Donald Stufft

Well it's not a problem with a invalid cache entry, this is just the response has a `CacheControl: no-cache` (along with an `Expires` header) and CacheControl is ignoring the directive...

I attempted to implement this, but I ran into an issue where it doesn't appear to actually be locking so I punted on it for the time being. However handling...

Ok, I've got fasteners to work now, however the backwards compatibility questions still apply. I went ahead and pushed my branch to #114 but it's unlikely I'm going to spend...

Python's packaging tools in particular have fallen victim to [Hyrum's Law](https://www.hyrumslaw.com/), and this is really just another case of it. It is unlikely that the resolver lands without breaking some...

We could attempt to make the default more intelligent (or maybe just more magical). Basically have the implicit default be that if a wheel is found at all for some...

The logic isn’t hard and has nothing to do with dependency information. Current logic is roughly: 1. Fetch a list of links from the index for project X. 2. Filter...

It's a backwards incompatible change, so regardless it's going to break *someone*. The goal behind my proposal is to limit the blast radius, so that we limit the breakage, either...

I wonder if we can leverage PyPI in some way to encourage wheels, or to at least surface better information to highlight which projects don't ship wheels? This might be...

When we implement this, we should take care to prevent path traversal bugs like mentioned in https://github.com/pypa/pip/issues/731.

I think the issue is still valid for ``pip download --no-deps``?