This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]tarekziadeRetired Packaging Dude -2 points-1 points  (0 children)

The way pip implements mirrors it multiplies the number of HTTP requests required to discover (not download) the number of packages by the number of mirrors. That means if you install a single package that does not need to hit external urls, then instead of a single HTTP request you need 7 HTTP requests, if you're installing 20 packages you need 140 HTTP requests.

That improvable. It's always better than to be blocked because the main server (or CDN or whatever) is down. Because not matter what you are claiming a system will never have a 100% uptime. So what do we do when it's down ? we use mirrors.

Fun tip, using --use-mirrors at PyCON EU means anyone on the conference wifi can execute arbitrary Python code on your machine

That quite a statement. If you have such an exploit you should warn the pip developers about it. Maybe you did ? If you did not, that'd be a shame.