By analyzing the blame information on this pull request, we identified @bjornfor, @matthiasbeyer and @domenkozar to be potential reviewers

Travis seems to indicate it's a mass rebuild, I don't understand why. It's changing only fixed output drvs.

Seems like nox is comparing drv paths: https://github.com/madjar/nox/blob/master/nox/nixpkgs_repo.py#L80

Nice catch! Opened madjar/nox#44

I really see no reason to merge this, we'll fix issues as they come or switch to another mirror.

Verified using pythonPackages.msgpack and bumped the version.

My only concern with this is we're now codifying that pypi is the old style pypi URLs. In fact, PyPI has changed their URLs and are only providing these old style redirects as a favor for packagers like us. Given the rest of @FRidh's goals, I think it would be wiser to rename the pypi mirror to pypi-v1 (or whatever) so then we have an easier time moving forward by calling the newer style URLs pypi-v2.

If we keep in mind that this is not an official API and agree that if it turns out to be unreliable and that we need a better solution by using say the API, then I think it is fine.

I will anyway work further on autogenerated urls and hashes using the API.

with the pypi-v1 you have a good point, at least, thinking about people that use it outside of buildPythonPackage.