[Distutils] waf can be used to compile Python extension modules

Vinay Sajip vinay_sajip at yahoo.co.uk
Sat Mar 22 00:37:07 CET 2014



> This strategy does not generally try to eliminate arbitrary code
> execution during builds - builds are an inherently arbitrary-code
> process. But once the build has happened most installs should work
> without arbitrary code execution.


I don't think builds should be a *completely* arbitrary-code process. I understand well that user-defined code should be accommodated, but IMO this should be within a declarative framework with well-defined hooks, otherwise it will ultimately lead to the same problems that setup.py has.

Regards,

Vinay Sajip



More information about the Distutils-SIG mailing list