Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

index-url password is displayed on pip install.

See original GitHub issue

Pip version: 10.0.0
Python version: 2.7.14
Operating system: macOS

Description:

When index-url is set (with either --index-url or --extra-index-url) with user credentials, the password is displayed each time pip is used. This is clearly a security issue, before pip 10 this was displayed only in verbose mode. The password should always be masked.

What I’ve run:

pip install private-package

Issue Analytics

State:
Created 5 years ago
Reactions:16
Comments:6 (4 by maintainers)

Top GitHub Comments

2reactions

danieljacobs1commented, Apr 17, 2018

Also happens if you have index-url set in ~/.pip/pip.conf.

0reactions

lock[bot]commented, Jun 2, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

Top Results From Across the Web

Pip prompts for username + password despite extra index url ...

My username and password are just alphanumeric characters. I know that pip is able to access the private jFrog with the credentials since...

Authentication - pip documentation v22.3.1

This is done by providing the username (and optionally password) in the URL: ... pip install your-package --index-url https://pypi.company.com/.

Installing private Python packages · Gemfury Dev Center

Install packages via command-line ... We use --extra-index-url to allow pip to keep the original Index URL. This allows pip to implicitly install...

PyPI packages in the Package Registry - GitLab Docs

Install from the project level. To install the latest version of a package, use the following command: pip install --index-url ...

Installing Python requirements with an extra index url hangs ...

script: | pip install my_package pip install -r requirements.txt ... When we access the extra-index-url, we need to provide the username and password...