Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
PyPi version confusion
See original GitHub issueI use Python3.6 on Windows 10. When I do ´pip install readchar` it collectes version ´0.7´.
But PyPi tells me that version 0.0.8 (not a typo!!) is the lates.
So what is going on here?
Issue Analytics
- State:
- Created 6 years ago
- Comments:12 (1 by maintainers)
Top Results From Across the Web
confuse - PyPI
Confuse is a configuration library for Python that uses YAML. It takes care of defaults, overrides, type checking, command-line integration, ...
Read more >PyPI Flooded With 1,275 Dependency Confusion Packages
Popular Python open source software repository, PyPI has been flooded with over 1200 dependency confusion packages by the same actor.
Read more >Dependency confusion attack mounted via PyPi repo exposes ...
All the PyPi attacker had to do was upload a library with a very high version number. “This problem has to be solved...
Read more >Addressing dependency version confusion exploit chain
The org places the library in a requirements file with a relaxed or no version spec, along with a mixture of modules available...
Read more >Avoiding dependency confusion in python - pip - Stack Overflow
Checks whether library exists on the public package index (PyPI); Installs whichever version is found. If the package exists on both, it ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
As versions 2.0.0 and then 2.0.1 have been released for quite some time, I think the version confusion has ended.
@magmax Thanks for adding us! Hope you also have the chance to add mbdev as a PyPI maintainer per these instructions: https://github.com/magmax/python-readchar/issues/27#issuecomment-365515135 . Publishing a new release is the most pressing issue now.