

At the moment, we fall back to ~/.pip-audit/cache if pip cache dir fails. This isn't a "respectful" default, since it doesn't adhere to either XDG (which probably wants us to consult XDG_CACHE_HOME) or macOS's conventions (~/Library/Caches, probably).

This probably isn't the most important change to make since 99% of users won't notice it anyways, but it would make us a slightly better participant in the user's home directory.

aanghelidi commented 2 months ago

Hello @woodruffw, I made a PR that solves this issue. It is ready for a review.