[ihnorton]

This breaks any python package versions that install dependencies via ‘pip install’ from a pinned git+git URL. (For example: google-cloud-cpp 1.23, which was released about a year ago).

[terrorobe]

Then the brownout had its desired effect.

Using unauthenticated transports for code is borderline malicious.