pipask 0.3.3

Safer python package installation with audit and consent before install

pipask: pip with consent

Installation

The recommended way to install pipask is with pipx so that pipask dependencies are isolated from the rest of your system:

pipx install pipask

Alternatively, you can install it using pip:

pip install pipask

Usage

1. Once installed, you can use pipask as a drop-in replacement for pip, e.g.,:

   pipask install 'requests>=2.0.0'
   

2. pipask will perform checks on the requested packages to be installed (i.e., it will not check transitive dependencies).
3. pipask will print a report with the results and prompt you whether to continue with the installation.
4. If you proceed, pipask will hand over the actual installation to pip.

To run checks without installing, you can use the --dry-run flag:

pipask install requests --dry-run

In order to use pipask as a drop-in replacement for pip, you can create an alias:

alias pip='pipask'

Development

See CONTRIBUTING.md for development guidance.