[Distutils] A process for removal of PyPi entries

Chris Withers chris at simplistix.co.uk
Sat Jun 1 17:00:05 CEST 2013


On 31/05/2013 21:45, Noah Kantrowitz wrote:
>
> On May 31, 2013, at 1:34 PM, Tres Seaver wrote:
>
>> On 05/31/2013 09:18 AM, Lennart Regebro wrote:
>>> I'd be OK with after six months automatically removing packages that
>>> has only one owner/maintainer, and that owner/maintainer has no other
>>> packages, and the package has no available downloads, and no contact
>>> information on either package nor registered user.
>>
>> Why all the extras:  if somebody wants to claim a project name, but can't
>> upload a release for six months, they should just lose.  I would actually
>> be willing to have that cut down to a day:  trying to grab the name
>> before registering / uploading a release should result in loss of the claim.
>
> +1, I think this should just be treated as a form validation thing. It is a detail of the protocol that you upload a dist definition before the files, but I don't think we should consider it a valid PyPI entry until a file is uploaded (especially now that the default mode is to not scrape external sites). As we switch to not scraping, anything with no files should just vanish IMO, at which point it is available for registration again. If someone happens to ninja-upload between the setup.py register and setup.py upload, I think we can just throw an error message since chances of that happening are so amazingly low.

I'm afraid I need to -1 on this. If I'm developing a new package, I try 
and avoid putting a release on PyPI until I have something stable, but 
I'll often put up an entry on PyPI explaining where the code is being 
developed.

Working on a project for a year only to find that someone else has 
stolen your package name on PyPI (playing devils advocate here, lets say 
they saw the development of GitHub and knew a release was brewing, etc) 
and having to go through and rename everything seems unfairly painful...

Chris

-- 
Simplistix - Content Management, Batch Processing & Python Consulting
            - http://www.simplistix.co.uk


More information about the Distutils-SIG mailing list