[Distutils] PyPI abuse

Nick Timkovich prometheus235 at gmail.com
Tue Apr 11 09:37:16 EDT 2017


Other devils advocate: having *someone* park them, even if they're not the
trademark holder, might be useful. If someone wants to go over what should
be a relatively low bar to usurp the "holder", great. I'm thinking of the
apple/android/angular/osx/ubuntu crop.

On Tue, Apr 11, 2017 at 4:41 AM, <tritium-list at sdamon.com> wrote:

> Playing devil's advocate here, do we put a value judgement on the content
> of a module on pypi, even if that content is limited to a single function
> that just prints?  What does that mean for something like a 'metapackage'
> (a package on pypi that has no content, and exists only to install other
> modules - like a project that has been modularized into other packages on
> pypi)?  I think this should be handled on a case by case basis, where
> someone else comes along wanting to use a name currently being used by one
> of these obvious placeholders.
>
> That said, this looks sketchy, and I would not be shocked to find these
> names being held hostage on some auction site somewhere.  If that is the
> case, burninate them.
>
> > -----Original Message-----
> > From: Distutils-SIG [mailto:distutils-sig-bounces+tritium-
> > list=sdamon.com at python.org] On Behalf Of Lele Gaifax
> > Sent: Monday, April 10, 2017 7:10 PM
> > To: Distutils-Sig at Python.Org
> > Subject: [Distutils] PyPI abuse
> >
> > Hi all,
> >
> > I know it's been debated here whether there should be some kind of
> > filtering
> > on uploaded packages on PyPI, but today someone, either an automated
> > tool or a
> > silly guy, started to upload dozens of "Xxx 0.1.0" where "Xxx" is some
> > "surname", here is latest variant: https://pypi.python.org/pypi/
> Lykov/0.1.0
> >
> > Is there something that can/should be done to stop it?
> >
> > Thank you,
> > ciao, lele.
> > --
> > nickname: Lele Gaifax | Quando vivrò di quello che ho pensato ieri
> > real: Emanuele Gaifas | comincerò ad aver paura di chi mi copia.
> > lele at metapensiero.it  |                 -- Fortunato Depero, 1929.
> >
> > _______________________________________________
> > Distutils-SIG maillist  -  Distutils-SIG at python.org
> > https://mail.python.org/mailman/listinfo/distutils-sig
>
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> https://mail.python.org/mailman/listinfo/distutils-sig
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20170411/8fada525/attachment.html>


More information about the Distutils-SIG mailing list