You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Go to `Settings` of your repository, and enable Github Page
83
76
* Customize `index.html` and `pkg_template.html` to your liking
84
77
* You're ready to go ! Visit `<user>.github.io/<repo_name>` to see your PyPi index
85
78
@@ -112,10 +105,10 @@ If you wonder more specifically about supply chain attacks, check [the section a
112
105
113
106
#### Q. What happen behind the scenes ?
114
107
115
-
When running `pip install <package_name> --extra-index-url https://astariul.github.io/github-hosted-pypi/`, the following happen :
108
+
When running `pip install <package_name> --extra-index-url https://pypi.korewa.li/`, the following happen :
116
109
117
110
1.`pip` will look at `https://pypi.org/`, the default, public index, trying to find a package with the specified name.
118
-
2. If it can't find, it will look at `https://astariul.github.io/github-hosted-pypi/`.
111
+
2. If it can't find, it will look at `https://pypi.korewa.li/`.
119
112
3. If the package is found there, the link of the package is returned to `pip` (`git+<repo_link>@<tag>`).
120
113
4. From this link, `pip` understand it's a Github repository and will clone the repository (at the specific tag) locally.
121
114
5. From the cloned repository, `pip` install the package.
@@ -138,7 +131,7 @@ To do this :
138
131
You can just specify a different name for your indexed package. Just give it a different name in the form when registering it.
139
132
140
133
For example if you have a private package named `tensorflow`, when you register it in this index, you can name it `my_cool_tensorflow`, so there is no name-collision with the public package `tensorflow`.
141
-
Then you can install it with `pip install my_cool_tensorflow --extra-index-url https://astariul.github.io/github-hosted-pypi/`.
134
+
Then you can install it with `pip install my_cool_tensorflow --extra-index-url https://pypi.korewa.li/`.
142
135
143
136
Then from `python`, you can just do :
144
137
```python
@@ -174,7 +167,7 @@ Let's name this file `gh_auth.txt`.
174
167
# syntax=docker/dockerfile:experimental
175
168
FROM python:3
176
169
177
-
RUN --mount=type=secret,id=gh_auth,dst=/root/.netrc pip install <package_name> --extra-index-url https://astariul.github.io/github-hosted-pypi/
170
+
RUN --mount=type=secret,id=gh_auth,dst=/root/.netrc pip install <package_name> --extra-index-url https://pypi.korewa.li/
178
171
```
179
172
180
173
**Step 3** : Build your Docker image, specifying the location of the secret created in step 1 :
@@ -200,7 +193,7 @@ While this repository makes it very convenient to have your own PyPi index, be a
200
193
201
194
That's why we included automated checks into this private PyPi index. Whenever you access the page of your package, PyPi API is called, and if a package with the same name and a higher version is found, the install command is replaced with a warning.
202
195
203
-
You can see a demo of such warning at [https://astariul.github.io/github-hosted-pypi/transformers/](https://astariul.github.io/github-hosted-pypi/transformers/).
196
+
You can see a demo of such warning at [https://pypi.korewa.li/transformers/](https://pypi.korewa.li/transformers/).
204
197
205
198
If you see this warning, don't install the package ! Instead, change the name of your package or upgrade the version above its public counterpart.
0 commit comments