[Distutils] Re: Question on Python Package scanning

2019-02-08 Thread Wayne Werner
On Fri, Feb 8, 2019, 6:18 AM Thomas Kluyver I forgot to mention that there is work/discussion about supporting code > signing, in PEPs 458 and 480. But it's a complicated topic, and code > signing is not the silver bullet that some commentators seem to think it is. > Yeah, I can sign malicious

[Distutils] Re: Should an sdist/MANIFEST.in include docs and tests?

2018-09-09 Thread Wayne Werner
It depends on whether or not you require docs or tests with your software. Most of the libraries that I've written require neither - nobody is going to be running the tests, and if they want the documentation then they're probably going to check out the library page on readthedocs. If you had

[Distutils] Re: pipenv and pip

2018-08-20 Thread Wayne Werner
On Mon, Aug 20, 2018, 7:45 AM Paul Moore wrote: > On Mon, 20 Aug 2018 at 13:21, Wes Turner wrote: > > > > Something as simple as reading a requirements.txt file into JSON must > either reimplement or wrongly import from pip._internal. > > Or copy pip's code and maintain it locally... > > >

[Distutils] Re: Issue with using pip install

2018-07-30 Thread Wayne Werner
Are you using an older version of Python? On Mon, Jul 30, 2018, 5:53 PM Singhal, Monika wrote: > I am setting issue installing any package using pip. I am getting below > error. Do you have any idea on what could be causing the issue? > > > > You should consider upgrading via the 'pip install

[Distutils] Re: packaging guide and private packages index

2018-07-30 Thread Wayne Werner
When I was in that situation I just reverse engineered a very *very* simple PyPi clone: https://github.com/waynew/flaskpypi There aren't actually any docs, but you just have to put your packages in a specific directory and it will serve them up for you. You just have to tell pip to use the url

Re: [Distutils] Improving Communication

2018-04-21 Thread Wayne Werner
On Fri, Apr 20, 2018, 9:54 PM Wes Turner wrote: > > > On Friday, April 20, 2018, Donald Stufft wrote: > >> >> >> * A lot of the technology in this stack is particularly old, and lacks a >> lot of the modern day affordances that newer things have. An

Re: [Distutils] Invalid Packages

2018-02-16 Thread Wayne Werner
I don't know if it would be worth the effort, but I wonder if a Stack Overflow-esque rep system for packages would work. In a perfect world, I'm sure, but maybe not so much in ours. -W On Feb 16, 2018 6:24 PM, "Matt Gieger" wrote: > I would like to see a clause added to

Re: [Distutils] Documenting project_urls to suggesting thanking or funding mechanisms

2018-02-15 Thread Wayne Werner
FWIW, some people aren't in it for the money, but would enjoy gratitude . I'd personally do `{'funding': 'https://fundme.example.com', 'thanks': ' https://saythanks.io/to/waynew '}`

Re: [Distutils] Transfering modules

2017-08-18 Thread Wayne Werner
You could potentially also run `/path/to/python3.6.2/bin/python3 -m pip install $(/path/to/python3.6.1/bin/python3 -m pip freeze)`, naturally replacing path with the correct path. pip freeze lists the versions of things you have installed. HTH, Wayne On Fri, Aug 18, 2017, 3:03 AM Nick Coghlan

Re: [Distutils] PEP 517 - specifying build system in pyproject.toml

2017-05-25 Thread Wayne Werner
FWIW, I was just reading an article about writing libraries to just operate on streams and totally ignore stdout/stdin/file io, and just leave the IO to something else. It may be a good idea to define the spec as purely operating on byte and text streams, then leave where those streams go as an

Re: [Distutils] The sad and insecure state of commercial private package indexes

2017-04-21 Thread Wayne Werner
On Fri, 21 Apr 2017, Jannis Gebauer wrote: They could, of course, fix this very easily by running their own PyPi mirrors. And now they have two problems. On the one hand, I agree that there is a potential from some abuse and vulnerabilities... but I think that I'd argue that if you're in a

[Distutils] Fwd: Packaging multiple wheels in the same archive

2016-11-22 Thread Wayne Werner
This should've gone to the list but apparently the google groups doesn't have me signed up? If you get a double post, sorry about that -- Forwarded message -- From: Wayne Werner <waynejwer...@gmail.com> Date: Tue, Nov 22, 2016 at 2:59 PM Subject: Re: [Distutils] Packaging mu

Re: [Distutils] Switch PyPA from IRC to Gitter or similar

2016-06-10 Thread Wayne Werner
On Fri, 10 Jun 2016, Jason R. Coombs wrote: Personally, the downsides to moving to Gitter (other than enacting the move itself) seem negligible. What do you think? What downsides am I missing? That may be the main issue. Given the responses thus far, it seems like most people are happy with

Re: [Distutils] on integrated docs in Warehouse and PyPI

2016-06-04 Thread Wayne Werner
On Sat, Jun 4, 2016 at 8:33 AM, Nathaniel Smith wrote: > How do you propose to implement and support this hypothetical doc service, > given PyPI's resource constraints? Who's going to implement and maintain > it? What other features are you suggesting be de-prioritized so that

Re: [Distutils] PIL install fails: that was to be expected?

2016-05-31 Thread Wayne Werner
On Tue, May 31, 2016 at 2:33 AM, Reinout van Rees wrote: > > Yes, it should be Pillow and yes I'm in complete agreement that everything > should be on pypi and yes my colleague can fix this with a quick branch. > But I just wanted to make sure that nothing major is broken

Re: [Distutils] comparison of configuration languages

2016-05-07 Thread Wayne Werner
On May 6, 2016 10:14 PM, "Donald Stufft" wrote: > > While I personally prefer YAML to any of the options on a purely syntax based > level, when you weigh in all the other considerations for this I think that it > makes sense to go with TOML for it. I feel the same way. I use

Re: [Distutils] Basic Markdown Readme Support

2016-05-03 Thread Wayne Werner
On Tue, 3 May 2016, Jim Fulton wrote: In my last job, I had to use a suite of tools (from a single company that I won't name but is easy to guess :) ) for which no 2 tools used the same dialect of Markdown. :( Which begs the question, which dialect of Markdown are you suggesting we support. :)

Re: [Distutils] The mypy package

2016-04-18 Thread Wayne Werner
On Mon, Apr 18, 2016 at 10:21 AM, Jim Fulton wrote: > I suggest measuring activity by downloads, not releases. Sometimes > maintained packages are boring enough not to need releases, while many > projects depend on them. > I don't know about on pypi, but I know in general

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-16 Thread Wayne Werner
On Tue, 16 Feb 2016, Paul Moore wrote: On 16 February 2016 at 11:05, Matthias Klose wrote: You may call this sour grapes, but in the light of people installing these wheels to replace/upgrade system installed eggs, it becomes an issue. It's fine to use such wheels in a

Re: [Distutils] Installing packages using pip

2015-11-16 Thread Wayne Werner
On Nov 15, 2015 5:11 PM, "Paul Moore" wrote: > > On 15 November 2015 at 22:20, Robert McGibbon wrote: > > But I think dll/pyd files from extension modules present more of a > > challenge, since they're left open. > > Good point, I'd forgotten about those.

Re: [Distutils] The future of invoking pip

2015-11-10 Thread Wayne Werner
With all of the weirdness involved, it makes me wonder - could there be a better way? If we waved our hands and were able to magically make Python package management perfect, what would that look like? Would that kind of discussion even be valuable? On Tue, Nov 10, 2015, 6:22 PM Nathaniel Smith

Re: [Distutils] The future of invoking pip

2015-11-09 Thread Wayne Werner
On Mon, Nov 9, 2015 at 6:01 AM, Paul Moore wrote: > > The one thing that *is* special about pip is that it actually > *modifies* the Python installation it runs under. So running pip with > the "wrong" Python makes persistent changes somewhere you weren't > expecting.

Re: [Distutils] The future of invoking pip

2015-11-08 Thread Wayne Werner
On Sat, Nov 7, 2015, 5:41 PM Paul Moore wrote: On 7 November 2015 at 22:21, Antoine Pitrou wrote: > The actual question is: which problem are you trying to solve *that > current users are actually experiencing*? Typically, people using "pip" to install

Re: [Distutils] Brian Goetz - Stewardship: the Sobering Parts

2015-10-31 Thread Wayne Werner
First, do no harm, eh? (only 14 minutes into it so far) On Thu, Oct 29, 2015 at 3:51 PM, Donald Stufft wrote: > This was shown to me today, and I thought I’d share it here since it > pretty much applies 100% to what we’re doing on this list too (other than > the fact the

Re: [Distutils] What's special about numpy, scipy, ...was: Remove distutils, was: red, green, refactor ...

2015-10-26 Thread Wayne Werner
On Thu, Oct 22, 2015 at 11:27 AM, Chris Barker wrote: > On Thu, Oct 22, 2015 at 8:47 AM, Thomas Güttler < > guettl...@thomas-guettler.de> wrote: > > >> > I have a dream: For packaging and building package provides only >> **data**. Data is condition-less: No single

Re: [Distutils] Time for a setuptools_lite??

2015-10-21 Thread Wayne Werner
On Wed, Oct 21, 2015 at 12:32 PM, David Cournapeau wrote: > > > On Wed, Oct 21, 2015 at 6:03 PM, Ronny Pfannschmidt < > opensou...@ronnypfannschmidt.de> wrote: > >> why does that have to be in setuptools ?! >> >> if we want a new light system to begin with, shouldn't it be

Re: [Distutils] Time for a setuptools_lite??

2015-10-21 Thread Wayne Werner
On Wed, Oct 21, 2015 at 11:42 AM, Chris Barker wrote: > But a lot was "wrong" with setuptools -- most prominently (in my mind > anyway) that it put too many kind-sorta orthogonal stuff into one package: > building, installing, distributing, managing version, managing >