Alternatively, he could have just produced a wheel from any checkout at all if the MANIFEST.in excluded a file that would otherwise have been installed. This sort of thing is why I'm an advocate that we should only build sdists from checkouts, and wheels from sdists (at the low level anyways, even if the UI allows people to appear to create a wheel straight from a checkout).

On Apr 26 2016, at 10:07 am, Ionel Cristian Mărieș <contact@ionelmc.ro> wrote:

It looks like you have published a wheel built from a dirty checkout. The 1.1.3 zip sdist produces a clean wheel, as expected. ​You should use https://pypi.python.org/pypi/check-manifest in your release process.