You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> pip install codecov==2.1.12
Collecting codecov==2.1.12
ERROR: Could not find a version that satisfies the requirement codecov==2.1.12 (from versions: none)
ERROR: No matching distribution found for codecov==2.1.12
Has this been intentionally removed and when do we expect it to be available again?
Thanks!
DB
Reacted by Vlad Kochetov and Seppo Enarvi
Reacted by Hugo van Kemenade, Kevin, Menelaos Kotoglou, Janis Klaise, Moses Odhiambo, Paul Blankley, Ashish Patil and brotherH
Having re-read the deprecation notices, there appears to be no statement that the package would be deleted from PyPI, or of a date on which this would occur.
The result is that all packages on PyPI which depend on codecov are not installable. A less disruptive move would have been to push another, essentially empty version of the package, and then yank the older, insecure versions. This would have allowed existing packages to be installed, albeit with perhaps degraded behaviour or loss of functionality.
Reacted by Anton Lydike, vfdev, Janis Klaise, Ashley Scillitoe, Dan Baron, Guilherme Caminha and Ashish Patil
Having re-read the deprecation notices, there appears to be no statement that the package would be deleted from PyPI, or of a date on which this would occur.
The result is that all packages on PyPI which depend on codecov are not installable. A less disruptive move would have been to push another, essentially empty version of the package, and then yank the older, insecure versions. This would have allowed existing packages to be installed, albeit with perhaps degraded behaviour or loss of functionality.
Happy to be corrected, but I believe deleting the PyPi package is also a major security issue as I think anyone can now snap up codecov with a malicious package that would be installed on many systems currently depending on codecov.
Sorry all, I didn't see this issue until now. To resolve this, we did push back up 2.1.13 as a final legacy package. We highly recommend moving away from the python package to our currently uploader or the CLI.
We put up a message about this pull here, and I'm extremely sorry for the disruption and headaches this might have caused.
Activity
Remove deleted codecov pacakage: codecov/python-standard#31
khaeru commentedon Apr 13, 2023
Having re-read the deprecation notices, there appears to be no statement that the package would be deleted from PyPI, or of a date on which this would occur.
The result is that all packages on PyPI which depend on
codecovare not installable. A less disruptive move would have been to push another, essentially empty version of the package, and then yank the older, insecure versions. This would have allowed existing packages to be installed, albeit with perhaps degraded behaviour or loss of functionality.jklaise commentedon Apr 13, 2023
Happy to be corrected, but I believe deleting the PyPi package is also a major security issue as I think anyone can now snap up
codecovwith a malicious package that would be installed on many systems currently depending oncodecov.Edit: according to this, it should at least be impossible to register a new package under
codecovhttps://community.codecov.com/t/codecov-yanked-from-pypi-all-versions/4259Update test-requirements.txt
Update test-requirements.txt (#776)
Update codeconv requirement to version 2.1.13
thomasrockhu-codecov commentedon Aug 5, 2023
Sorry all, I didn't see this issue until now. To resolve this, we did push back up 2.1.13 as a final legacy package. We highly recommend moving away from the python package to our currently uploader or the CLI.
We put up a message about this pull here, and I'm extremely sorry for the disruption and headaches this might have caused.
fix: Removing codecov as it is no longer supported