{"action":"opened","issue":{"url":"https://api.github.com/repos/wemake-services/wemake-python-styleguide/issues/17","repository_url":"https://api.github.com/repos/wemake-services/wemake-python-styleguide","labels_url":"https://api.github.com/repos/wemake-services/wemake-python-styleguide/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/wemake-services/wemake-python-styleguide/issues/17/comments","events_url":"https://api.github.com/repos/wemake-services/wemake-python-styleguide/issues/17/events","html_url":"https://github.com/wemake-services/wemake-python-styleguide/issues/17","id":336213373,"node_id":"MDU6SXNzdWUzMzYyMTMzNzM=","number":17,"title":"Dependency \"pluggy\" may have a wrong hash in the lock file","user":{"login":"vergeev","id":13587415,"node_id":"MDQ6VXNlcjEzNTg3NDE1","avatar_url":"https://avatars1.githubusercontent.com/u/13587415?v=4","gravatar_id":"","url":"https://api.github.com/users/vergeev","html_url":"https://github.com/vergeev","followers_url":"https://api.github.com/users/vergeev/followers","following_url":"https://api.github.com/users/vergeev/following{/other_user}","gists_url":"https://api.github.com/users/vergeev/gists{/gist_id}","starred_url":"https://api.github.com/users/vergeev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vergeev/subscriptions","organizations_url":"https://api.github.com/users/vergeev/orgs","repos_url":"https://api.github.com/users/vergeev/repos","events_url":"https://api.github.com/users/vergeev/events{/privacy}","received_events_url":"https://api.github.com/users/vergeev/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-27T12:43:55Z","updated_at":"2018-06-27T12:43:55Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"When I do `pipenv install -d` on MacOS, the `pluggy=0.6.0` dependency isn't getting installed because of the wrong hash: `THESE PACKAGES DO NOT MATCH THE HASHES FROM Pipfile.lock!`.\r\n\r\nThe package version `pipenv` tries to install is: h`ttps://files.pythonhosted.org/packages/ba/65/ded3bc40bbf8d887f262f150fbe1ae6637765b5c9534bd55690ed2c0b0f7/pluggy-0.6.0-py3-none-any.whl`\r\n\r\nThe problem can be caused by `pipenv` itself (see https://github.com/pypa/pipenv/issues/210).\r\n\r\nSince I'm not sure I'm asking to verify that on other platforms."}}
{"actor":{"display_login":"vergeev"}}