1. 22 Sep, 2017 3 commits
  2. 21 Sep, 2017 1 commit
    • David Beitey's avatar
      Use HTTPS for PyPI index · fac9979f
      David Beitey authored
      PyPI redirects HTTP to HTTPS by default now so using HTTPS directly
      avoids the potential for that redirect being modified in flight,
      helping prevent MITM attacks.
      
      Fixes #114.
      fac9979f
  3. 17 Aug, 2017 2 commits
  4. 16 Aug, 2017 1 commit
  5. 15 Aug, 2017 2 commits
  6. 08 Aug, 2017 2 commits
  7. 27 Jul, 2017 1 commit
  8. 20 Jun, 2017 4 commits
  9. 14 Jun, 2017 1 commit
  10. 25 May, 2017 1 commit
    • Jason Madden's avatar
      Sort distributions when computing a signature. (#393) · 47bbc3c4
      Jason Madden authored
      This fixes #392.
      
      Previously under Python 3 (probably prior to 3.6, when dicts became
      ordered by default) or under Python 2 with ``-R`` or
      ``PYTHONHASHSEED=random`` the results were undefined because dict
      iteration order is undefined.
      
      The value being sorted is complex and defined by
      pkg_resources.Distribution:
      
      ```    @property
          def hashcmp(self):
              return (
                  self.parsed_version,
                  self.precedence,
                  self.key,
                  _remove_md5_fragment(self.location),
                  self.py_version or '',
                  self.platform or '',
              )
      
          def __hash__(self):
              return hash(self.hashcmp)
      
          def __lt__(self, other):
              return self.hashcmp < other.hashcmp
      ...
      ```
      47bbc3c4
  11. 30 Mar, 2017 5 commits
  12. 28 Mar, 2017 1 commit
  13. 07 Mar, 2017 10 commits
  14. 06 Mar, 2017 6 commits