From lists at zopyx.com  Mon Nov  8 17:28:39 2010
From: lists at zopyx.com (Andreas Jung)
Date: Mon, 08 Nov 2010 17:28:39 +0100
Subject: [Catalog-sig] c.pypi.python.org moving/moved
Message-ID: <4CD82537.7040302@zopyx.com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,

the mirror

c.pypi.python.org

moved to a different machine.

Please switch the DNS to

178.77.74.179

The old server will remain available and active until
you switched the DNS.

Thanks,
Andreas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQGUBAEBAgAGBQJM2CU3AAoJEADcfz7u4AZjfXALv1FfdDjzoq/crg87ZPARhIb2
45OG/t75A3ydrCZVAD+RP80Zn/GLI+NrkDmuH4cZfFXzJ+R5OUpaRJ2Y65T8McNs
1h89zNet/ChbEeRz2vkjd6vaZn5NCmMvG9tfbugHlr7MrcWqD2wgLI0GRFgjd4Ng
JkZIChDHvFZnuqHDvbPA/Z/Z+1ZecvFrf4FulRGi7cD29suf7wU9c0MZbzKxBE7e
VGnHT6Psfs86kV/hE/xCUw935PKV+3JrwmfrUR8vqbfl/7EVspxEwFvg+Y0VL2Yn
cnz2mblNVjoWlY5qFybja3lL7VDoom/+YMn6EddKrgidWW+t0JnmVl2dZA49YVap
GCnixkO6X8dX/sEZ1Ta08640F+YuNho3pMM3noKubMJPMY3XBjoWGjZkP/mCxR4f
A9xKNrBsthjwJvRL6SJxnSDT+Q/igF1qhddiNDDjQxN+GC/H7S5WKAMnVMmkCdML
Tg3hsUyOvYZupas35Qnm3KF2bhyURL4=
=ddHV
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lists.vcf
Type: text/x-vcard
Size: 316 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20101108/f6c78a5b/attachment.vcf>

From sridharr at activestate.com  Thu Nov 11 02:08:17 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Wed, 10 Nov 2010 17:08:17 -0800
Subject: [Catalog-sig] ANN: PyPM Index
Message-ID: <4CDB4201.3070505@activestate.com>

Hi,

I'd like to announce the availability of PyPM Index - frontend to 
browse/search Python packages available in the PyPM repository:

   http://code.activestate.com/pypm/

The site also has some nifty features that, I think, may be of use to 
package authors:

   1. Author pages
   2. Build RSS notification (released with a setup.py bug?)
   3. Dependency information

For more details, see this blog post:
http://www.activestate.com/blog/2010/11/pypm-index-python-developers

--
Sridhar Ratnakumar
Python Developer
ActiveState, The Dynamic Language Experts
http://www.activestate.com/

From noah at coderanger.net  Thu Nov 11 03:11:57 2010
From: noah at coderanger.net (Noah Kantrowitz)
Date: Wed, 10 Nov 2010 18:11:57 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <4CDB4201.3070505@activestate.com>
References: <4CDB4201.3070505@activestate.com>
Message-ID: <03f301cb8145$d1bca9c0$7535fd40$@net>

> -----Original Message-----
> From: catalog-sig-bounces+noah=coderanger.net at python.org
> [mailto:catalog-sig-bounces+noah=coderanger.net at python.org] On Behalf
> Of Sridhar Ratnakumar
> Sent: Wednesday, November 10, 2010 5:08 PM
> To: catalog-sig
> Subject: [Catalog-sig] ANN: PyPM Index
> 
> Hi,
> 
> I'd like to announce the availability of PyPM Index - frontend to
> browse/search Python packages available in the PyPM repository:
> 
>    http://code.activestate.com/pypm/
> 
> The site also has some nifty features that, I think, may be of use to
> package authors:
> 
>    1. Author pages
>    2. Build RSS notification (released with a setup.py bug?)
>    3. Dependency information
> 
> For more details, see this blog post:
> http://www.activestate.com/blog/2010/11/pypm-index-python-developers

Out of curiosity, wasn't there some musing earlier that people shouldn't be
mirroring PyPI data in a commercial context? Or at least should offer some
kind of opt-out?

--Noah


From sridharr at activestate.com  Thu Nov 11 03:32:27 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Wed, 10 Nov 2010 18:32:27 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <03f301cb8145$d1bca9c0$7535fd40$@net>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
Message-ID: <4CDB55BB.6090503@activestate.com>

On 11/10/2010 6:11 PM, Noah Kantrowitz wrote:
>> -----Original Message-----
>> >  From:catalog-sig-bounces+noah=coderanger.net at python.org
>> >  [mailto:catalog-sig-bounces+noah=coderanger.net at python.org] On Behalf
>> >  Of Sridhar Ratnakumar
>> >  I'd like to announce the availability of PyPM Index - frontend to
>> >  browse/search Python packages available in the PyPM repository:
>> >      http://code.activestate.com/pypm/
>> >[...]
>> >  For more details, see this blog post:
>> >  http://www.activestate.com/blog/2010/11/pypm-index-python-developers
> Out of curiosity, wasn't there some musing earlier that people shouldn't be
> mirroring PyPI data in a commercial context? Or at least should offer some
> kind of opt-out?

Could you point me to the specific mailing thread where it was discussed 
that commercial services must be disallowed from mirroring PyPI's data - 
specifically hosted source distributions and metadata as exposed by its 
XMLRPC interface?

It is probably worth mentioning here that we have been maintaining a 
copy of PyPI's data, updated incrementally each day, for about a year 
now. Martin v. L?wis, a PyPI admin, has been aware of this too -- I 
haven't received any notice telling ActiveState to stop mirroring PyPI's 
data.

-srid

From noah at coderanger.net  Thu Nov 11 03:49:58 2010
From: noah at coderanger.net (Noah Kantrowitz)
Date: Wed, 10 Nov 2010 18:49:58 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <4CDB55BB.6090503@activestate.com>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
	<4CDB55BB.6090503@activestate.com>
Message-ID: <03f601cb814b$21b261e0$651725a0$@net>

> -----Original Message-----
> From: Sridhar Ratnakumar [mailto:sridharr at activestate.com]
> Sent: Wednesday, November 10, 2010 6:32 PM
> To: Noah Kantrowitz
> Cc: 'catalog-sig'
> Subject: Re: [Catalog-sig] ANN: PyPM Index
> 
> On 11/10/2010 6:11 PM, Noah Kantrowitz wrote:
> >> -----Original Message-----
> >> >  From:catalog-sig-bounces+noah=coderanger.net at python.org
> >> >  [mailto:catalog-sig-bounces+noah=coderanger.net at python.org] On
> Behalf
> >> >  Of Sridhar Ratnakumar
> >> >  I'd like to announce the availability of PyPM Index - frontend to
> >> >  browse/search Python packages available in the PyPM repository:
> >> >      http://code.activestate.com/pypm/
> >> >[...]
> >> >  For more details, see this blog post:
> >> >  http://www.activestate.com/blog/2010/11/pypm-index-python-
> developers
> > Out of curiosity, wasn't there some musing earlier that people
> shouldn't be
> > mirroring PyPI data in a commercial context? Or at least should offer
> some
> > kind of opt-out?
> 
> Could you point me to the specific mailing thread where it was
> discussed
> that commercial services must be disallowed from mirroring PyPI's data
> -
> specifically hosted source distributions and metadata as exposed by its
> XMLRPC interface?
> 
> It is probably worth mentioning here that we have been maintaining a
> copy of PyPI's data, updated incrementally each day, for about a year
> now. Martin v. L?wis, a PyPI admin, has been aware of this too -- I
> haven't received any notice telling ActiveState to stop mirroring
> PyPI's
> data.

It was about Softpedia or one of those sites. Not saying it is the same
thing, but you seem to be seeing package builds based on code downloaded en
masse from PyPI if I am reading this correctly. Mirroring the metadata I
understand, not sure if I like the idea of my code on a website with a "Buy
Now" link (I understand you aren't selling the actual project, just the
service of the build farm, but for a pure-python package that sounds an
awful lot like splitting hairs).

--Noah


From sridharr at activestate.com  Thu Nov 11 04:02:50 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Wed, 10 Nov 2010 19:02:50 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <03f601cb814b$21b261e0$651725a0$@net>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
	<4CDB55BB.6090503@activestate.com>
	<03f601cb814b$21b261e0$651725a0$@net>
Message-ID: <4CDB5CDA.10307@activestate.com>

On 11/10/2010 6:49 PM, Noah Kantrowitz wrote:
> It was about Softpedia or one of those sites. Not saying it is the same
> thing, but you seem to be seeing package builds based on code downloaded en
> masse from PyPI if I am reading this correctly.

Just to clarify, we are not pulling PyPI's data (source and/or metadata) 
"en masse" -- the update happens incrementally[1] each day, based on the 
releases that happen on that day, so as to not put too much load on 
PyPI's servers.

 > Mirroring the metadata I
> understand, not sure if I like the idea of my code on a website with a "Buy
> Now" link (I understand you aren't selling the actual project, just the
> service of the build farm, but for a pure-python package that sounds an
> awful lot like splitting hairs).

What we are selling, as part ActivePython Business Edition, is the 
binary builds (via a convenient installer) for a special subset of 
packages[2] among other things (big iron, support). Except these, 
thousands of packages are made freely available to ActivePython 
Community Edition users.

-srid

[1] We use the `changelog(yesterday)` API to determine the packages to 
update, http://wiki.python.org/moin/PyPiXmlRpc

[2] About 30 of them, http://code.activestate.com/pypm/tag:business-edition/

From noah at coderanger.net  Thu Nov 11 04:09:17 2010
From: noah at coderanger.net (Noah Kantrowitz)
Date: Wed, 10 Nov 2010 19:09:17 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <4CDB5CDA.10307@activestate.com>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
	<4CDB55BB.6090503@activestate.com>
	<03f601cb814b$21b261e0$651725a0$@net>
	<4CDB5CDA.10307@activestate.com>
Message-ID: <03ff01cb814d$d43ddcc0$7cb99640$@net>

> -----Original Message-----
> From: Sridhar Ratnakumar [mailto:sridharr at activestate.com]
> Sent: Wednesday, November 10, 2010 7:03 PM
> To: Noah Kantrowitz
> Cc: 'catalog-sig'
> Subject: Re: [Catalog-sig] ANN: PyPM Index
> 
> On 11/10/2010 6:49 PM, Noah Kantrowitz wrote:
> > It was about Softpedia or one of those sites. Not saying it is the
> same
> > thing, but you seem to be seeing package builds based on code
> downloaded en
> > masse from PyPI if I am reading this correctly.
> 
> Just to clarify, we are not pulling PyPI's data (source and/or
> metadata)
> "en masse" -- the update happens incrementally[1] each day, based on
> the
> releases that happen on that day, so as to not put too much load on
> PyPI's servers.
> 
>  > Mirroring the metadata I
> > understand, not sure if I like the idea of my code on a website with
> a "Buy
> > Now" link (I understand you aren't selling the actual project, just
> the
> > service of the build farm, but for a pure-python package that sounds
> an
> > awful lot like splitting hairs).
> 
> What we are selling, as part ActivePython Business Edition, is the
> binary builds (via a convenient installer) for a special subset of
> packages[2] among other things (big iron, support). Except these,
> thousands of packages are made freely available to ActivePython
> Community Edition users.

All of my projects that I looked were marked as requiring a subscription:
http://code.activestate.com/pypm/pyzen/. " Builds marked with a lock icon
are only available via PyPM to users with a current ActivePython Business
Edition subscription." Perhaps this is just a bug? There is also the part on
the side about buying a redistribution license.

--Noah


From sridharr at activestate.com  Thu Nov 11 04:50:29 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Wed, 10 Nov 2010 19:50:29 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <03ff01cb814d$d43ddcc0$7cb99640$@net>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
	<4CDB55BB.6090503@activestate.com>
	<03f601cb814b$21b261e0$651725a0$@net>
	<4CDB5CDA.10307@activestate.com>
	<03ff01cb814d$d43ddcc0$7cb99640$@net>
Message-ID: <4CDB6805.9010407@activestate.com>

On 11/10/2010 7:09 PM, Noah Kantrowitz wrote:
>> >  What we are selling, as part ActivePython Business Edition, is the
>> >  binary builds (via a convenient installer) for a special subset of
>> >  packages[2] among other things (big iron, support). Except these,
>> >  thousands of packages are made freely available to ActivePython
>> >  Community Edition users.
> All of my projects that I looked were marked as requiring a subscription:
> http://code.activestate.com/pypm/pyzen/. " Builds marked with a lock icon
> are only available via PyPM to users with a current ActivePython Business
> Edition subscription." Perhaps this is just a bug?
No, not a bug. I just forgot to note that Windows 64-bit in general 
requires a Business Edition license to install any package from PyPM. 
Therefore, all of your projects' binary builds under 
http://code.activestate.com/pypm/author:Noah-Kantrowitz/ are available 
for free except on Windows 64-bit.

> There is also the part on
> the side about buying a redistribution license.
Yes, an OEM license is required if you want to commercially 
*redistribute* (not use) ActivePerl, ActivePython or ActiveTcl (the core 
interpreter and its support libraries).

-srid

From noah at coderanger.net  Thu Nov 11 05:03:23 2010
From: noah at coderanger.net (Noah Kantrowitz)
Date: Wed, 10 Nov 2010 20:03:23 -0800
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <4CDB6805.9010407@activestate.com>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
	<4CDB55BB.6090503@activestate.com>
	<03f601cb814b$21b261e0$651725a0$@net>
	<4CDB5CDA.10307@activestate.com>
	<03ff01cb814d$d43ddcc0$7cb99640$@net>
	<4CDB6805.9010407@activestate.com>
Message-ID: <AD5F221E-1A20-4C89-A27C-E6387B28CA5F@coderanger.net>


On Nov 10, 2010, at 7:50 PM, Sridhar Ratnakumar wrote:

> On 11/10/2010 7:09 PM, Noah Kantrowitz wrote:
>>> >  What we are selling, as part ActivePython Business Edition, is  
>>> the
>>> >  binary builds (via a convenient installer) for a special subset  
>>> of
>>> >  packages[2] among other things (big iron, support). Except these,
>>> >  thousands of packages are made freely available to ActivePython
>>> >  Community Edition users.
>> All of my projects that I looked were marked as requiring a  
>> subscription:
>> http://code.activestate.com/pypm/pyzen/. " Builds marked with a  
>> lock icon
>> are only available via PyPM to users with a current ActivePython  
>> Business
>> Edition subscription." Perhaps this is just a bug?
> No, not a bug. I just forgot to note that Windows 64-bit in general  
> requires a Business Edition license to install any package from  
> PyPM. Therefore, all of your projects' binary builds under http://code.activestate.com/pypm/author:Noah-Kantrowitz/ 
>  are available for free except on Windows 64-bit.

Which I'm not sure I like. I certainly can't force you to change given  
the terms of the BSD license, but it seems odd that a package could  
have an egg or sdist on PyPI that will work just fine under Win64 and  
yet you charge for it on your system. There are certainly packages out  
there for which commercially supported Windows builds are a huge win  
for many people, but to apply that brush to everything single package  
on the free, public index? It just makes me uneasy.

>> There is also the part on
>> the side about buying a redistribution license.
> Yes, an OEM license is required if you want to commercially  
> *redistribute* (not use) ActivePerl, ActivePython or ActiveTcl (the  
> core interpreter and its support libraries).

It could be misinterpreted from that page to imply that a license is  
required to redistribute that particular package.

--Noah


From martin at v.loewis.de  Thu Nov 11 20:25:25 2010
From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=)
Date: Thu, 11 Nov 2010 20:25:25 +0100
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <03f301cb8145$d1bca9c0$7535fd40$@net>
References: <4CDB4201.3070505@activestate.com>
	<03f301cb8145$d1bca9c0$7535fd40$@net>
Message-ID: <4CDC4325.4080103@v.loewis.de>

> Out of curiosity, wasn't there some musing earlier that people shouldn't be
> mirroring PyPI data in a commercial context? Or at least should offer some
> kind of opt-out?

I personally don't object to such activities, as long as the offering is
not misleading (e.g. by suggesting that you have to pay for software
that is actually available for free as well). I'd rather see the free
market decide on the fate of such services.

In the specific case, the service being offered apparently is to provide
prebuilt packages. Denying such a service would be unfair, IMO, as other
companies/organizations are also allowed to distribute Python packages,
often in a repackaged form (e.g. Ubuntu packages or the Enthought
distribution).

Of course, it would be the responsibility of the distributor of such
a repackaging to comply to the respective licenses of each package.
Using the metadata, this might still be possible in an automated manner.
If authors feel that their licensing conditions are violated, they
should contact ActiveState and ask for corrections.

OTOH, I'm not surprised by opposition to this kind of service, since
people might mistake the web pages as suggesting that you actually need
to use pypm to install the respective packages - when this is actually
only needed to install the PyPM build, and you might well get around
installing it just as easily in a different form.

Regards,
Martin

From renesd at gmail.com  Thu Nov 11 20:43:45 2010
From: renesd at gmail.com (=?ISO-8859-1?Q?Ren=E9_Dudfield?=)
Date: Thu, 11 Nov 2010 19:43:45 +0000
Subject: [Catalog-sig] ANN: PyPM Index
In-Reply-To: <4CDB4201.3070505@activestate.com>
References: <4CDB4201.3070505@activestate.com>
Message-ID: <AANLkTimb__xu0pdjH5CRPow_T5XqWuaKnvBsJBZTw+iN@mail.gmail.com>

This is AWESOME.

Binary packages for multiple platforms is my favourite part.

Thanks heaps.


On Thu, Nov 11, 2010 at 1:08 AM, Sridhar Ratnakumar <
sridharr at activestate.com> wrote:

> Hi,
>
> I'd like to announce the availability of PyPM Index - frontend to
> browse/search Python packages available in the PyPM repository:
>
>  http://code.activestate.com/pypm/
>
> The site also has some nifty features that, I think, may be of use to
> package authors:
>
>  1. Author pages
>  2. Build RSS notification (released with a setup.py bug?)
>  3. Dependency information
>
> For more details, see this blog post:
> http://www.activestate.com/blog/2010/11/pypm-index-python-developers
>
> --
> Sridhar Ratnakumar
> Python Developer
> ActiveState, The Dynamic Language Experts
> http://www.activestate.com/
> _______________________________________________
> Catalog-SIG mailing list
> Catalog-SIG at python.org
> http://mail.python.org/mailman/listinfo/catalog-sig
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20101111/a5ca5195/attachment.html>

From lists at zopyx.com  Sat Nov 13 08:56:44 2010
From: lists at zopyx.com (Andreas Jung)
Date: Sat, 13 Nov 2010 08:56:44 +0100
Subject: [Catalog-sig] c.pypi.python.org moving/moved
In-Reply-To: <4CD82537.7040302@zopyx.com>
References: <4CD82537.7040302@zopyx.com>
Message-ID: <4CDE44BC.4050205@zopyx.com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Could someone please care about the DNS switch asap?

Andreas

Andreas Jung wrote:
> Hi there,
> 
> the mirror
> 
> c.pypi.python.org
> 
> moved to a different machine.
> 
> Please switch the DNS to
> 
> 178.77.74.179
> 
> The old server will remain available and active until
> you switched the DNS.
> 
> Thanks,
> Andreas

_______________________________________________
Catalog-SIG mailing list
Catalog-SIG at python.org
http://mail.python.org/mailman/listinfo/catalog-sig


- -- 
ZOPYX Limited           | zopyx group
Charlottenstr. 37/1     | The full-service network for Zope & Plone
D-72070 T?bingen        | Produce & Publish
www.zopyx.com           | www.produce-and-publish.com
- ------------------------------------------------------------------------
E-Publishing, Python, Zope & Plone development, Consulting


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQGUBAEBAgAGBQJM3kS7AAoJEADcfz7u4AZjprsLv20LsO5qqGdssR9FR3cOn2IO
9oEST0DSkC8J4/9uIpYn+GVTjfj/3RPmKc3zuc3zWF0tZ2jO6uhXeuTycYacT6Eh
2XxdOknZra1RYiPfZn9rUa28dr0aXfa1RrsW/vePgQ1IyB67jZyL77CYnr4gRBng
nup+VtlOTAioO3k6aHII746+t51Km5nGnvYsZhqinGeimQesm95QvokI6dwi6Gf9
tqVYxiqe/3LnxbYUT3r98dnhNXKi4lIWbYGLOW+N7oTcdLFRD97rcS+Ooyv445x0
3O6c11JbgW1VUlmnacxz6MohmlDkWZULp3Ef2eO8NF02HKUEeINofJ9jNoFMFbFj
j6g1iFE9Uo6/xXa8O5aMeJMfRxTmKtBcHMYnNS6L5yVfE5hx2TIDrA8ajtXln/6+
xIzLsakoxFm4ivMhRd0csVTodzraVq4F5zXUXo75gnXPkxv76bYFywKxM4uW7uCH
ou1wmNH2Bahb8Th/0PH6Mc5guBHK1B4=
=j3T0
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lists.vcf
Type: text/x-vcard
Size: 316 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20101113/b40bb2b9/attachment.vcf>

From martin at v.loewis.de  Sat Nov 13 09:31:32 2010
From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=)
Date: Sat, 13 Nov 2010 09:31:32 +0100
Subject: [Catalog-sig] c.pypi.python.org moving/moved
In-Reply-To: <4CDE44BC.4050205@zopyx.com>
References: <4CD82537.7040302@zopyx.com> <4CDE44BC.4050205@zopyx.com>
Message-ID: <4CDE4CE4.7000106@v.loewis.de>

Am 13.11.2010 08:56, schrieb Andreas Jung:
> Could someone please care about the DNS switch asap?

Done! sorry it took so long.

Please wait another 24h for the change to propagate.

Notice that this was a CNAME record before; I now made it an A record.

Regards,
Martin

From jwilk at jwilk.net  Tue Nov 23 20:29:28 2010
From: jwilk at jwilk.net (Jakub Wilk)
Date: Tue, 23 Nov 2010 20:29:28 +0100
Subject: [Catalog-sig] PyPI ssh access
In-Reply-To: <4B4BA0DC.5060209@v.loewis.de>
References: <4B4BA0DC.5060209@v.loewis.de>
Message-ID: <20101123192928.GB683@jwilk.net>

* "Martin v. L?wis" <martin at v.loewis.de>, 2010-01-11, 23:06:
>I have now set up SSH access for PyPI. The procedure works like this:
>
>1. upload your SSH key(s) to your PyPI account.
>2. Connect using 'ssh -T submit at pypi.python.org', and send a single HTTP
>   request. PyPI will associate the request with the respective PyPI
>   account.

I redirect ssh's stdin/stdout to a normal TCP socket using socat[0], so 
that I could use the connection with distutils or my web browser. It 
works very well, but I have two feature requests.

1) Could
<base href="http://pypi.python.org/pypi"/>
be replaced with:
<base href="/pypi"/>
? That would allow me to access PyPI with my browser in a more natural 
way.


2) Could Authorization: headers be entirely ignored when user is already 
authorized with SSH? That would allow me not to store my password in 
.pypirc, even without patching distutils.


[0] http://www.dest-unreach.org/socat/socat-version2.html

-- 
Jakub Wilk

From sridharr at activestate.com  Thu Nov 25 07:09:09 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Wed, 24 Nov 2010 22:09:09 -0800
Subject: [Catalog-sig] ANN: PyPM Index - build notification by author;
	import data
In-Reply-To: <4CDB4201.3070505@activestate.com>
References: <4CDB4201.3070505@activestate.com>
Message-ID: <4CEDFD85.5070409@activestate.com>

Hi,

There are, now, a couple more features to the previously announced PyPM 
Index that I think would be of interest if you are a developer of Python 
packages on PyPI.

1. an RSS feed for each author that shows the recently failing builds 
(eg: to identify bugs in releases)
2. The "import" feature shows if multiple packages provide the same 
import (eg: site-packages/tests) ... and, map packages to imports and 
vice-versa. See the "import conflicts" section for interesting set of cases.

For more details, see my blog post:
http://www.activestate.com/blog/2010/11/python-pypm-index-author-build-notification-imports-recipes-integration

--
Sridhar Ratnakumar
Python Developer
ActiveState, The Dynamic Language Experts
http://www.activestate.com/

On 11/10/2010 5:08 PM, Sridhar Ratnakumar wrote:
> Hi,
>
> I'd like to announce the availability of PyPM Index - frontend to 
> browse/search Python packages available in the PyPM repository:
>
>   http://code.activestate.com/pypm/
>
> The site also has some nifty features that, I think, may be of use to 
> package authors:
>
>   1. Author pages
>   2. Build RSS notification (released with a setup.py bug?)
>   3. Dependency information
>
> For more details, see this blog post:
> http://www.activestate.com/blog/2010/11/pypm-index-python-developers
>


From alexis at notmyidea.org  Fri Nov 26 01:05:47 2010
From: alexis at notmyidea.org (=?ISO-8859-1?Q?Alexis_M=E9taireau?=)
Date: Fri, 26 Nov 2010 00:05:47 +0000
Subject: [Catalog-sig] ANN: PyPM Index - build notification by author;
 import data
In-Reply-To: <4CEDFD85.5070409@activestate.com>
References: <4CDB4201.3070505@activestate.com>
	<4CEDFD85.5070409@activestate.com>
Message-ID: <4CEEF9DB.40703@notmyidea.org>

Hi,

Is there any place other than here to make some feedback on what you're
proposing via pypm ?

I can see that the emails appears in clear for instance, and I don't
think it is a good idea. Spammers bots are looking for that.

Also, even if the service you propose is great (that's good to know
there are some ways to get binary packages easily), adding another tool
(pypm) to the stack, and refering only to this one on your pages seems a
bit confusing. People start to use tools like setuptools/distribute and
pip, and, oh, there is another one !

Otherwise, I think you're adding some great things to the current index:
I do like to have a feed with the failing builds and the list of imports
with the same name.

cheers,
Alex


Le 11/25/2010 06:09 AM, Sridhar Ratnakumar a ?crit :
> Hi,
> 
> There are, now, a couple more features to the previously announced PyPM
> Index that I think would be of interest if you are a developer of Python
> packages on PyPI.
> 
> 1. an RSS feed for each author that shows the recently failing builds
> (eg: to identify bugs in releases)
> 2. The "import" feature shows if multiple packages provide the same
> import (eg: site-packages/tests) ... and, map packages to imports and
> vice-versa. See the "import conflicts" section for interesting set of
> cases.
> 
> For more details, see my blog post:
> http://www.activestate.com/blog/2010/11/python-pypm-index-author-build-notification-imports-recipes-integration
> 
> 
> -- 
> Sridhar Ratnakumar
> Python Developer
> ActiveState, The Dynamic Language Experts
> http://www.activestate.com/
> 
> On 11/10/2010 5:08 PM, Sridhar Ratnakumar wrote:
>> Hi,
>>
>> I'd like to announce the availability of PyPM Index - frontend to
>> browse/search Python packages available in the PyPM repository:
>>
>>   http://code.activestate.com/pypm/
>>
>> The site also has some nifty features that, I think, may be of use to
>> package authors:
>>
>>   1. Author pages
>>   2. Build RSS notification (released with a setup.py bug?)
>>   3. Dependency information
>>
>> For more details, see this blog post:
>> http://www.activestate.com/blog/2010/11/pypm-index-python-developers
>>
> 
> _______________________________________________
> Catalog-SIG mailing list
> Catalog-SIG at python.org
> http://mail.python.org/mailman/listinfo/catalog-sig


From sridharr at activestate.com  Fri Nov 26 01:40:55 2010
From: sridharr at activestate.com (Sridhar Ratnakumar)
Date: Thu, 25 Nov 2010 16:40:55 -0800
Subject: [Catalog-sig] ANN: PyPM Index - build notification by author;
 import data
In-Reply-To: <4CEEF9DB.40703@notmyidea.org>
References: <4CDB4201.3070505@activestate.com>	<4CEDFD85.5070409@activestate.com>
	<4CEEF9DB.40703@notmyidea.org>
Message-ID: <4CEF0217.4060609@activestate.com>

On 11/25/2010 4:05 PM, Alexis M?taireau wrote:
> Hi,
>
> Is there any place other than here to make some feedback on what you're
> proposing via pypm ?

There is a 'Give Site Feedback' link in the footer of the site. Or
activepython-feedback at activestate.com - but you can also directly email me.

> I can see that the emails appears in clear for instance, and I don't
> think it is a good idea. Spammers bots are looking for that.

Actually, they don't. Emails are obfustcated using ROT13 and decoded in 
the browser. Take a look at the HTML source.

> Also, even if the service you propose is great (that's good to know
> there are some ways to get binary packages easily), adding another tool
> (pypm) to the stack, and refering only to this one on your pages seems a
> bit confusing. People start to use tools like setuptools/distribute and
> pip, and, oh, there is another one !

I suppose we could discuss about the *relation* between the various
tools in the site FAQ: pip and easy_install are primarily source-based
installers (except - easy_install supports egg/binst too), while PyPM is
a binary-based installer .. somewhat similar to apt-get/rpm. I generally
recommend <http://goo.gl/mUTBd> ActivePython users to install the
package using PyPM, and only if that fails, attempt the same using
pip/easy_install ... which could also go to the FAQ.

> Otherwise, I think you're adding some great things to the current index:
> I do like to have a feed with the failing builds and the list of imports
> with the same name.

I'm glad that you like it!

-srid

From tjreedy at udel.edu  Fri Nov 26 23:53:51 2010
From: tjreedy at udel.edu (Terry Reedy)
Date: Fri, 26 Nov 2010 17:53:51 -0500
Subject: [Catalog-sig] Add Release Schedule box to bugs pages.
Message-ID: <icpdps$u05$1@dough.gmane.org>

If I go to python.org, there is a release schedule box at the bottom of 
the left-side menu. Suggestion: add same box to bugs.python.org pages, 
which I visit *much* more often.

When I sent this suggestion to webmaster at python.org, Michael Foord
said this idea should be posted here instead, as "The bug tracker is 
administered on the catalog-sig mailing list"

-- 
Terry Jan Reedy


From noah at coderanger.net  Sat Nov 27 01:07:45 2010
From: noah at coderanger.net (Noah Kantrowitz)
Date: Fri, 26 Nov 2010 16:07:45 -0800
Subject: [Catalog-sig] Add Release Schedule box to bugs pages.
In-Reply-To: <icpdps$u05$1@dough.gmane.org>
References: <icpdps$u05$1@dough.gmane.org>
Message-ID: <000c01cb8dc7$1f50d2f0$5df278d0$@net>

I think he might have meant the infrastructure-sig group. Catalog-sig is
mostly about PyPI (give or take some overlap with the packaging SIG).

--Noah

> -----Original Message-----
> From: catalog-sig-bounces+noah=coderanger.net at python.org
> [mailto:catalog-sig-bounces+noah=coderanger.net at python.org] On Behalf
> Of Terry Reedy
> Sent: Friday, November 26, 2010 2:54 PM
> To: catalog-sig at python.org
> Subject: [Catalog-sig] Add Release Schedule box to bugs pages.
> 
> If I go to python.org, there is a release schedule box at the bottom of
> the left-side menu. Suggestion: add same box to bugs.python.org pages,
> which I visit *much* more often.
> 
> When I sent this suggestion to webmaster at python.org, Michael Foord
> said this idea should be posted here instead, as "The bug tracker is
> administered on the catalog-sig mailing list"
> 
> --
> Terry Jan Reedy
> 
> _______________________________________________
> Catalog-SIG mailing list
> Catalog-SIG at python.org
> http://mail.python.org/mailman/listinfo/catalog-sig