On Sun, Apr 17, 2016 at 8:27 AM, Dima Pasechnik <dimp...@gmail.com> wrote: > > > On Sunday, April 17, 2016 at 4:20:42 PM UTC+1, Dima Pasechnik wrote: >> >> >> >> On Sunday, April 17, 2016 at 4:15:12 PM UTC+1, William wrote: >>> >>> Dima: >>> > sorry, William, I don't see what you mean. >>> [...] >>> > 2) Putting data on your computer does not equal to installing crud on >>> > your >>> > computer, although people wearing tinfoil hats >>> > might disagree. >>> >>> They do disagree. And they are right. >> >> >> Why would they trust somebody putting hundreds of megabytes of 3rd party >> sources into Sage? Is it because we mislead them into thinking that we did >> some kind of source review?
You are right. However, such a tinfoil hat person would rather (themselves) inspect the packages that are just needed for Sage, rather than all of Pypi. > they actually would be less paranoid about having the 3rd party from its > original source rather than re-packaged, and this is precisely a part of my > proposal. And, by the way, > http://doc.devpi.net/latest/quickstart-pypimirror.html > is precisely a way to create a mini-repo containing only things needed by > Sage. Perfect -- I agree that is the right approach. -- William (http://wstein.org) -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To post to this group, send email to sage-devel@googlegroups.com. Visit this group at https://groups.google.com/group/sage-devel. For more options, visit https://groups.google.com/d/optout.
