Unnützes Geschwafel

Python’s main package management tool, pip, is a bit of a blabbermouth. Have a look at its outgoing User-Agent header:

User-Agent: pip/9.0.1 {
    "cpu":"AMD64",
    "implementation":{
        "name":"CPython",
        "version":"3.6.2"
    },
    "installer":{
        "name":"pip",
        "version":"9.0.1"
    },
    "openssl_version":"OpenSSL 1.0.2k 26 Jan 2017",
    "python":"3.6.2",
    "system":{
        "name":"Windows",
        "release":"10"
    }
}

The only thing missing is my shoe size.

I’m not the first to notice, but they apparently don’t see the problem: https://github.com/pypa/pip/issues/4265. It’s for download/usage statistics, of course.

Well, that’s why we occasionally fork stuff.

User-Agent: pip/9.0.1 {"information-disclosure":"averted"}

That should be enough for them.

[Update: https://github.com/chrullrich/pip/tree/stfu]