Bug#745342: ITP: twine -- Collection of utilities for interacting with PyPI

2014-04-20 Thread Zygmunt Krynicki
Package: wnpp
Severity: wishlist
Owner: Zygmunt Krynicki 

* Package name: twine
  Version : 1.3.1
  Upstream Author : Donald Stufft 
* URL : https://github.com/dstufft/twine
* License : Apache 2.0 
  Programming Lang: Python 
  Description : Collection of utilities for interacting with PyPI


Twine is a utility for interacting with PyPI.

The biggest reason to use twine is that python setup.py upload uploads
files over plaintext. This means anytime you use it you expose your
username and password to a MITM attack. Twine uses only verified TLS to
upload to PyPI protecting your credentials from theft.

Secondly it allows you to precreate your distribution files. python
setup.py upload only allows you to upload something that you’ve created
in the same command invocation. This means that you cannot test the
exact file you’re going to upload to PyPI to ensure that it works before
uploading it.

Finally it allows you to pre-sign your files and pass the .asc files
into the command line invocation (twine upload twine-1.0.1.tar.gz
twine-1.0.1.tar.gz.asc). This enables you to be assured that you’re
typing your gpg passphrase into gpg itself and not anything else since
you will be the one directly executing gpg --detach-sign -a .

I'd like to maintain twine inside PAPT 


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140420175256.11180.89862.reportbug@silverblade



Bug#745342: ITP: twine -- Collection of utilities for interacting with PyPI

2014-08-17 Thread Julian Gilbey
On Sun, Apr 20, 2014 at 07:52:56PM +0200, Zygmunt Krynicki wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Zygmunt Krynicki 
> 
> * Package name: twine
>   Version : 1.3.1
>   Upstream Author : Donald Stufft 
> * URL : https://github.com/dstufft/twine
> * License : Apache 2.0 
>   Programming Lang: Python 
>   Description : Collection of utilities for interacting with PyPI
> 
> Twine is a utility for interacting with PyPI.
> [...]
> 
> I'd like to maintain twine inside PAPT 

Hi Zygmunt,

This sounds like a great idea.  Are you planning to go ahead with
this?

   Julian


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140818000604.ga11...@d-and-j.net



Bug#745342: ITP: twine -- Collection of utilities for interacting with PyPI

2014-08-17 Thread Zygmunt Krynicki
Hi

I've packaged twine and its dependency 'requests' but they are stuck
in review. Requests was recently rejected and twine cannot be uploaded
without that first.

Thanks
ZK

On Mon, Aug 18, 2014 at 2:06 AM, Julian Gilbey  wrote:
> On Sun, Apr 20, 2014 at 07:52:56PM +0200, Zygmunt Krynicki wrote:
>> Package: wnpp
>> Severity: wishlist
>> Owner: Zygmunt Krynicki 
>>
>> * Package name: twine
>>   Version : 1.3.1
>>   Upstream Author : Donald Stufft 
>> * URL : https://github.com/dstufft/twine
>> * License : Apache 2.0
>>   Programming Lang: Python
>>   Description : Collection of utilities for interacting with PyPI
>>
>> Twine is a utility for interacting with PyPI.
>> [...]
>>
>> I'd like to maintain twine inside PAPT
>
> Hi Zygmunt,
>
> This sounds like a great idea.  Are you planning to go ahead with
> this?
>
>Julian


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cajn_i48vvxwcpk9sc4kudzzyf0ddzjkhrb6xbnqg-xldb01...@mail.gmail.com



Bug#745342: ITP: twine -- Collection of utilities for interacting with PyPI

2014-08-18 Thread Julian Gilbey
On Mon, Aug 18, 2014 at 08:49:46AM +0200, Zygmunt Krynicki wrote:
> Hi
> 
> I've packaged twine and its dependency 'requests' but they are stuck
> in review. Requests was recently rejected and twine cannot be uploaded
> without that first.

Oh rubbish :-(

Thanks for working on this, though!

   Julian


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140818094551.ga25...@d-and-j.net