[Catalog-sig] Allowing the upload of .py files at PyPI

M.-A. Lemburg mal at egenix.com
Thu Feb 14 23:42:48 CET 2013


On 14.02.2013 23:38, Donald Stufft wrote:
> On Thursday, February 14, 2013 at 5:34 PM, M.-A. Lemburg wrote:
>> I don't follow the reasoning here. What's the difference between
>> uploading a .py file and a .tar.gz file ?
>>
>> AFAIK, the only reason why the file extensions are restricted is to
>> prevent people from uploading MP3s, movies or other material that doesn't
>> belong on PyPI - not because there are security concerns.
>>
> Personally (might by different for Nick) it's less a problem with uploading .py 
> files and more a problem with allowing arbitrary names.

Ok, then I guess allowing "[a-zA-Z0-9_-]+\.py" is enough for starters...
we don't need to support the whole Unicode range on PyPI ;-)

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Feb 14 2013)
>>> Python Projects, Consulting and Support ...   http://www.egenix.com/
>>> mxODBC.Zope/Plone.Database.Adapter ...       http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::::: Try our mxODBC.Connect Python Database Interface for free ! ::::::

   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/


More information about the Catalog-SIG mailing list