| Store | Cart

Re: [Distutils] PEP 503 - Simple Repository API

From: Donald Stufft <don...@stufft.io>
Thu, 24 Sep 2015 12:03:36 -0400
On September 7, 2015 at 9:38:00 PM, Donald Stufft (don...@stufft.io) wrote:
> > I'm OK with adding the attribute to links, though we should still  > mandate the> location. Neither pip nor setuptools will do anything with the  > PGP signatures> but some other tooling might. The legacy behavior of "just try  > the link" will> still work then, and if someone wants to do it more efficiently  > the attribute> is there. I'm not sure it's going to be generally useful since  > the signing on> PyPI doesn't really have a coherent threat model so it doesn't  > really protect> against much.
I’ve gone ahead and done this (see https://hg.python.org/peps/rev/9090e66cc8c7).

I’m going to go ahead and accept this PEP now. I think any further modifications are going to go too far beyond the goal of documenting the current state of the API and would require PEPs in their own right.

-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA


_______________________________________________
Distutils-SIG maillist  -  Dist...@python.org
https://mail.python.org/mailman/listinfo/distutils-sig
Recent Messages in this Thread
Donald Stufft Sep 05, 2015 01:17 am
Donald Stufft Sep 05, 2015 01:19 am
Nick Coghlan Sep 05, 2015 03:09 am
Marius Gedminas Sep 05, 2015 08:44 am
M.-A. Lemburg Sep 05, 2015 09:43 am
Donald Stufft Sep 05, 2015 04:12 pm
Donald Stufft Sep 05, 2015 04:15 pm
Paul Moore Sep 07, 2015 02:43 pm
Wes Turner Sep 07, 2015 05:05 pm
Nick Coghlan Sep 08, 2015 12:43 am
Nick Coghlan Sep 08, 2015 01:07 am
Wes Turner Sep 07, 2015 05:29 pm
M.-A. Lemburg Sep 07, 2015 09:05 pm
Donald Stufft Sep 08, 2015 01:37 am
Wes Turner Sep 08, 2015 03:19 am
Donald Stufft Sep 24, 2015 04:03 pm
Messages in this thread