[cx-oracle-users] cx-oracle 5.1.2 "externalized" from PyPI?

[Shai B. <sh...@pl...>]

It appears you cannot now install cx-oracle via pip without
allowing "insecure and unverifiable" files:

$ pip install cx_Oracle 
Downloading/unpacking cx-Oracle
  Could not find any downloads that satisfy the requirement cx-Oracle
  Some externally hosted files were ignored (use --allow-external cx-Oracle to allow).
Cleaning up...
No distributions at all found for cx-Oracle
Storing debug log for failure in /home/heal/.pip/pip.log   

$ pip install cx_Oracle --allow-external cx_Oracle 
Downloading/unpacking cx-Oracle
  Could not find any downloads that satisfy the requirement cx-Oracle
  Some insecure and unverifiable files were ignored (use --allow-unverified cx-Oracle to allow).
Cleaning up...
No distributions at all found for cx-Oracle
Storing debug log for failure in /home/heal/.pip/pip.log 

$ pip install cx_Oracle --allow-external cx_Oracle --allow-unverified cx-Oracle
Downloading/unpacking cx-Oracle
  cx-Oracle is potentially insecure and unverifiable.
  Downloading cx_Oracle-5.1.2.tar.gz (208kB): 208kB downloaded
  Running setup.py (path:/home/heal/VirtEnvs/tester/build/cx-Oracle/setup.py) egg_info for package cx-Oracle
  ...

That "cx-Oracle is potentially insecure and unverifiable." line, as well
as the previous hints to add the flags, are orange. Messages about
cx-Oracle not being found are red. For users who are asked to install
dependencies of a project/product, this all seems very scary.

Anthony, is this your doing? Assuming not, can you do anything about it?

Thanks,
	Shai.