pyg-lib is not claimed on PyPi

[coreyjadams]

🐛 Describe the bug

Hi Pyg-lib team,

I noticed that PyG-Library is on PyPi: https://pypi.org/project/pyg-library/ and while it's a little out of date, the install instructions actually reference pyg-lib which is not registered on PyPi. For a project I am on that uses PyG, our security has noticed and complained that this is a sizable security vulnerability.

Could I request claiming pyg-lib on Pypi even if you are not actively publishing there, to prevent supply-side attacks?

Thanks!
@coreyjadams

Environment

• pyg-lib version:
• PyTorch version:
• OS:
• Python version:
• CUDA/cuDNN version:
• How you installed PyTorch and pyg-lib (conda, pip, source):
• Any other relevant information:

[puririshi98]

i would recommend using the nvidia pyg container which is constantly built on the latest nvidia stack: https://catalog.ngc.nvidia.com/orgs/nvidia/-/containers/pyg/.

[coreyjadams]

Thanks! For what it's worth, this is less about access to the latest build and more that the library is leaving users open to vulnerabilities.