Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 832403

Summary: dev-python/pip: unbundle dependencies
Product: Gentoo Linux Reporter: Michał Górny <mgorny>
Component: Current packagesAssignee: Python Gentoo Team <python>
Status: CONFIRMED ---    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-01-31 00:28:33 UTC
Since pip is in no way critical to Gentoo, we should be able to easily unvendor all the deps.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-01-31 09:01:38 UTC
This is a proper nightmare.  Out of bundled dependencies, the following seem to be direct dependencies of pip:

cachecontrol
certifi
colorama
distlib
distro
html5lib
packaging
pep517
pkg_resources
platformdirs
progress
requests
resolvelib
rich
six
tenacity
tomli
urllib3


Out of these, we need to package cachecontrol again.