<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I'd be all for it if I wasn't buried under a ton of other things
to do. Happy hacking and good luck!<br>
</p>
<br>
<div class="moz-cite-prefix">Jannis Gebauer kirjoitti 06.02.2018 klo
10:33:<br>
</div>
<blockquote type="cite"
cite="mid:D2DE771B-141A-4AF4-9787-8C4C4D689D77@pyup.io">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
Hi!
<div class=""><br class="">
</div>
<div class="">I’m currently working on a package build server. My
goal is to produce useful additional meta data for all packages
available on PyPi.</div>
<div class=""><br class="">
</div>
<div class="">This includes:</div>
<div class=""><br class="">
</div>
<div class="">- Transitive dependencies</div>
<div class="">- Is the package installable under Python 3?</div>
<div class="">- Various automated “code quality” tests like
pylint, pyflakes, pep8, mccabe etc.</div>
<div class="">- Automated security tests</div>
<div class="">- (possibly changelogs, commit logs)</div>
<div class="">- Licenses!</div>
<div class=""><br class="">
</div>
<div class="">The main idea is to run the build process in a
restricted “sandbox” docker container that pulls the package
from PyPi, installs it and runs a couple of tools on it. Code is
still pretty rough, nothing to look at at the moment I’m afraid.</div>
<div class=""><br class="">
</div>
<div class="">Is there any interest in working on this together?
Maybe even with the goal to make it an open API that can be
consumed by warehouse et al.?</div>
<div class=""><br class="">
</div>
<div class="">Interested in any thoughts on this!</div>
<div class=""><br class="">
</div>
<div class="">Cheers,</div>
<div class=""><br class="">
</div>
<div class="">Jannis</div>
<div class=""><br class="">
</div>
<div class="">P.S: I’m currently crunching trough the data on a 96
CPU cluster. There’s an API available, but it’s sitting behind
HTTP Basic Auth as it is basically an endpoint for remote code
execution (and throws lots of 500s :D). Send me a mail to <a
href="mailto:jay@pyup.io" class="" moz-do-not-send="true">jay@pyup.io</a> if
you want to play around with it.</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Distutils-SIG maillist - <a class="moz-txt-link-abbreviated" href="mailto:Distutils-SIG@python.org">Distutils-SIG@python.org</a>
<a class="moz-txt-link-freetext" href="https://mail.python.org/mailman/listinfo/distutils-sig">https://mail.python.org/mailman/listinfo/distutils-sig</a>
</pre>
</blockquote>
<br>
</body>
</html>