conda-forge.github.io icon indicating copy to clipboard operation
conda-forge.github.io copied to clipboard

Since conda doesn't treat hyphen and underscore equivalently (like pypi), couldn't any feedstock maintainer backdoor a variant of a popular package?

Open timkpaine opened this issue 3 years ago • 1 comments

Your question:

I've been adding hyphen/underscore variants of packages recently and had a concern. Let's say I maintain a feedstock, and I know there's a popular package "scikit-learn". On pypi, "scikit-learn" and "scikit_learn" would be the same but on conda they are not. I notice that "scikit_learn" (with an underscore) doesn't exist. Could I add it as an output to my unrelated feedstock? E.g. without having to go through staged-recipes (since my feedstock already exists) or involving any admin.

apologies if this has been asked or discussed before or if it is a dumb question 😄

timkpaine avatar Jul 13 '22 03:07 timkpaine

We have a linter check for _ vs - in some cases. We may want to make this stronger.

beckermr avatar Jul 13 '22 15:07 beckermr