Previously LGPL, now re-licensed as closed-source/commercial. Previous code taken down.

Commercial users pay $99/year, free for personal use but each user has to make a free account after a trial period.

  • TXL
    link
    fedilink
    111 year ago

    Does pip really allow binary blobs? That effectively makes it zero security.

    • @[email protected]
      link
      fedilink
      11 year ago

      Sure, and it’s really nice for big compiled projects to not have to compile that on every update.

    • etrotta
      link
      fedilink
      English
      71 year ago

      To be fair it has some valid use cases, take ruff for example.

      But pip/pypi does not have any proper security at all, and just blocking binary blobs wouldn’t make a difference when you can freely execute any python code during installation - Much like downloading an executable from any site online, you are expected to make sure you can trust whoever uploaded what you are downloading. You could say the same about other sites like GitHub too.

      • TXL
        link
        fedilink
        61 year ago

        There is a fair difference still between source available and binary blob. The blob has essentially no chance of ever being audited.