[Distutils] Building a Python package build service for warehouse

Alex Grönholm alex.gronholm at nextday.fi
Tue Feb 6 08:19:07 EST 2018


I'd be all for it if I wasn't buried under a ton of other things to do. 
Happy hacking and good luck!


Jannis Gebauer kirjoitti 06.02.2018 klo 10:33:
> Hi!
>
> I’m currently working on a package build server. My goal is to produce 
> useful additional meta data for all packages available on PyPi.
>
> This includes:
>
> - Transitive dependencies
> - Is the package installable under Python 3?
> - Various automated “code quality” tests like pylint, pyflakes, pep8, 
> mccabe etc.
> - Automated security tests
> - (possibly changelogs, commit logs)
> - Licenses!
>
> The main idea is to run the build process in a restricted “sandbox” 
> docker container that pulls the package from PyPi, installs it and 
> runs a couple of tools on it. Code is still pretty rough, nothing to 
> look at at the moment I’m afraid.
>
> Is there any interest in working on this together? Maybe even with the 
> goal to make it an open API that can be consumed by warehouse et al.?
>
> Interested in any thoughts on this!
>
> Cheers,
>
> Jannis
>
> P.S: I’m currently crunching trough the data on a 96 CPU cluster. 
> There’s an API available, but it’s sitting behind HTTP Basic Auth as 
> it is basically an endpoint for remote code execution (and throws lots 
> of 500s :D). Send me a mail to jay at pyup.io <mailto:jay at pyup.io> if you 
> want to play around with it.
>
>
>
>
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> https://mail.python.org/mailman/listinfo/distutils-sig

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20180206/f4ff3656/attachment.html>


More information about the Distutils-SIG mailing list