[Distutils] RFC: PEP 541 - Package Index Name Retention

[M.-A. Lemburg]

On 13.01.2017 19:08, Lukasz Langa wrote:
> Invalid projects
> ----------------
> 
> A project published on the Package Index meeting ANY of the following
> is considered invalid and will be removed from the Index:
> 
> * project does not conform to Terms of Use;
> * project is malware (designed to exploit or harm systems or users);
> * project contains illegal content;
> * project violates copyright or licenses;

This probably also needs to list "trademarks" and "patents",
as we've already had some cases where packages were violating
trademarks/patents and had to be removed (not only regarding the
name of the package but also regarding contents of the package or
functionality). This is already mentioned in the current terms,
but better make it more explicit here as well.

Likewise, a trademark owner should be able to reserve project
names with the trademark to avoid any such issues to begin with,
e.g. https://pypi.python.org/pypi/Python is such a project :-)

> * project is name squatting (package has no functionality or is
>   empty);
> * project name, description, or content violates the Code of Conduct;
>   or
> * project is abusing the Package Index for purposes it was not
>   intended.
> 
> If you find a project that might be considered invalid, create
> a support request [7]_.

It would also be good to add some wording which makes it clear
that the PSF Board has the final say in any disputes and can
have a project removed/reassigned after careful consideration
even when not meeting all the requirements listed in the PEP.

As an example, the last two bullets you mention above will
often be subject to additional judgement. The board would then have
to decide these on a case-by-case basis.

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Experts (#1, Jan 13 2017)
>>> Python Projects, Coaching and Consulting ...  http://www.egenix.com/
>>> Python Database Interfaces ...           http://products.egenix.com/
>>> Plone/Zope Database Interfaces ...           http://zope.egenix.com/
________________________________________________________________________

::: We implement business ideas - efficiently in both time and costs :::

   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/
                      http://www.malemburg.com/