<div dir="ltr">That depends on policy. I don't want to go too far down the trap of privileging my specific use case, but as a company that vendors *everything* we depend on, our accesses to PyPi for dependencies are pretty rare, which means we might run afoul of these changes when ingesting packages.<div><br></div><div>I'm going to ask the pointed question: is there actually any serious value to allowing the replacement of a name for anything that was ever in wide usage? Trademark violations notwithstanding -- legal stuff requires some degree of exception to the process -- why should abandonment result in replacement, as long as the existing code has ever been in use?</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 16, 2017 at 1:58 PM, Matthias Bussonnier <span dir="ltr"><<a href="mailto:bussonniermatthias@gmail.com" target="_blank">bussonniermatthias@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Mon, Jan 16, 2017 at 1:18 PM, Chris Rose <<a href="mailto:offline@offby1.net">offline@offby1.net</a>> wrote:<br>
> The tricky part there is that "being used" is a tough concept to define.<br>
> Over what time period? What amount of downloading counts as "used"?<br>
><br>
> I believe these concepts need to be made very clear, because the impact of<br>
> exploitative replacement is pretty severe if it is made to happen.<br>
><br>
<br>
</span>Would a month where the old package is made unavailable, but the new<br>
owner is not given access yet be a good compromise ?<br>
<br>
It most likely let time the old owner (or old users) to manifest a<br>
decide to "revive" the package if necessary, otherwise give a really<br>
strong signal that if there is still a couple of download, then it<br>
really does not breaks a lot.<br>
<span class="HOEnZb"><font color="#888888">--<br>
M<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Chris R.<br>======<br>Not to be taken literally, internally, or seriously.<br>Twitter: <a href="http://twitter.com/offby1" target="_blank">http://twitter.com/offby1</a></div>
</div>