https://live.paloaltonetworks.com/t5/automation-api-discussions/pandevice-panpython-checksum/m-p/326035#M2297 <P>If you are suspicious of the pandevice currently hosted on pypi, you can always just download pandevice straight from github.&nbsp; When a tag is referred at and a release is created, that snapshot creates a tarball that you can see in the Releases tab in github.&nbsp; Both the current and any previous release.</P> <P>&nbsp;</P> <P>Alternatively you can pip download the package, clone the repo, then diff both directories.</P> <P>&nbsp;</P> <P>I think I remember something about github and checksums at the last github universe late last year, tho, so it's possible they're going to be doing something about this as well..?</P> Mon, 04 May 2020 22:55:45 GMT gfreeman 2020-05-04T22:55:45Z https://live.paloaltonetworks.com/t5/automation-api-discussions/pandevice-panpython-checksum/m-p/325835#M2295 <P>Why are not this hosted at palo altos own site? Yes im abit paranoid but i have never understod why this kind of packages are hosted at pip?&nbsp; At least if they are hosted at external site. Would it not be possible to implement something like this&nbsp;<A href="https://media.djangoproject.com/pgp/Django-2.2.12.checksum.txt" target="_blank">https://media.djangoproject.com/pgp/Django-2.2.12.checksum.txt</A> ?</P> Sun, 03 May 2020 12:17:58 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/pandevice-panpython-checksum/m-p/325835#M2295 hbalzac 2020-05-03T12:17:58Z https://live.paloaltonetworks.com/t5/automation-api-discussions/pandevice-panpython-checksum/m-p/326035#M2297 <P>If you are suspicious of the pandevice currently hosted on pypi, you can always just download pandevice straight from github.&nbsp; When a tag is referred at and a release is created, that snapshot creates a tarball that you can see in the Releases tab in github.&nbsp; Both the current and any previous release.</P> <P>&nbsp;</P> <P>Alternatively you can pip download the package, clone the repo, then diff both directories.</P> <P>&nbsp;</P> <P>I think I remember something about github and checksums at the last github universe late last year, tho, so it's possible they're going to be doing something about this as well..?</P> Mon, 04 May 2020 22:55:45 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/pandevice-panpython-checksum/m-p/326035#M2297 gfreeman 2020-05-04T22:55:45Z