[Distutils] Python people want CPAN and how the latter came about

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

kiorky wrote:
> 
> Lennart Regebro a écrit :
>> On Thu, Dec 24, 2009 at 12:28, kiorky <kiorky at cryptelium.net> wrote:
>>> Why forcing them ?
>>> How about a cronjob or something like that which find packages without
>>> distribution and get from there all distributions possible on their relative
>>> homepages and mirror them on Pypi ?
>> Somebody (including a bot) uploading a package is quite different from
>> *requiring* uploads, IMO.
>>
>> But uploading to PyPI is for 99.999% of packages so easy that if it's
>> not done there may be a reason why they don't want to.
> 
> Unless they don't know how to do.
> 
>> We may choose to ignore that, but we can only do it for licenses we know allow it,
> 99% of pypi packages.
> 
>> which again means that there may be packages listed on PyPI that are
>> not hosted on PyPI.
>>
>> I personally don't understand why third-party services would need this.
>>
> 
> That's quite out of scope which what i wanted to spot but to answear:
> 
> The only problem is with licenses which constrain redistribution.
> We can have logic around trove classifiers to filter them out.
> If the authors miss the trove, that's their fault.
> 
> What i would like to see is just to have most of the distributions on Pypi
> because by experience, pypi get less offline that thirdparty mirrors, and i can
> set mirrors of pypi easyly.

I would say that having a package author *not* upload the distributions
is their right, but I would likely avoid using such a package, just on
that basis.  Note that I build per-project mirrors of the pacakges I use
anyway, in part not to depend on either PyPI or other download sources
for supporting apps in production:  I just prefer to use only
freely-distributable software.


Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAks0RnIACgkQ+gerLs4ltQ61FACgnE0jgLx5jaHTQzMofH+VyT5I
YBMAn079ghQ2lLcOwUraISeew81Pe9jt
=gUew
-----END PGP SIGNATURE-----