Re: [Distutils] Migrating Hashes from MD5 to SHA256

2013-07-27 Thread Antoine Pitrou
Donald Stufft stufft.io> writes: > > I don't think any claim can be made about the relative use between the > two tools by looking at the download counts because their typical use is > generally very different. I'll try to phrase it more clearly then: I am not *comparing* their relative use. I a

Re: [Distutils] Migrating Hashes from MD5 to SHA256

2013-07-27 Thread Donald Stufft
On Jul 27, 2013, at 1:25 PM, Antoine Pitrou wrote: > If your assertion were true ("Most people will use the setuptools > bundled with virtualenv"), then the setuptools download numbers > would be minuscule. The actual numbers show it to be untrue. > Whether or not they are directly comparable is

Re: [Distutils] Migrating Hashes from MD5 to SHA256

2013-07-27 Thread Antoine Pitrou
Donald Stufft stufft.io> writes: > On Jul 27, 2013, at 7:12 AM, Antoine Pitrou pitrou.net> wrote: > > > Donald Stufft stufft.io> writes: > >> Most people will use the setuptools bundled with virtualenv which has > >> only ever bundled 0.6 or 0.9. > > > > Why do you think that? According to PyP

Re: [Distutils] Shebang lines, /usr/bin/python, and PEP394

2013-07-27 Thread Alex Burke
On 26 July 2013 13:58, Nick Coghlan wrote: > On 26 July 2013 21:31, Alex Burke wrote: >> On 26 July 2013 00:37, Philip Jenvey wrote: >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA512 >>> >>> >>> On Jul 25, 2013, at 9:04 AM, Toshio Kuratomi wrote: >>> Over on python-dev we're talking a

Re: [Distutils] Migrating Hashes from MD5 to SHA256

2013-07-27 Thread Donald Stufft
On Jul 27, 2013, at 7:12 AM, Antoine Pitrou wrote: > Donald Stufft stufft.io> writes: >> Most people will use the setuptools bundled with virtualenv which has >> only ever bundled 0.6 or 0.9. > > Why do you think that? According to PyPI: > - virtualenv: > 4664 downloads in the last day > 34512

Re: [Distutils] Migrating Hashes from MD5 to SHA256

2013-07-27 Thread Antoine Pitrou
Donald Stufft stufft.io> writes: > Most people will use the setuptools bundled with virtualenv which has > only ever bundled 0.6 or 0.9. Why do you think that? According to PyPI: - virtualenv: 4664 downloads in the last day 34512 downloads in the last week - setuptools: 23901 downloads in the las

[Distutils] Ubuntu says Virtualenv, Pip and Setuptools "untrusted"

2013-07-27 Thread Erik Bernoth
Hi everybody, did you know that Ubuntu 13.10 (or maybe Debian?) declares those packages as untrusted and asks you twice, if you really want to install them? Is there anything that can be done about that? Best Erik ___ Distutils-SIG maillist - Distutil