Hacker News Reader

Wait, what? I'm so confused. How is this security theatre and how is it better to have curated packages than an open ecosystem when it comes to "hostility"?

It seems to me like your POV is that of an user. They're mandating that for publishers.

how do checksums help prevent people uploading new packages?

Are you going to pay for people to manually curate the entire python ecosystem?

> Homebrew and BSD solve this with simple checksums and curated packages.

This is not what 2FA solve

> Someone should offer Homebrew for Python

Ah yes the package manager that updates several unrelated packages every time you install anything and doesn't allow rollbacks right?

You're not even wrong

> Ah yes the package manager that updates several unrelated packages every time you install anything

It's really annoying that it's doing it by default. To avoid this, add this to your `.bash_profile` / `.zshrc` / etc:

export HOMEBREW_NO_AUTO_UPDATE=1

Thanks for this

Voila