PEP 755: Implicit namespace policy for PyPI

[Liz (Elizabeth King)]

@steve.dower

I like this. pip install microsoft::azure-loganalytics or microsoft@azure-loganalytics might be hijacking the syntax from something potentially better, but interpreting it as “package must have this user as owner/maintainer” would likely be better than the whole namespace.

I almost like this. I think it needs to be microsoft@pypi.org::azure-loganalytics the entire prefix argument falls apart in the multi-index situation (pip’s --extra-index), this doesn’t have to.

@oscarbenjamin

Maybe it could be more like the way that ssh asks if you trust the first time you connect to a new host but then stores it in known_hosts sort of like:

From where I’m sitting, this is the best handling I’ve seen suggested, it handles all of the issues and provides stronger information to users without needing any new administrative policies. I’d be happy to help contribute time and code to make this happen.