[Catalog-sig] Proposal: close the PyPI file-replacement loophole

[Richard Jones]

Summarising the responses:

8 at +1
3 at -1

Several posts with no stated positions.

Given it appears to be controversial, I'm just going to drop it. I
just don't need the aggravation. PyPI can retain its ability to serve
up potentially confusing file content.


    Richard