Path: csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Nicholas D Steeves Newsgroups: linux.debian.maint.python Subject: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Fri, 25 Jun 2021 22:50:01 +0200 Message-ID: X-Mailbox-Line: From debian-python-request@lists.debian.org Fri Jun 25 20:49:42 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-11.599 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, KHOP_HELO_FCRDNS=0.399, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -2.7 X-Greylist: delayed 393 seconds by postgrey-1.36 at bendel; Fri, 25 Jun 2021 20:49:29 UTC X-Rg-Cm: Clean X-Originating-IP: [65.94.67.236] X-Rg-Env-Sender: nick.steeves@bell.net X-Rg-Rigid: 60C89382007B1441 X-Cm-Envelope: MS4xfO/2dDWIQFIfa3NusGR3XwhK8O33pGUxbEhzGhirFuTbRBHffNrwKSa4rNsfehqoi1/KPDZS/1LQBVZeg9/M64r+VCHc4BMzh9eUyK2Ss4vl5EMCFFhu h+WxNP14Jh3QL1DtUuMqJYoIXhSu3nzd17lz6HhUQ7DffAMY+ErHHQ/cQBH7EBcJyU+XhBlD8uBYn1cYjJcAt62/LqAkeBSvaT4S3cicryB43zbfxFbjXqoD aeqkVy1APgc7MO0sO/R/Y/92l8CHW8BAaHmbTnS+Ti9T7MGsVc8ZqHhidnJ15+qUhCNDuZS23x5S5HA0Fzdyk2SvClaZAij2xg23xVPzfyfEfYUpL8QhA1rH wCzN7InX+CvG2j9AICaSVEW3sKAJe2KoCyinr3qR1IUcGLK71pnID6QG4zZVgRH3mGmoAozaEyPcslvnxtfACsd+uX9ykEek/gmORyFzH2e2LwvuUr1L+IMW oXsb5Zwg0v4y9s77owoUaayBGlmkN1NgNPX5sg== X-Cm-Analysis: v=2.4 cv=Z6GPoFdA c=1 sm=1 tr=0 ts=60d63fc6 a=MAO/b3cUwoQHNHibRY5CTw==:117 a=MAO/b3cUwoQHNHibRY5CTw==:17 a=r6YtysWOX24A:10 a=xNf9USuDAAAA:8 a=qk_CaEH1hGigoEuEZjgA:9 a=MxllduJ-UuBoH1cpg9UA:9 a=FfaGCDsud1wA:10 a=SEwjQc04WA-l_NiBhQ7s:22 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Mailing-List: archive/latest/19226 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/877dihvfp9.fsf@DigitalMercury.dynalias.net Approved: robomod@news.nic.it Lines: 40 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 25 Jun 2021 16:42:42 -0400 X-Original-Message-ID: <877dihvfp9.fsf@DigitalMercury.dynalias.net> Xref: csiph.com linux.debian.maint.python:13436 --=-=-= Content-Type: text/plain Hi Team! I feel like there is probably consensus against the use of PyPi-provided upstream source tarballs in preference for what will usually be a GitHub release tarball, so I made an MR to this effect (moderate recommendation rather than a "must" directive): https://salsa.debian.org/python-team/tools/python-modules/-/merge_requests/16 Comments, corrections, requests for additional information, and objections welcome :-) I'm also curious if there isn't consensus by this point and if it requires further discussion Cheers, Nicholas --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4qYmHjkArtfNxmcIWogwR199EGEFAmDWP8IQHHN0ZW5AZGVi aWFuLm9yZwAKCRBaiDBHX30QYbPkD/9ZjjRIUkvJfDdGg1S8YFyl44IRgfj02J6z q8mYN/wrzCVWPqTDktbX2qfz1pPX620e7PxU6X/JOTbfHW5WlWdRq+fd55nD46aS EET5USQldd2aYZItbhsmLMIaZLJ0Axs1xRl/MLj/yZ4H3T71cPA+9ru4GGhCHEK/ A+LYsAtiQQhvBKtRnJAmruATNKmVRQy43L5sql8tSTQDR/puyzmRczphyf7qxa5N 6AnBngA7Te5O5+NdiprFMjl9GFixT3UrR5bmqwrlAH/9iVMR1JPDRv3l70KI1WpR Fq0ayUPMFyynHErttnWxwEGs+JnzvhGNcLWFGie14eXKH4QfotRkNqLxqeMTu+X8 x6O0BJHvgRA6MO1tdiyw3ddV+JOLbI2suEOXy8TtDx5O1TyWvgG5iOpdA6VBc3MG 9sQt47i21zXj4eD1mzGe0cdP0Ty0pxX93RoDuewbsmF3mqBrZnNNOi6hHyUg/I5e WPeaEjNvYJ/Ss/XY7onNaBXCzYOxiE1kwNWBs3EzCsAmCUKnrqovX8U5d1mtogrp Q3wPFYU6mPWaw9rNrR5XtpY3kwzsz65Z4QXu5KYufr65K5+Z7mrPlGhOnvmnGMlH VO8021dNoFwjSI3oZYTcHVVeLNFka+k12nase5YbzxzLTfnrJZwckWFn/SUMwdWq y4f/PrH1Sg== =kJPQ -----END PGP SIGNATURE----- --=-=-=--