spesmilo / electrumx

Alternative implementation of spesmilo/electrum-server
MIT License
429 stars 343 forks source link

Please use a LRU library available in major distributions #247

Closed ben-grande closed 5 months ago

ben-grande commented 5 months ago

The dependency pylru can only be installed from upstream git repository or with pip. This is undesirable as there is no such way to easily install from Debian or Fedora in a secure manner. Pip checks https and hashes and version pinning while with Git commit signature verification is necessary.

I understand that pylru is just what ElectrumX needs. I am not asking for new features, just an easy way to install on major distributions via an already established root of trust.

Can you please consider migrating to a Python LRU library available in Debian or Fedora?

If there is agreement, I could make a PR. I have not tested if the common packages works.

SomberNight commented 5 months ago

Could you please test https://github.com/spesmilo/electrumx/pull/248 ?