pip
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
1recommend
5warn against
Nov 29, 2025first mention
Oct 22, 2026latest mention
Why people recommend it
“a new hot package manager comes around that basically does nothing better then pip”
Caveats and dissent
“Seems like pip doesn't have a way to exclude packages”
“they will happily execute the malware payloads on install”
Show 2 more
“(They're usually pip's fault. Pip is bad.)”
Often compared with
Threads where it came up
- CVE-2026-111943: Compromised Intermediate Certificate Authority 1 mention
- Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor 1 mention
- uv: Deduplicate all files in the wheel cache 1 mention
- Microsoft's open source tools were hacked to steal passwords of AI developers 1 mention
- Why Aren't We Uv Yet? 1 mention
- Astral to Join OpenAI 1 mention
Data: pip.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 9
“Yes, I use all these things”
“Seems like pip doesn't have a way to exclude packages”
“the worst number they ever give for pip is 7s”
“they will happily execute the malware payloads on install”
“a new hot package manager comes around that basically does nothing better then pip”
“constant issues with pip/virtualenvwrappers”
“What I don't like about uv (or pip or many other package managers)”
“(They're usually pip's fault. Pip is bad.)”
“That environment and pip stuff is terrible.”