blog

commit: 86279c6ecd376d7a03db15727a57f124ac08673e
parent 86f7c5832dc94d14a71fa23e9afb75809856df1e
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Tue, 18 Apr 2023 05:19:19 +0200

bookmarks: https://github.com/pypa/pip/issues/7325 https://github.com/pypa/pip/issues/1884

Diffstat:
M
bookmarks.html
4
+++-
M
bookmarks.xbel
3
+++

2 files changed, 6 insertions(+), 1 deletion(-)
diff --git a/bookmarks.html b/bookmarks.html
@@ -36,7 +36,7 @@
 		<h1>Bookmarks</h1>
 		<p>
 			This is generated from <a href="/bookmarks.xbel">/bookmarks.xbel</a>, a standard-compliant <a href="http://pyxml.sourceforge.net/topics/xbel/">XBEL</a> file, which you can process and import in some browsers. (XSLT file used for it: <a href="/bookmarks.xsl">/bookmarks.xsl</a>).<br/>
-			It currently contains 234 links.
+			It currently contains 236 links.
 		</p>
 		<section id="Autism">
 			<h2>Autism <a href="#Autism">§</a></h2>
@@ -101,6 +101,8 @@
 				<dt><a rel="external noreferrer" href="https://tails.boum.org/contribute/design/kernel_hardening/">Tails kernel hardening</a></dt>
 				<dt><a rel="external noreferrer" href="https://tails.boum.org/contribute/design">Tails Design</a></dt>
 				<dt><a rel="external noreferrer" href="https://www.viva64.com/en/b/0558/">Why it is important to check what the malloc function returned</a></dt>
+				<dt><a rel="external noreferrer" href="https://github.com/pypa/pip/issues/7325">Disallow execution of setup.py when "pip download --no-deps someproject"</a></dt>
+				<dt><a rel="external noreferrer" href="https://github.com/pypa/pip/issues/1884">Avoid generating metadata in `pip download --no-deps ...`</a></dt>
 			</dl>
 		</section>
 		<section id="onion">
diff --git a/bookmarks.xbel b/bookmarks.xbel
@@ -76,6 +76,9 @@
 		<bookmark href="https://tails.boum.org/contribute/design/kernel_hardening/"><title>Tails kernel hardening</title></bookmark>
 		<bookmark href="https://tails.boum.org/contribute/design"><title>Tails Design</title></bookmark>
 		<bookmark href="https://www.viva64.com/en/b/0558/"><title>Why it is important to check what the malloc function returned</title></bookmark>
+		<!-- or rather insecurity… -->
+		<bookmark href="https://github.com/pypa/pip/issues/7325"><title>Disallow execution of setup.py when "pip download --no-deps someproject"</title></bookmark>
+		<bookmark href="https://github.com/pypa/pip/issues/1884"><title>Avoid generating metadata in `pip download --no-deps ...`</title></bookmark>
 	</folder>
 
 	<folder>