[Distutils] Re: Adding namespace support to PyPi (continuation from PyPA Summit/Sprint)

2019-05-08 Thread Lukas Puehringer
> Will the TUF implementation need any changes to support namespaces? > In the minimum security model (PEP 458), namespaces should not affect TUF integration at all, since all target metadata (i.e. metadata about packages uploaded to PyPI) are signed with keys owned by PyPI. In the maximum

[Distutils] Re: Adding namespace support to PyPi (continuation from PyPA Summit/Sprint)

2019-05-07 Thread Wes Turner
On Tue, May 7, 2019 at 10:01 AM Wes Turner wrote: > What do namespaces offer over forking, diffing, reviewing the latest > commits, and installing from your GH fork URL commit hash? IIUC, one of the primary objectives for namespaces is to enable a user to store state like ("We've reviewed this

[Distutils] Re: Adding namespace support to PyPi (continuation from PyPA Summit/Sprint)

2019-05-07 Thread Wes Turner
What do namespaces offer over forking, diffing, reviewing the latest commits, and installing from your GH fork URL commit hash? When I try to install 'westurner/pip' and 'pip' is already installed, what should it do? Should pypa/setuptools_scm include the namespace in the version tag? If my