Anyone using Anaconda for Python?I assume you also received the email from Gail Freeman (SAS IT Vendor Management) about potential vulnerabilities with its distribution repository. I'm wondering two things:
- Will I even need Anaconda with the changes coming in JMP 18.
- If the answer to 1 is yes, how much of an advantage is it to use Anaconda for accessing and installing packages from its repository or for other features. I have always download and installed packages manually.
Thanks!
Re: Anyone using Anaconda for Python?For packages that JMP distributes with Python, they will be part of the regular Snyk based security scanning process, and vulnerability mitigation process (regular package updates for 0.0.x, 0.x releases of the product). For customer supplied packages that are not ultimately part of the JMP Marketplace, it will be the responsibility of the user to check for CVE's and mitigate those with updates.
Brian
Re: Anyone using Anaconda for Python?
JMP development monitors common vulnerabilities and exposures (CVEs) and we plan to be able to offer more frequent updates in the future to address CVEs that become known
Thanks Sam,
How is this going to work with 3rd party packages used in conjunction with Python in JMP?
Re: Anyone using Anaconda for Python?The JMP 18 Integration will not use Anaconda. There are situations where you need a locally installed Python (apart from JMPs) to install packages that need to be compiled locally after install. Anaconda can be used for that purpose.
I did not see the message about the Anaconda vulnerabilities.
Be assured that JMP development monitors common vulnerabilities and exposures (CVEs) and we plan to be able to offer more frequent updates in the future to address CVEs that become known, and we will certainly have to do this for the Python that comes with JMP 18 and beyond.
