This package contains utility functions used by devpi-server and devpi-client.
See http://doc.devpi.net for more information.
.. towncrier release notes start
Use filter='data' for extractall call on supported Python versions as additional guard to the existing out of path checks against malicious tar files.
Remove custom LegacyVersion and use packaging-legacy instead, which is also used by pypi.org.
is_prerelease and other methods to LegacyVersion to fix get_sorted_versions with stable=True and some other cases.None from tox 4.x as failed.Removed HTMLPage class originally vendored from pip.
Dropped support for Python <= 3.6.
Add chdir context handler in devpi_common.contextlib. Starting with Python 3.11 the original from contextlib is used.
Hide username from URL representation.
Added stripped down TerminalWriter from py library which only supports coloring.
FAQs
Utilities jointly used by devpi-server, devpi-client and others.
We found that devpi-common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
TypeScript is porting its compiler to Go, delivering 10x faster builds, lower memory usage, and improved editor performance for a smoother developer experience.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.