Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Nicholas D Steeves Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Sat, 26 Jun 2021 02:10:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Sat Jun 26 00:07:59 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-11.599 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, KHOP_HELO_FCRDNS=0.399, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -2.7 X-Rg-Cm: Clean X-Originating-IP: [65.94.67.236] X-Rg-Env-Sender: nick.steeves@bell.net X-Rg-Rigid: 60C8802C007C0BF1 X-Cm-Envelope: MS4xfCu+XASdqhzJAEmrzAMBKrSHeDJXa2P0RGWRLNpzVFiFnhckhnhYjMztOwpNk1powHf6EvdU1zgpBbo7k0si7iMlPObC7js88x4YOmcu7MrfXTdjvtf2 D6IKm4p2lkoKLKJmsKQMlW/168EssCHQsWohM6pZYAliff9Yt4s938xjR6GI4Qqo06Fv2nf7LPbyuxwZVq4jRZweURHvjD3q6Xtakp8YOfHLrnBqPg5pw+7m 09eNzHPtgT1gI8yrdQ/X7bmazsR2iwqymJeQh11ESX0q5nB+dGNAPq2T/gU4Q9aAcva5K/JNqZn/ArRP72FqqpIRwliGs9dkGTdOplyQEI4zSC99oZbk5BgF g2xy8lmK X-Cm-Analysis: v=2.4 cv=Zd5+iuZA c=1 sm=1 tr=0 ts=60d66fcc a=MAO/b3cUwoQHNHibRY5CTw==:117 a=MAO/b3cUwoQHNHibRY5CTw==:17 a=r6YtysWOX24A:10 a=aaj75klY7MbYcvAl1q0A:9 a=wnkqwviyU016NHJI_b0A:9 a=FfaGCDsud1wA:10 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Mailing-List: archive/latest/19235 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/8735t51oah.fsf@DigitalMercury.dynalias.net Approved: robomod@news.nic.it Lines: 46 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 25 Jun 2021 20:07:34 -0400 X-Original-Message-ID: <8735t51oah.fsf@DigitalMercury.dynalias.net> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <20210625211721.eluslf3hee5eug7r@yuggoth.org> <877dihd1ds.fsf@DigitalMercury.dynalias.net> <20210625234144.vwfjk6xprvqzscx3@yuggoth.org> Xref: csiph.com linux.debian.maint.python:13445 --=-=-= Content-Type: text/plain Hi Jeremy! Wow, you've given me a lot to think about. Thank you :-) Yes, I agree with you that my MR doesn't adequately address the much more heterogeneous reality. (and is also indelicate, lacks nuance, etc) I'll take a day or two to think about this, and also to take into account what everyone else has written before making revisions for v2. If I do it right now my work won't be rigorous enough, nor fair to the contributions others have made to this thread. If nothing else it will require careful outlining... Maybe the heading should be: How to choose a source for the tarball (and why this can be difficult) ====================================================================== ;-) Take care, Nicholas --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4qYmHjkArtfNxmcIWogwR199EGEFAmDWb8cQHHN0ZW5AZGVi aWFuLm9yZwAKCRBaiDBHX30QYYlAEACJ4sHQ+M0cKQO1xNrsNmykf8d7XyNRA4Wq U9sw23mT7vzcfKQqsfFeY7q0H97AAGpEl67WnDBEqPoy9MxQfHBvlV4eDFdJOnoW Nxd1rPVwbJcwB2jIUDvAw2ffGC5ANtisv+RdqWqOJ7UhNbfKC4toQ4D65Wm8/BzD YT9JkOiIpMPxlM8XbgA1GdVsO0L5c0vcC2Pr6TiLKUm3WVTXbxhMxK/D5fxuWKpG OKmAe2AJ+3oQDCI5JMMYFNhRDAalDevrq3Gjaj/4gyrLcA/6CpvEzkL2EjTsvSm9 VY+tGWQRlOV/Nk0dQ3C8iSMCvrTw0iRuV2yxVRR1eZb2GGSIqfKsyGaUB2fjRVOg cWfDhf+LSuIe5lxfHgGIJ43KIArw5Nyg41xn8ddEgaOsPBp0IQn513Pwpb5rRaUf VFBtQdfC5kaF9NSLs7XNeJOP6LED0kYlm0aoDkAHTxi4HjJb/HHMjMuZtsZYE5DY LXboQ56nDFcGc8ojB4oanV5EpOjAFDm4TgdOHnp/7c+/mQC2iyFZkI3ig2pPZe01 payajCXPYR0cZzCzb15C3qMhMUPtT7Bp8NO6Ul8bLPPTd6fYPxN08KeqChN7hy54 k1GwRGnnW1w6ag/CQKwpk0ojWFWeqSaOzVv4sF1YmFoQXqeNge/LZi8bX71Eac4v +hfBNwU6JQ== =pDdu -----END PGP SIGNATURE----- --=-=-=--