Latest Threat Research:Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise.Details →
Socket
Book a DemoInstallSign in
Socket
Book a DemoInstallSign in

devpi-common

Package Overview
Dependencies
Maintainers
1
Versions
36
Alerts
File Explorer

Advanced tools

License
Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

devpi-common

Utilities jointly used by devpi-server, devpi-client and others.

pipPyPI
Version
4.0.2
Maintainers
1

This package contains utility functions used by devpi-server and devpi-client.

See http://doc.devpi.net for more information.

========= Changelog

.. towncrier release notes start

4.1.1 (2026-02-09)

Bug Fixes

  • Implement missing hash for Version and CompareMixin classes.

  • Fix py.typed to properly export type information.

4.1.0 (2025-05-18)

Other Changes

  • Use __slots__ to reduce memory usage of Version.

4.0.4 (2024-04-20)

Bug Fixes

  • Use filter='data' for extractall call on supported Python versions as additional guard to the existing out of path checks against malicious tar files.

  • Remove custom LegacyVersion and use packaging-legacy instead, which is also used by pypi.org.

4.0.3 (2023-11-23)

Bug Fixes

  • Add is_prerelease and other methods to LegacyVersion to fix get_sorted_versions with stable=True and some other cases.

4.0.2 (2023-10-15)

Bug Fixes

  • Do not mark commands with returncode None from tox 4.x as failed.

FAQs

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach

Security News

AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach

An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

By Sarah Gooding  -  Feb 14, 2026
Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds

Research

/

Security News

Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds

Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

By Kirill Boychenko  -  Feb 13, 2026