Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!feeder.usenetexpress.com!tr2.eu1.usenetexpress.com!feeder1.feed.usenet.farm!feed.usenet.farm!aioe.org!bofh.it!news.nic.it!robomod From: Jeremy Stanley Newsgroups: linux.debian.maint.python Subject: Re: How to watch pypi.org Date: Sat, 31 Oct 2020 03:40:02 +0100 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Sat Oct 31 02:31:40 2020 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 X-Greylist: delayed 1446 seconds by postgrey-1.36 at bendel; Sat, 31 Oct 2020 02:31:27 UTC MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ppa22cyrntnh2hem" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Sa-Exim-Connect-IP: 2001:4802:7801:102:be76:4eff:fe20:63e0 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: fungi@yuggoth.org X-Sa-Exim-Scanned: No (on azathoth.yuggoth.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/18752 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20201031020715.26zmtidvdk7mqldx@yuggoth.org Approved: robomod@news.nic.it Lines: 54 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sat, 31 Oct 2020 02:07:15 +0000 X-Original-Message-ID: <20201031020715.26zmtidvdk7mqldx@yuggoth.org> X-Original-References: Xref: csiph.com linux.debian.maint.python:12988 --ppa22cyrntnh2hem Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2020-10-31 01:33:36 +0000 (+0000), Paul Wise wrote: > On Fri, Oct 30, 2020 at 2:19 PM Fioddor Superconcentrado wrote: > > As I said I'm very new to this and all (python) packages I'm > > using lately use the usual python tools (pipy, setup.py, etc) > > and my first approach has been to stick as close as possible to > > the upstream procedures. But I might very likely be taking a > > wrong decision. What are the reasons to go for git instead of > > pypi? I see that it is 'more upstream' but it seems that > > everyone else is pointing to pypi as a distro-agnostic solution. >=20 > As Andrey says, missing files is one issue, another is that tarballs > often contain extra generated files that should be built from source, > but if you use the tarball then they quite likely will not be built > from source. I have to agree, though in the upstream projects with which I'm involved, those generated files are basically a lossy re-encoding of metadata from the Git repositories themselves: AUTHORS file generated from committer headers, ChangeLog files from commit subjects, version information from tag names, and so on. Some of this information may be referenced from copyright licenses, so it's important in those cases for package maintainers to generate it when making their source packages if not using the sdist tarballs published by the project. --=20 Jeremy Stanley --ppa22cyrntnh2hem Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAl+cxsoACgkQSPmWEUNJ WCl00Q//ZwUo6BKk4wICQLkmez1ITYp7DRuVlAXGwJ8opqvP6jix03ycBqDhg3iG YFAiv13AcDMs024TWJiRq0I7VPH6OnV3hdVgXTYfhijAL+KSX55w94bkNzFFvtW1 vs2OplILEkkAuQ7ATphDOYpYTwoYQdi6hwnINoNFh/RsIcsSi2a33iD4tyiHIazy RXdl4xit4if8sGbVEMl0Xkna6aSreydrswnyjw6JsmO73XlC1FndVigG1JtTZrdc DJ3CbtTMlNcXgbtLrTVhv1Y9rtKYwVvHSpBRUy1AYexSDstWivvFOv37hXyVwA3Z M1tYRer8+PlMSwTXC22VEzy1m/uGXP0kWytk0fq5CdKHYruRhW6Te4WtioEYy6CS 5/dzHlTFz+TGbVLen9P1PA2ntCO4MMhBHgZ64rzOHP3LzCF0+wKRFGQJiY+K66Op OtYWkyxNpZbvAUpuIv0fJMU2l8QsSAhz7SFD+b+Huj8IvosCJve31TNB7y3T7Jfw NjJvkYvrnhxCvQxiEtIZc4Vl333axuSjWCvMLZgLhZaU3Z9Jcej9C6nuQSDk8303 f2A7Blutv6wafeGay9iSgFDxKJjP1ONFMo/XPzc0jYla7rziEmapVmZUECZT4zOj fPo4ohYrtG/WhBvMozJlMA/vCwA8IIUc3uLpnG0cTYvlNN7QD24= =I3El -----END PGP SIGNATURE----- --ppa22cyrntnh2hem--