[Distutils] PEP 458: Surviving a Compromise of PyPI: Round 1

2013-11-16 Thread Trishank Karthik Kuppusamy
Hello everyone, Donald, Justin and I have co-authored a PEP that recommends a comprehensive security solution to allow PyPI to secure its users against a wide array of compromises. The gist of the PEP is that the changes to PyPI are essentially invisible to users and developers unless an attack i

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Donald Stufft
On Nov 16, 2013, at 8:58 PM, Nick Coghlan wrote: > > On 17 Nov 2013 08:07, "Donald Stufft" wrote: > > > > Wheels are way faster for pure python though, so they should totally be > > uploaded :D > > In chatting to someone proposing a patch for IPython to start publishing > wheels, I noted tha

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Nick Coghlan
On 17 Nov 2013 08:07, "Donald Stufft" wrote: > > Wheels are way faster for pure python though, so they should totally be > uploaded :D In chatting to someone proposing a patch for IPython to start publishing wheels, I noted that wheels don't yet work even for distributions with essential logic in

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Donald Stufft
Wheels are way faster for pure python though, so they should totally be uploaded :D On Nov 16, 2013, at 5:06 PM, Paul Moore wrote: > On 16 November 2013 21:59, Donald Stufft wrote: >> And sdist! > > Sorry - I assumed compiled C extensions. You'll always provide sdist, > and unless you're distr

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Paul Moore
On 16 November 2013 21:59, Donald Stufft wrote: > And sdist! Sorry - I assumed compiled C extensions. You'll always provide sdist, and unless you're distributing a compiled extension, that's all you'll need. (Wheel distributions even for pure Python is the intention in the future, but they aren't

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Donald Stufft
And sdist! On Nov 16, 2013, at 3:15 PM, Paul Moore wrote: > On 16 November 2013 17:59, Thomas Heller wrote: >> What is the preferred format to distribute Python-3 libraries (for Windows) >> nowadays: wininst, egg, ...? > > Wheel is the format of the future. > > pip install will only use wheel

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Paul Moore
On 16 November 2013 17:59, Thomas Heller wrote: > What is the preferred format to distribute Python-3 libraries (for Windows) > nowadays: wininst, egg, ...? Wheel is the format of the future. pip install will only use wheels (recent versions of pip) wininst doesn't support virtualenv egg is only

Re: [Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Alex Clark
Thomas Heller ctypes.org> writes: > > What is the preferred format to distribute Python-3 libraries (for > Windows) nowadays: wininst, egg, ...? > > It has been a long time that I have released something. I don't know about preferred, but for Pillow we create all of them: https://pypi.python

[Distutils] Distribution format for Python3 libraries

2013-11-16 Thread Thomas Heller
What is the preferred format to distribute Python-3 libraries (for Windows) nowadays: wininst, egg, ...? It has been a long time that I have released something. Thanks, Thomas ___ Distutils-SIG maillist - Distutils-SIG@python.org https://mail.pytho

Re: [Distutils] Warehouse and XMLRPC

2013-11-16 Thread Richard Jones
OK, that explains the error we saw. The only thing implemented at /pypi is the XML-RPC interface. We haven't had time to implement the rest of the legacy interface yet. On 16 November 2013 19:41, Matt Wilkie wrote: > sorry, I should have been more explicit: I just clicked on the link in my > br

Re: [Distutils] Warehouse and XMLRPC

2013-11-16 Thread Matt Wilkie
sorry, I should have been more explicit: I just clicked on the link in my browser (FF), no rpc call was made. I expected a "not for browsers" message or similar rather than an error. -matt On Sat, Nov 16, 2013 at 12:29 AM, Richard Jones wrote: > Hi Matt, > > What method you were calling? What

Re: [Distutils] Warehouse and XMLRPC

2013-11-16 Thread Richard Jones
Hi Matt, What method you were calling? What arguments did you pass? What xml-rpc library you were using? Actual code would be ideal. Thanks, Richard On 16 November 2013 18:12, Matt Wilkie wrote: > > On Fri, Nov 15, 2013 at 7:12 PM, Donald Stufft wrote: > >> https://preview-pypi.pytho