Mailman 3 - Distutils-SIG

wrong SHA256 on setuptools
by Martin Baker 21 Mar '19

21 Mar '19

The SHA256 listed for setuptools-40.8.0.zip is 6e4eec90337e849ade7103723b9a99631c1f0d19990d6e8412dc42f5ae8b304d But the actual SHA sum is 3547552b1009283f7ae31fded32ad33ed160e671 Martin -- Martin Baker Head of Product, FastComp 415.845.0729

4 5

Claim abandoned name: dockenv
by Pat H 18 Mar '19

18 Mar '19

Hi, Apologies if this isn't the right distro, lookingat https://www.python.org/dev/peps/pep-0541/#abandoned-projects I wasn't sure: I'd like to apply to take ownership of the project name "dockenv", for use as a different tool. Following the pep: - The project hasn't had an update since 2017 - The owner left no email in any of the releases or account - The homepage url goes to a page that 404s - The owner has had no activity since 2017 on pypi - Download status appear to be around 44 for the last month The tool I plan on releasing is one I am presenting this week at a security conference. The tools uses Docker to create and maintain virtual environments, hence the name dockenv. Hopefully all of this is what you require, but let me know if I can help further. - Pat

1 1

Re: Update PEP 508 to allow version specifiers
by Tzu-ping Chung 16 Mar '19

16 Mar '19

> On 15 Mar 2019, at 21:47, Simon Ruggier <simon80(a)gmail.com> wrote: > > The packages have to be available online for dependency links to work, yes, but they're not public: one needs to authenticate with an SSH key to clone each repository. Both --find-links and --index-url (or --extra-index-url) provide the possibility to secure the download with authentication (HTTP Basic Auth). > >> On March 13, 2019 2:09:03 PM UTC, Tzu-ping Chung <uranusjr(a)gmail.com> wrote: >> >>> On 6 Mar 2019, at 03:53, Simon <simon80(a)gmail.com> wrote: >>> >>> I hope it's not an issue that I'm replying to a month-old thread. I reviewed the previous discussion to try to avoid duplicating any of it. >>> >>> When using pip with PyPI, calling pip a second time is much quicker than the first time, because it verifies that the requirements, including version constraints, are satisfied in the target environment and doesn't needlessly reinstall stuff. >>> >>> Dependency links allowed the same behaviour to be implemented for private packages with dependencies on other private repositories: given a requirement B >= 3 and a dependency link that B was available from, pip could check if the environment already includes a package B with a new enough version, and only use the dependency link as a fallback if the requirement isn't already satisfied. >>> >>> URL specifiers aren't useful for providing a fallback location to get a package from, because using one prevents the package from specifying a version constraint in the same way that was possible with dependency links, or with normal requirements available from PyPI. Curiously, discussion of version constraints in this thread has focused on how nonsensical it would be to compare them to the specifying URL, ignoring the possibility of comparing the constraint with the target environment. >>> >>> The loss of this functionality means that anyone who was previously using pip to automatically install private packages with private dependencies now has to either forgo automatic dependency management (a large part of why one would use a package manager to begin with) in favour of recursively specified requirements files, publish their private packages somewhere so that pip can find them, or stick with pip 18.1 for now. >> >> Wouldn’t you still need to “publish the private packages somewhere” for dependency links to work? `setup.py sdist` with `pip --find-links` can get you very far; the only differences IMO is you have to provide a proper package, and write a simple HTML file to point to it. >> >> >>> -- >>> Distutils-SIG mailing list -- distutils-sig(a)python.org >>> To unsubscribe send an email to distutils-sig-leave(a)python.org >>> https://mail.python.org/mailman3/lists/distutils-sig.python.org/ >>> Message archived at https://mail.python.org/archives/list/distutils-sig@python.org/message/BALD…

2 1

Great Python... Great History Now, Social Media Internal in Python
by pedroguilhermealvino＠gmail.com 13 Mar '19

13 Mar '19

It is very common for us to communicate via Github, Telegram or Whatsapp. Why not make Python a fully self-manageable web media? This would be my contribution to making Python the greatest language ever written on the world. What if we use Python with internal media? For example, if we need help - no servers ... we all connect ... with Twiiter, Telegram inside Python. In this case, it is client to client.

1 0

Re: Update PEP 508 to allow version specifiers
by Simon 13 Mar '19

13 Mar '19

I hope it's not an issue that I'm replying to a month-old thread. I reviewed the previous discussion to try to avoid duplicating any of it. When using pip with PyPI, calling pip a second time is much quicker than the first time, because it verifies that the requirements, including version constraints, are satisfied in the target environment and doesn't needlessly reinstall stuff. Dependency links allowed the same behaviour to be implemented for private packages with dependencies on other private repositories: given a requirement B >= 3 and a dependency link that B was available from, pip could check if the environment already includes a package B with a new enough version, and only use the dependency link as a fallback if the requirement isn't already satisfied. URL specifiers aren't useful for providing a fallback location to get a package from, because using one prevents the package from specifying a version constraint in the same way that was possible with dependency links, or with normal requirements available from PyPI. Curiously, discussion of version constraints in this thread has focused on how nonsensical it would be to compare them to the specifying URL, ignoring the possibility of comparing the constraint with the target environment. The loss of this functionality means that anyone who was previously using pip to automatically install private packages with private dependencies now has to either forgo automatic dependency management (a large part of why one would use a package manager to begin with) in favour of recursively specified requirements files, publish their private packages somewhere so that pip can find them, or stick with pip 18.1 for now.

2 1

Automatic and internal Pip package management system
by pedroguilhermealvino＠gmail.com 12 Mar '19

12 Mar '19

Hi, how are you? I'm trying to create a thing, an idea, a thought. This is about the Pip package management system used to install and manage software packages written in the Python programming language. So I wanted it to be automatic. Instead of always typing ... For example pip install example.py Solution What if Python itself had this automatic feature internally? For example impot example1 # runs pip install example.py Case A. If you do not have the module, the module will be inserted. B. If you have the module, check the installed version. Summary It would be a 'package.json, similar to the Nodejs' within Python. Note I expect an answer Thank you for your attention and respect, I'm starting with Python and I have this idea If the community helps and if I can help, it would be an honor for this idea, implementation ^^ Regards, Pedro Guilherme About this Note 1 I tried to get an answer on Github and asked to check it out here. If the discourse is good, we can include it in the Github repository for this new feature or implementation. I'm going to thank Mariatta for this tip. Written message, reply " Thanks for your interest in improving Python. However the devguide is not the right place to discuss the proposed idea. From the sound of it, perhaps distutils-sig? " Here I am... Note 2 The reference at the end is a link about it. It was closed in the python devguide and peps repositories in the issues area. I want more clarification about my thinking. I like to create and think. My little visual projects were thanks to what I found, vi, li, I researched in Stackoverflow, Github, Codepen.io. Note 3 I'm trying to translate the Arduino into Portuguese. Library Brasilino ... ^^ And I'm adapting or suggesting the next words ... to be a bit like English .... It's that Portuguese has a graphic accent and English does not. For example, consider the word 'Sr não = If no' associated with this 'else'. So I'm reading dictionaries to find a word next to English ... without a graphic accent on what is considered in English. Resume Here https://github.com/OtacilioN/Brasilino and see in content 'issues' ^^ Regards, Pedro Guilherme Reference https://github.com/python/devguide/issues/469

3 5

Hi, how are you?
by Pedro Guilherme Alvino Pereira 12 Mar '19

12 Mar '19

Hi, how are you? Att, Pedro Guilherme.

1 0

[setuptools] 'package_data' doesn't appear to include files out of module root, but 'data_files' doesn't install into module
by Jonas Thiem 08 Mar '19

08 Mar '19

Sorry if I missed something obvious, but I have the following problem while using setuptools.setup for packaging: 1. My LICENSE.md file is in the repository root as well as the setup.py (because that is customary, and required so it shows up e.g. on GitHub properly) 2. My package is inside src/wobblui/ because I like having it cleanly separate in a subfolder 3. Because some of vendor code included that requires displaying of a notice (BSD/MIT license) and this is a UI library, I would like to offer a function that returns the text to display to make it easier for people to implement it. This function should be part of the package. This REQUIRES the contents of LICENSE.md, obviously 4. To complicate things, I have no second copy of LICENSE.md inside src/wobblui/ because then I would have to keep two flies in sync This has left me with a situation where I am really unsure what to do: I need LICENSE.md installed into site-packages inside the module folder to make this work (and it's not a huge file so that seemed like a reasonable solution), so I tried to use ../ in a package_data directive since the source file is outside of src/wobblui/. However, that seems to be completely ignored. data_files works, but of course is relative to a way more upwards location and I have no clue how to specify the exact path where the module/package actually was installed to, and it doesn't seem to be INTENDED for this purpose either. So how exactly am I supposed to package a file that is outside of the package folder like that, but should still be installed into the package/module folder?

1 0

Re: PEP-582 concerns
by Alex Walters 02 Mar '19

02 Mar '19

> -----Original Message----- > From: Chad Smith <chadsmith27(a)gmail.com> > Sent: Friday, March 1, 2019 1:33 PM > To: Alex Walters <tritium-list(a)sdamon.com> > Subject: Re: [Distutils] Re: PEP-582 concerns > > I was not aware that discuss.python.org <http://discuss.python.org> was > being used now. I started a thread there on PEP-582: > https://discuss.python.org/t/pep-582-python-local-packages-directory/963. > Would you mind reposting your response there? > Yes, I actually would greatly mind posting on discuss.python.org, that site is itself contentious. Discussion mediums have been discussed to death, I won't rehash it here (nor do I want to open that issue back up), but I posted on the list for a reason. > On Fri, Mar 1, 2019 at 2:30 AM Alex Walters <tritium-list(a)sdamon.com > <mailto:tritium-list@sdamon.com> > wrote: > > > I kind of feel that "third party tool can/will use this feature" is > orthogonal to "how the interpreter behaves out of the box" - unless I > misunderstand and you are suggesting python grow support for > launching > entrypoints from the python executable. > > > -----Original Message----- > > From: chadsmith27(a)gmail.com <mailto:chadsmith27@gmail.com> > <chadsmith27(a)gmail.com <mailto:chadsmith27@gmail.com> > > > Sent: Thursday, February 28, 2019 12:42 PM > > To: distutils-sig(a)python.org <mailto:distutils-sig@python.org> > > Subject: [Distutils] Re: PEP-582 concerns > > > > Running entrypoints/executables in the bin directory has been > solved by > the > > node community with npx > (https://www.npmjs.com/package/npx): > > > > > Executes <command> either from a local node_modules/.bin, or > from a > > central cache, installing any packages needed in order for > <command> to > > run. > > > > I built similuar support into pipx as well, so `pipx run ENTRYPOINT` > will > search > > the appropriate `__pypackages__` path for the bin dir and the > entrypoint. > > This is not the only way to solve it, but it seems to be working for > the > node. > > > > Indeed, massively popular projects like `create-react-app` > > (https://github.com/facebook/create-react-app#quick-overview) > include > > npx as their sole installation instructions. > > -- > > Distutils-SIG mailing list -- distutils-sig(a)python.org <mailto:distutils- > sig(a)python.org> > > To unsubscribe send an email to distutils-sig-leave(a)python.org > <mailto:distutils-sig-leave@python.org> > > https://mail.python.org/mailman3/lists/distutils-sig.python.org/ > > Message archived at https://mail.python.org/archives/list/distutils- > > > sig(a)python.org/message/NAXGS7PZ7TELPEW2ZNNHW7N3RQDCPZSN/ > <http://sig@python.org/message/NAXGS7PZ7TELPEW2ZNNHW7N3RQDCPZ > SN/> > >

1 0

Maintainers' summit at PyCon NA
by Sumana Harihareswara 02 Mar '19

02 Mar '19

https://us.pycon.org/2019/hatchery/maintainers/ > The Maintainers Summit will take place on the morning of Saturday, May 4th, the first day of PyCon proper. A part of PyCon’s hatchery program, the Summit is seeking to build a community of practice for project maintainers and key contributors. We seek to help the Python community sustain and grow healthy projects and communities. > > Activities will include talks and mini unconference around technology, community, resourcing, and more as it relates to package maintenance. The call for proposals for lightning talks https://www.papercall.io/pycon-maintainers-summit is open till March 15th. But even if you don't want to propose a talk, I suggest you keep the Summit on your radar -- one of the topic suggestions is: > What tools and techniques have helped you maintain your Python project, and what challenges have yet to be addressed? Potential topics: CI/CD tooling, package layout, setuptools, PyPI, licenses compatibility, process and release tooling And then we could take some of those topics into the sprints. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc

1 0