Matthew R. Becker
Matthew R. Becker
OK @jaimergp This is ready for one more look.
Comment from @schuylermartin45: move to better hash to avoid issues with hash-collision attacks Comment from @Callek: move to SHA256 as a compromise
i've pushed a huge update @jaimergp. comments welcome!
Looking more at the OCI spec and the working code from conda-OCI-mirror, we'll need to specify a few more things including - what we do with the top-level config -...
pre-commit.ci autofix
I was thinking on this more and I think we should not use the `m` prefix and instead disallow current repodata on OCI channels. My reasons are - Older conda...
Hmmm. Maybe the right thing is to distinguish between the abstract url given to conda versus the storage location on disk. We can specify that more clearly in the CEP.
Having people pin to a nightly build is kind of insane. I'd rather pin jax
Yes `load` and `dump` would do the trick for sure, but I am confused as to why those are needed in the first place. Maybe it goes back to this....
cc @conda-forge/core We'll need to go through this one carefully before merging.