Pypiserver

Latest version: v2.1.1

Safety actively analyzes 641171 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 8

1.2.3

Not secure
------------------

- MAINT: Remove broken downloads badge (thanks hugovk, 209)

- ENH: Improved Dockerfile and ``docker-compose`` example, docs for using
the docker image, automatic docker builds

1.2.2

Not secure
------------------

- FIX: update fallback URL to https://pypi.org/simple since pypi.python.org
has shut down

- FIX: updated tests to use ``Popen`` rather than ``pip.main()`` given its
removal in pip version 10.0

- DOC: scrubbed docs of links to pypi.python.org

- DEPRECATION: Drop support for Python 3.3 (thanks hugovk, 198)

1.2.1

Not secure
------------------

- FIX propagation of certain ``pypiserver`` settings via a ``paste.ini`` config
file (thanks luismsgomes, 156)

- FIX update default fallback URL to be https for compliance with PyPI
(thanks uSpike, 182)

- FIX resolved a regression preventing spinning up multiple pypiservers
via a paste config (thanks bertjwregeer, 173)

- FIX cmdline parsing of stray comparison consuming many flags (e.g. ``--help``),
and docs about ``auther``
- (thanks to sakurai-youhei, 162).

- Travis CI testing for Python 3.6 and pypy3 (183)

- Several documentation improvements (thanks tescalada, 166, 161, 172 and
axnsan12, 190)

1.2.0

Not secure
------------------
"Brexit": Normalize and stop legacy support.

- Less rigorous support for ``python-2 < 2.7`` and ``python-3 < 3.3``.
- Package normalizations and :pep:`503` updates:
- Package names are normalized: convert all characters to lower-case
and replace any of ``[-_.]`` with a dash(``'-'``).
- The simple index only lists normalized package names.
- Any request for a non-normalized package name is redirected to
the normalized name.
- URLs are redirected unless they end in ``'/'`` (expect packages themselves).
- (thanks to dpkp, 38, 139, 140)

- Added ``pip search`` support.
- (thanks to blade2005, 80, 114)

- FIX startup regressions for other WSGI-servers, introduced by previous ``v1.1.10``.
- (thanks to virtuald, Oneplus, michaelkuty, harcher81, 8u1a,
117, 122, 124/127/128)

- FIX over-writing of packages even when without ``--overwrite`` flag.
- (thanks to blade2005, 113)

- Fixes for *paste*, *gunicorn* and other *WSGI* servers.
- (thanks to corywright, virtuald, montefra, 112, 118, 119)

- Updates and fixes needed due to changes in dependent libraries.
- (thanks dpkp, 120/121, 129, 141/142)

- Add cache for speeding up GPG signatures.
- sthanks to virtuald, 116)

- Other minor fixes and improvements.
- (thanks to bibby, Oneplus, 8u1a, 129, 131)

- TravisCI-test against *python-3.5*.
- (107, 108, 110)

- docs:

- Provide samples for *Automated Startup* (``systemd`` & ``hypervisor``).
(thanks to ssbarnea, 137, 146)

- Add usage instructions for related project ``pypi-uploader``.
(thanks to ssbarnea & bibby, 147)

- doc: Provide sample-code to authenticate using ``/etc/passwds`` file
via *pam* modules in Unix.
- (thanks to blade2005, 149, 151-153)

- Improved API usage instructions.
- Detailed changes recorded in `Github's milestone 1.2.0
<https://github.com/pypiserver/pypiserver/milestones/M1.2.0>`_.

1.1.10

Not secure
-------------------
Serve 1000s of packages, PGP-Sigs, skip versions starting with 'v'.

+ 101: Speed-up server by (optionally) using the `watchdog` package
to cache results, serve packages directly from proxying-server (*Apache* ,
*nginx*), and pre-compile regexes (thanks virtuald).
- 106: Support uploading PGP-signatures (thanks mplanchard).
- Package-versions parsing modifications:

- 104: Stopped parsing invalid package-versions prefixed with `v`; they are
invalid according to :pep-reference:`0440` (thanks virtuald &
stevejefferiesIDBS).
- Support versions with epochs separated by `!` like `package-1!1.1.0`.
- 102: FIX regression on uploading packages with `+` char in their version
caused by recent bottle-upgrade.
- 103: Minor doc fixes (thanks MichaelSchneeberger).

1.1.9

Not secure
------------------
"Ssss-elections" bug-fix & maintenance release.

- Upgrade bottle 1.11.6-->1.13-dev.

- Fixes `MAX_PARAM` limiting dependencies(82)

- Rework main startup and standalone:

- New standalone generation based on ZIPed wheel archive.
- Replace all sys.module mechanics with relative imports.
- Fix gevent monkeypatching (49).
- Simplify definition of config-options on startup.
- TODO: Move startup-options validations out of `main()` and
into `pypiserver.core`
package, to validate also start-up from API-clients.

- 53: Like PyPI, HREF-links now contain package's md5-hashes in their fragment.
Add `--hash_algo` cmd-line option to turn-off or specify other *hashlib*
message-digest algorithms (e.g. `sha256` is a safer choice, set it to `off`
to avoid any performance penalty if hosting a lot of packages).

- 97: Add `--auther` non cmd-line startup-option to allow for alternative
authentication methods (non HtPasswdFile-based one) to be defined by
API-clients (thanks Tythos).

- 91: Attempt to fix register http failures (thanks to Tythos and petri).

- Test actual clients (ie `pip`, `Twine`, `setuptools`).
- Test spurious `setuptools` failures.
- NOT FIXED! Still getting spurious failures.

- Various other fixes:

- 96: Fix program's requirement (i.e. add passlib as extra-requirement).
provide requirements files also for developers.
- logging: Send also bottle `_stderr` to logger; fix logger names.
- 95: Add missing loop-terminators in bottle-templates (thanks to bmflynn).

Page 4 of 8

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.