Am 22.10.19 um 01:48 schrieb Brett Cannon:
Working at Microsoft means I get asked semi-regularly about why the Python community has not set up a [DefinitelyTyped](https://definitelytyped.org/) equivalent, and I have historically said 🤷♂️. I have now been asked this enough times that I'm asking all of you if there's a specific reason beyond lack of time and resources so I can give a more informed answer next time this question comes up? I found https://github.com/python/typeshed/issues/2491 which didn't suggest any particular issue with the idea other than time and resources.
Or I guess another way to phrase the question is if someone created a site like DefinitelyTyped where things were highly automated and anyone could provide type stubs for any project on PyPI -- and maybe even automated initial type stubs -- would people be interested in such a thing or see any reasons why people would balk at it or not use it?
It's just time and resources. Work on this has already started in the third-party-dist branch in the typeshed repository, but the main blocker in my opinion is the lack of support for namespaces in pypi/warehouse. Without it we are opening a significant security hole, because people will expect to be able to just call "pip install types.whatever" and get the typings, so it's very easy to name-squat and run malicious code on a developer's machine. (https://github.com/pypa/warehouse/issues/4967) I looked into adding support myself, but failed even setting up a development environment. I don't think we should start a separate project. As Ethan points out, we still want a certain amount of review, especially since typing is fairly complex and there are many pitfalls. (https://github.com/srittau/type-stub-pep is aimed to provide better documentation for this when we actually get around to finish it.) But we could certainly use more people involved in typeshed and having a decent website for the project would also be quite useful. - Sebastian