<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br></div><div><br>On Feb 5, 2013, at 7:51 AM, Donald Stufft <<a href="mailto:donald.stufft@gmail.com">donald.stufft@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div>
<div><span style="color: rgb(160, 160, 168); ">On Tuesday, February 5, 2013 at 5:16 AM, Lennart Regebro wrote:</span></div>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">1. Packages should only be installed from the given package indexes.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">No scraping of websites as at least easy_install/buildout does, no</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">downloading from external download links. A deprecation period for</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">this of a couple of months, to give package authors the chance to</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">upload their packages is probably necessary.</div></span>
</blockquote>
<div>
PyPI will need to change for this to happen realistically if I recall. There is a
</div><div>hard limit on how large of a distribution can be uploaded to PyPI and there</div><div>are, if I recall, valid distributions which are larger than that.</div><div><br></div><div>Personally I want the installers to only install from PyPI so my suggestion</div><div>if this is something that (the proverbial) we want to do, PyPI should gain</div><div>some notion of a soft limit for distribution upload (to prevent against</div><div>DoS) with the ability to increase that size limit for specific projects who</div><div>can file a ticket w/ PyPI to have their limit increased.</div>
</div></blockquote><div><br></div><div>I strongly concur; however this does mean I will need to work with the board to procure additional storage or we will need to take the monthly storage hit and push it to s3 or another CSP.</div><div><br></div><div>I only see the latter possible if we can broker a highly discounted deal with a CSP such as rack space as the bandwidth costs alone would be painful</div><div><br></div><br><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Catalog-SIG mailing list</span><br><span><a href="mailto:Catalog-SIG@python.org">Catalog-SIG@python.org</a></span><br><span><a href="http://mail.python.org/mailman/listinfo/catalog-sig">http://mail.python.org/mailman/listinfo/catalog-sig</a></span><br></div></blockquote></body></html>