Andrew Nesbitt

@brainwane thanks for getting in touch, at the moment we don't want to execute any arbitrary python code so parsing with a regex is the best way for us to...

We are using the pypi rest api in the main Libraries.io codebase over here: https://github.com/librariesio/libraries.io/blob/master/app/models/package_manager/pypi.rb but that doesn't help for this project which parses any setup.py, usually from applications rather...

@brainwane this library is also used for parsing dependency information from repositories that aren't pushed to pypi, including public and private github repositories, forks etc

@sschuberth Because build.gradle is just groovy code and running `gradle dependencies` would open up a whole host of security issues with our current infrastructure

The plan is to eventually use gradle property from within a VM to ensure it can't do anything worse than crash but getting that infrastructure setup will take time

👍 looks like https://github.com/TwP/inifile will do help with parsing the ini file format, one thing that you won't be able to do is load up other relative files whilst parsing...

@nodunayo you should add the "help wanted" label ;)

@nodunayo wikipedia-style history of edits might be a nice way to avoid requiring a login, recording the IP that made each change would allow you to block troublesome visitors from...

Slightly improved by https://github.com/nodunayo/speakerline/pull/23 

I was going to open an issue on [ipfs-desktop](https://github.com/ipfs-shipyard/ipfs-desktop) about the possibility of bundling a fork of npm with [ipfs support added via pacote](https://github.com/zkat/pacote/pull/173) that would enable some of these...