Path: csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Nicholas D Steeves Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Sat, 26 Jun 2021 00:50:02 +0200 Message-ID: References: X-Original-To: Scott Talbert , Jeremy Stanley X-Mailbox-Line: From debian-python-request@lists.debian.org Fri Jun 25 22:43:14 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-11.599 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, KHOP_HELO_FCRDNS=0.399, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 HELO_IP_IN_CL_SUBNET=-1.2 (check from: .debian. - helo: .cmx-torrgo001.bell. - helo-domain: .bell.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -2.7 X-Greylist: delayed 425 seconds by postgrey-1.36 at bendel; Fri, 25 Jun 2021 22:43:01 UTC X-Rg-Cm: Clean X-Originating-IP: [65.94.67.236] X-Rg-Env-Sender: nick.steeves@bell.net X-Rg-Rigid: 60C88688007B254F X-Cm-Envelope: MS4xfPI6z0ZeZyLByjeuId9iuHDeWMbNoByxwi987EPsHQtXHEJ2g28liAjzGyuuxoVTmoAVSgix/QK1hRHu6xaklel5Nr6YkbQRJBVcqe4uyUq8GFDMk5wV v9ThsxIxMo8cwrnfip7rhaj3hQJN1ifzUCE3GsPs0ZtBn2GzidBs21NNZJIbogVTM3U/vmbVF2+AvNqmN67+Fm4XzuSmp8cRwzv/jDX5dz9TMRcudUoKRKOW HJMfi73v86da1vJosBOcjRnxgpThkeQX5bMeZoQZuZW2Vlm7J7KauWhEFGuOtFNQ0DOug/IG25ZeAlm63zv+bxGKkKG6lWqZqi0cujXAZmkwT2cPej24EodM ezrQZ61MqaK2A5gPF2Dtb9agTmEZyEp+Wxb0gtIsvBZbwid6F7GGaPpxxytGp4sFzKqsnbL1iztDKBHI/yZ+kW+kwbnoGg== X-Cm-Analysis: v=2.4 cv=Udwy9IeN c=1 sm=1 tr=0 ts=60d65a45 a=MAO/b3cUwoQHNHibRY5CTw==:117 a=MAO/b3cUwoQHNHibRY5CTw==:17 a=r6YtysWOX24A:10 a=M2tyWRwSAAAA:8 a=4Ajm1bbcF9Wo_pSrCmkA:9 a=dkbe4544fpuqV5K0UBUA:9 a=FfaGCDsud1wA:10 a=rjt7Ip7kEownkhs4v6UI:22 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Mailing-List: archive/latest/19231 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/874kdld12z.fsf@DigitalMercury.dynalias.net Approved: robomod@news.nic.it Lines: 45 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-python@lists.debian.org X-Original-Date: Fri, 25 Jun 2021 18:35:48 -0400 X-Original-Message-ID: <874kdld12z.fsf@DigitalMercury.dynalias.net> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <20210625211721.eluslf3hee5eug7r@yuggoth.org> Xref: csiph.com linux.debian.maint.python:13441 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi Scott, Scott Talbert writes: > On Fri, 25 Jun 2021, Jeremy Stanley wrote: > [snip] > I tend to agree about PyPI being the official releases for a lot of=20 > projects. "GitHub tarballs" also tend to include other undesirable stuff= =20 > for distribution like upstream CI/CD configuration files, etc. > Would you please expand on "etc"? It seems like it would be reasonable to exclude CI/CD files via the watch file for the similar reasons to excluding an upstream-provided debian/ subdir. Thanks! Nicholas --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4qYmHjkArtfNxmcIWogwR199EGEFAmDWWkQQHHN0ZW5AZGVi aWFuLm9yZwAKCRBaiDBHX30QYQbzEACPYsFQMT23C9fT3zDszsXvy1zayyiHs377 7EiHWY0Oeh1nm3XEQQo22IthlaYeTNlnr7vLo5dbxRrH/zIIzQmEuvT/Uugkp1m6 6a3dPKI0S6FXJ4oA/q6KZRWsgks/RNOCqLP/4P3ZNldVotxQk3EGrgks8jL1AFr2 tyPDz8uyVIFrkO39awaBP8SBrBh6AGJnivbrIrlrN1MNOJl0T4iAQ8ejpBP3xenI tWLJwJgx4zWaIbXSTRKCkPI1/L9ioO2ItqF6FKwudryeO5WevF+sDTFIFUrIh36n 7exzE14u+dizc4byuElBTogTIOcpleAvCPEosvkcppqtY5SIhW58htwuQ9JxkoDU XXqExieN/IFK8ZgJ0WZm1bgwp28iJy4LbnSZs/kZghRsJh0PK0ny+SLVRW+uSh7R o6tpieJ6c2woTyv+1C2mnUCxMeSLhCXUWbv6QTtEMZ5Ht7nYVTaJTvzPT0116HKH odm9O7yNR0s1JUj66ayUTE0f6Y1lKzBiMUiGZwWukahT6i/a2JAVKa1LPBLZKmZU m1FmGORVEHRwzjRbmLpOz9ecsq5D8Z9nv/ReNEVT4HIX3nsrM3OjWbon/HaXwrhK /D9VZkC0LZdu1PQdqJ/YiDhuAy4ROLGQRugx2fFL9NZc4Oszajbr3ygSkedDgVZ1 cuu81aAE/w== =UkM1 -----END PGP SIGNATURE----- --=-=-=--