On 16 May 2014 22:13, Carl Meyer <[email protected]> wrote: > The question is _who_ tells them about this external index (or multiple > external indices, one per project), how, and when. It's not like we can > just post about it on distutils-sig and assume that every user of a > legacy project will find out about it :-)
Ah, I see your point now. Thanks. > I was proposing that that mechanism would be to auto-populate the new > PEP 470 external-index-url metadata for any unresponsive project after > some period of time with this auto-generated "external index" - that way > pip would tell them about the index URLs they need automatically, under > the existing wording of PEP 470. That approach would need to be done by > a PyPI admin. Yes, that would work, but as you say it would require a PyPI admin. Also, it's risky as we can only make an assumption that a project is unmaintained, and messing with a project's metadata on the basis of an assumption is risky. > I don't really see any viable approach that wouldn't either need > official buy-in from PyPI or pip in some form. My expectation was that putting the information it in the PEP, announcing it on distutils-sig and maybe the pip documentation or a note displayed when a user uses --allow-XXX in a sufficiently new version of pip, is the best we could do. But yes, it's a long way from ideal :-( Paul _______________________________________________ Distutils-SIG maillist - [email protected] https://mail.python.org/mailman/listinfo/distutils-sig
