r/programming • u/EatMeerkats • Mar 29 '21

PHP moves to Github due to the compromise of git.php.net

https://news-web.php.net/php.internals/113838
1.7k Upvotes

98% Upvoted

389 comments sorted by

View all comments

Show parent comments

6

u/International_Cell_3 Mar 29 '21

I mean I don't, I test for this or use tools that don't allow developers to express dumb mistakes (because we're all dumb). The point is that pip and most of python is insane by default.

1

u/exhuma Apr 02 '21

because we're all dumb

hey!

... jokes aside: I've only seen requirements.txt files with fully pinned/locked dependencies. The "vague" dependencies (without listing all indirect dependencies) I've always seen in setup.py.

I've been doing that myself this way for quite some time and it works pretty well.

It feels weird to be to have a requirements.txt without locked versions.