Merge peep functionality into pip about peep

[erikrose]

"Any of these 5 hashes" is definitely something we need to support, because of different platforms/archs.

[erikrose]

Also, pip doesn't verify the signatures on wheels. Only wheel verify does. So maybe make a pip mode that does that.

[andreif]

I am not a big fan of reqs.txt format. It would be nice to have some progress here and make a better format (in Python finally!). It would also be nice to use some default name, say Pipfile, so that "peep install" would use it as input. These changes are too much for pip though.

[andreif]

On the other hand, a Python file should have .py extension, so maybe something like requirements.py, packages.py, peeps.py :) would make more sense...

[erikrose]

See pypa/pip#1175 (comment) for some design work toward the merge.

[erikrose]

We're going to sprint on this at PyCon next week.

[edmorley]

This was completed in pypa/pip#3137 and the feature now exists in pip 8:
https://pip.pypa.io/en/stable/user_guide/#hash-checking-mode
https://pip.pypa.io/en/stable/reference/pip_install/#hash-checking-mode

Peep is now deprecated for modern versions of pip - migration help can be found in the README:
https://github.com/erikrose/peep/blob/master/README.rst