Erik Rose

buildout pulls it off: https://pypi.python.org/pypi/zc.buildout/1.5.2#installing-solely-from-a-download-cache. In the worst case, we can implement out own trivial requirement-to-tarball-name mapper.

Pip can do it, too: http://www.pip-installer.org/en/latest/cookbook.html#fast-local-installs But when you replace "pip" with "peep" in the second code snippet, this happens: ``` (smoo)[18:10:07 ~/Checkouts/peep]% peep install --no-index --find-links=/Users/erose/.pip/download -r /Users/erose/Checkouts/socorro/requirements/dev.txt Ignoring...

The other thing to consider is that the format of a pip download cache is not the same as what's expected by `--find-links`. `--download-cache` emits filenames like `https%3A%2F%2Fpypi.python.org%2Fpackages%2Fsource%2Fp%2Fpyelasticsearch%2Fpyelasticsearch-0.3.tar.gz`, while `--find-links`...

Where are the hex sha256 digests on PyPI? All I see is sha1 hashes, and I have to dig into the DOAP records to see them. If you're talking about...

Supporting the hex versions of sha256 hashes seems like a no-brainer to me; we can easily distinguish them based on length.

I can't believe I haven't mentioned the `peep hash` command. If you have the tarballs or wheels downloaded, that's what you run to get the wheel-formatted hashes of them; you...

Yay! It'll probably even increase performance, since we'll construct all those Schema instances once and then can validate against them 10,000 times without doing it again.

Another factor that could be considered in priorities is the order of keys in the dict, if it were an OrderedDict. I wonder how much of the rest of this...

I haven't thought it through exhaustively, but I want to elevate this to the level of "proposal" and see what you think, @keleshev. What if we removed literal dicts and...

Here's one more for you, Vladimir. What do you think? I'm rather enthused to do the mentioned refactoring as well, if you like.