Confirmed users
1,158
edits
WebDev/Deployments: Difference between revisions
Jump to navigation
Jump to search
→Using requirements
No edit summary |
|||
| Line 17: | Line 17: | ||
Use of <code>>=</code> or not pinning to a version is not recommended. This can mean untrusted versions of packages being installed. | Use of <code>>=</code> or not pinning to a version is not recommended. This can mean untrusted versions of packages being installed. | ||
When | When running pip use the flag: <code>--no-deps</code>. This ensures that packages will not pull in more untrusted versions of packages. It also means that the requirements files are a definitive source of packages used. This allows security faster audits of who is using what package. | ||
==Internal package server== | ==Internal package server== | ||