Groups > linux.debian.maint.python > #13436

[RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs

Path	csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod
From	Nicholas D Steeves <sten@debian.org>
Newsgroups	linux.debian.maint.python
Subject	[RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs
Date	Fri, 25 Jun 2021 22:50:01 +0200
Message-ID	<Cu0VX-4MG-5@gated-at.bofh.it> (permalink)
X-Mailbox-Line	From debian-python-request@lists.debian.org Fri Jun 25 20:49:42 2021
Old-Return-Path	<sten@debian.org>
X-Amavis-Spam-Status	No, score=-11.599 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, KHOP_HELO_FCRDNS=0.399, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate: -2.7
X-Greylist	delayed 393 seconds by postgrey-1.36 at bendel; Fri, 25 Jun 2021 20:49:29 UTC
X-Rg-Cm	Clean
X-Originating-IP	[65.94.67.236]
X-Rg-Env-Sender	nick.steeves@bell.net
X-Rg-Rigid	60C89382007B1441
X-Cm-Envelope	MS4xfO/2dDWIQFIfa3NusGR3XwhK8O33pGUxbEhzGhirFuTbRBHffNrwKSa4rNsfehqoi1/KPDZS/1LQBVZeg9/M64r+VCHc4BMzh9eUyK2Ss4vl5EMCFFhu h+WxNP14Jh3QL1DtUuMqJYoIXhSu3nzd17lz6HhUQ7DffAMY+ErHHQ/cQBH7EBcJyU+XhBlD8uBYn1cYjJcAt62/LqAkeBSvaT4S3cicryB43zbfxFbjXqoD aeqkVy1APgc7MO0sO/R/Y/92l8CHW8BAaHmbTnS+Ti9T7MGsVc8ZqHhidnJ15+qUhCNDuZS23x5S5HA0Fzdyk2SvClaZAij2xg23xVPzfyfEfYUpL8QhA1rH wCzN7InX+CvG2j9AICaSVEW3sKAJe2KoCyinr3qR1IUcGLK71pnID6QG4zZVgRH3mGmoAozaEyPcslvnxtfACsd+uX9ykEek/gmORyFzH2e2LwvuUr1L+IMW oXsb5Zwg0v4y9s77owoUaayBGlmkN1NgNPX5sg==
X-Cm-Analysis	v=2.4 cv=Z6GPoFdA c=1 sm=1 tr=0 ts=60d63fc6 a=MAO/b3cUwoQHNHibRY5CTw==:117 a=MAO/b3cUwoQHNHibRY5CTw==:17 a=r6YtysWOX24A:10 a=xNf9USuDAAAA:8 a=qk_CaEH1hGigoEuEZjgA:9 a=MxllduJ-UuBoH1cpg9UA:9 a=FfaGCDsud1wA:10 a=SEwjQc04WA-l_NiBhQ7s:22
MIME-Version	1.0
Content-Type	multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature"
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/19226
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/877dihvfp9.fsf@DigitalMercury.dynalias.net
Approved	robomod@news.nic.it
Lines	40
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Fri, 25 Jun 2021 16:42:42 -0400
X-Original-Message-ID	<877dihvfp9.fsf@DigitalMercury.dynalias.net>
Xref	csiph.com linux.debian.maint.python:13436

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi Team!

I feel like there is probably consensus against the use of PyPi-provided
upstream source tarballs in preference for what will usually be a GitHub
release tarball, so I made an MR to this effect (moderate recommendation
rather than a "must" directive):

  https://salsa.debian.org/python-team/tools/python-modules/-/merge_requests/16

Comments, corrections, requests for additional information, and
objections welcome :-)  I'm also curious if there isn't consensus by
this point and if it requires further discussion

Cheers,
Nicholas

Back to linux.debian.maint.python | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Nicholas D Steeves <sten@debian.org> - 2021-06-25 22:50 +0200
  Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-25 23:20 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Scott Talbert <swt@techie.net> - 2021-06-25 23:40 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Nicholas D Steeves <sten@debian.org> - 2021-06-26 00:50 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Nicholas D Steeves <sten@debian.org> - 2021-06-26 00:30 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-26 01:50 +0200
        Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Nicholas D Steeves <sten@debian.org> - 2021-06-26 02:10 +0200
        Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Paul Wise <pabs@debian.org> - 2021-06-26 04:10 +0200
          Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-26 06:20 +0200
          Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Martin <debacle@debian.org> - 2021-06-26 11:30 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Simon McVittie <smcv@debian.org> - 2021-06-26 12:20 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Paul Wise <pabs@debian.org> - 2021-06-26 04:00 +0200
  Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Simon McVittie <smcv@debian.org> - 2021-06-26 00:10 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Nicholas D Steeves <sten@debian.org> - 2021-06-26 01:10 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-26 02:00 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Brian Thompson <brian@hashvault.io> - 2021-06-26 05:50 +0200
        Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Donald Stufft <donald@stufft.io> - 2021-06-26 06:30 +0200
  Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Paul Wise <pabs@debian.org> - 2021-06-26 04:00 +0200
  Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Louis-Philippe Véronneau <pollo@debian.org> - 2021-06-27 01:00 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-27 02:20 +0200
    Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Emmanuel Arias <eamanu@yaerobi.com> - 2021-06-28 04:50 +0200
      Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided  upstream source tarballs Jeremy Stanley <fungi@yuggoth.org> - 2021-06-28 18:30 +0200

csiph-web