You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on May 30, 2020. It is now read-only.
Originally reported by: Erik Rose (Bitbucket: erikrose, GitHub: erikrose)
Packages like mock provide equivalent zips and tarballs for each release, and pip simply downloads the first one on the index page. When we attack pypa/pip#1175, it will be helpful if pip chooses the same archive (for a given platform) every time. Otherwise, when pip hands the user the hashes of downloaded archives, it will have to give one for each format, which means downloading them all. However, at the moment, there is no ORDER BY clause on the query PyPI uses to list the downloads. We should order by something stable and unique, like the archive file name.
Originally reported by: Erik Rose (Bitbucket: erikrose, GitHub: erikrose)
Packages like mock provide equivalent zips and tarballs for each release, and pip simply downloads the first one on the index page. When we attack pypa/pip#1175, it will be helpful if pip chooses the same archive (for a given platform) every time. Otherwise, when pip hands the user the hashes of downloaded archives, it will have to give one for each format, which means downloading them all. However, at the moment, there is no ORDER BY clause on the query PyPI uses to list the downloads. We should order by something stable and unique, like the archive file name.
The text was updated successfully, but these errors were encountered: