Comments (2)
Thanks! As for the pinning, sure pinning is best practice but I believe one goal of a library maintainer should be to ensure that pip install lib==1.1.1
continues to work as long as the dependencies it uses correctly follow semver. It's a useful property and one that many users expect to work. Breaking this goal always leads to user pain and actually makes it harder for users to pin (and later upgrade) their own dependencies. When pip install lib==1.1.1
fetches incompatible dependencies the user is forced to wade through obscure errors, read changelogs, etc. just to find the right version to pin to.
from itsdangerous.
I am not optimistic that this would have changed anything. The issue is not semver, its that people aren't pinning their dependencies. That said, I've had a draft for the website from well before this, but just need to finish it. Since it's not specific to itsdangerous, I'm going to close this issue.
from itsdangerous.
Related Issues (20)
- Add Python 3.9 to CI HOT 1
- Wrong timestamp during migrating from v0.28 -> v1.1.0 HOT 2
- Add encrypted storage HOT 1
- Unexpected default salt in 2.0.0 where I used to pass None as a salt in 1.1.0 HOT 1
- Work with Flask 1.1.2 and upgrade itsdangerous to 2.0.0 won't parse bytes HOT 2
- pgAdmin4 broken using itsdangerous > 2.0.0a1 HOT 1
- base64encode should be injected as a dependency in Signer class HOT 1
- Outdated pip link HOT 2
- Different lenght of tokens from 0.26 to 2.0.1? HOT 4
- ImportError: cannot import name 'json' from 'itsdangerous' HOT 5
- Incompatibility with Flask 1.1.1 (cannot import name 'json' from 'itsdangerous') HOT 4
- ImportError: cannot import name 'json' from 'itsdangerous' HOT 2
- Migration guide for deprecated JSONWebSignatureSerializer HOT 2
- ImportError: cannot import name 'TimedJSONWebSignatureSerializer' from 'itsdangerous' HOT 2
- catch overflow error on 32bit platforms
- Support async
- Issue with importing TimedJSONWebSignatureSerializer when updating db with Flask. HOT 1
- TimedJSONWebSignatureSerializer HOT 1
- Consider making `Serializer` generic in `t.AnyStr` for type checking to avoid overly ambiguous return types HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from itsdangerous.