[Python-ideas] Remote package/module imports through HTTP/S

Stephen J. Turnbull turnbull.stephen.fw at u.tsukuba.ac.jp
Wed Aug 23 22:13:53 EDT 2017


Chris Angelico writes:

 > If you're worried about the latter, don't use httpimport.

I guarantee you that in my (university) environment, if httpimport is
in the stdlib, its use will be rampant (and not just by students, but
by security-oblivious faculty).  I want to be able to walk up to a
student, say "may I?" and type "python -m httpimport" to determine if
that particular risky behavior is a worry.  Because *I'm* liable for
my students' PCs' behavior on the network.

Personally speaking, +1 on PyPI, -100 on stdlib.

Steve



More information about the Python-ideas mailing list