Bandersnatch

Latest version: v6.6.0

Safety actively analyzes 723976 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 11

1.10.0.1

- Brownbag release for re-upload. My train's Wifi broke while uploading
ending up with a partial file on PyPI. Can your train service do better
than mine?

1.10

This is release is massively supported by **dstufft** getting bandersnatch
back in sync with current packaging ecosystem changes. All clap your hands
now, please.

- Refactor the generation update code to avoid weird update paths
due to, well, my personal kink: 'over complication'.

- Generate the simple index ourselves instead of copying it from PyPI.

- Support files hosted on a separate domain.

- Implement PEP 503 normalization rules while also providing support
for legacy and very legacy clients.

1.9

- Fix a long standing, misunderstood bug: a non-deleting mirror would
delete packages if they were fully removed from PyPI. `Fixes 61`

1.8

- Don't require a X-PyPI-Last-Serial header on file downloads.
(Thanks to **dstufft**.)

- Increase our generation to help mirrors recover potential
setuptools corruption after some data bug on PyPI.

1.7

- Fixes 54 by reordering the simple index page and file fetching
parts. Thanks **dstufft** for the inspiration.

- Stop syncing serversig files and even start removing them.

1.6.1

- Create a new generation to enforce a full sync when upgrading.
This is required to get the canonical names for all packages.

Page 8 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.