Path: csiph.com!weretis.net!feeder8.news.weretis.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Jeremy Stanley Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Sat, 26 Jun 2021 02:00:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Fri Jun 25 23:54:49 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="mvmnht6ovhntm2er" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Sa-Exim-Connect-IP: 2001:4802:7801:102:be76:4eff:fe20:63e0 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: fungi@yuggoth.org X-Sa-Exim-Scanned: No (on azathoth.yuggoth.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/19234 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20210625235432.yctnlzgix4b4mw7c@yuggoth.org Approved: robomod@news.nic.it Lines: 44 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 25 Jun 2021 23:54:32 +0000 X-Original-Message-ID: <20210625235432.yctnlzgix4b4mw7c@yuggoth.org> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <871r8pczvw.fsf@DigitalMercury.dynalias.net> Xref: csiph.com linux.debian.maint.python:13444 --mvmnht6ovhntm2er Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2021-06-25 19:01:39 -0400 (-0400), Nicholas D Steeves wrote: [...] > And yes, I agree moderate is better, but I must sadly confess > ignorance to the technical reasons why PyPI is sometimes more > appropriate. Without technical reasons it seems like a case of > ideological compromise (based on the standards I've been mentored > to and the feedback I've received over the years). Hopefully my other replies here and in Salsa have provided some fairly large counterexamples for you. If those still aren't entirely clear, I'm happy to go into deeper detail or broaden to related examples elsewhere in the ecosystem. --=20 Jeremy Stanley --mvmnht6ovhntm2er Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmDWbLNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WClQSg/+INn0cQa44AhdhpvReGoI7MowyR9nVZHjPBtippiteP6xjvJ1LOa2Inww d4P2MYp29SPIzII93YBuITSGhZ3kbZY3Eed4S9MvjOd6dV6BEz6/0E5hFzsFKz2r krrHSfW4uIzl1g8kNDVNDi5B2IvzyZE0PsayqO3Pr4PwEMeGegUWOj44RPZ08c5B 3Q3WfC3am9RQfXZGTgvgw0uTkIGhyWebikt2uT0+04U/DeU/nIuUtSTUnLixRMBo i4l8/t3cKS1shiGJX9IcLAiggA20RSUgN/vrfCaP77DLG6EKR1NZRTnc4TM77BM/ yoeVymtOzepo/n8ukskB80x/ZnD4MuVXO1kC0+owg1jx5ULt/iNjeIuN/mX2T/9A B3XDSP6WCh0e/fRHSjYQUwnHWS6ErGV/xmjdjmJYgdq5sriAB7FyQTufCcf8GrP3 7aFRfhuZb2dDDjL4yMS86BlG7zpEqZON8pKbvJ2MWTIkhl6TW3TMQJnb2tBZ1uu7 6d6yRSWKsIn33HP30GQugUygxReapl6flhCyO+DRrfJrbWmOrOD+sXbUq871G1IK 7/+njMk8WUvAyk7kXY3+p11vLjm8sPC+p1VkIxMafYDfodZeuXVOZSHqUCGoiNAD bTD5/YBnbz4phXggAxhmI9u3SPI1pPXa0BY3Ci6CaHAxNi54L6Y= =iJVb -----END PGP SIGNATURE----- --mvmnht6ovhntm2er--