search

theupdateframework / pip

A tool for installing and managing Python packages
www.pip-installer.org
Other
4 stars 2 forks source link

status of project PIP over TUF? #5

Open adrelanos opened 6 years ago

adrelanos commented 6 years ago

Will TUF be merged into pip?

Or this project stalled?

What do you think?

trishankatdatadog commented 6 years ago

Hihihi Patrick,

Long time no see! Hope all is well :)

At Datadog, we are using a forked version of pip 10.0.1 that talks TUF:

https://github.com/pypa/pip/compare/10.0.1...DataDog:trishankatdatadog/10.0.1.tuf

We have shipped it to production. It needs some documentation, and unit testing, but it should work for you as well as it has worked for us. Would you like to help us try it and see, please?

Cc: @ofek @masci @truthbk

Thanks, Trishank

adrelanos commented 6 years ago

Do you think it will ever be merged upstream at

https://github.com/pypa/pip ?

trishankatdatadog commented 6 years ago

That is our intention. We expect a PR to upstream in the next few months. @dstufft @dougdep