[Distutils] py2-none-linux_x86_64 tag

2014-11-12 Thread Daniel Holth
By popular demand, the development version of wheel now includes the tag for packages that include a binary but don't need a particular Python or ABI - for example, cffi or ctypes packages using dlopen. It's just after the implementation-specific tags. There is not a flag to get bdist_wheel to tag

Re: [Distutils] Replacing md5 hashes for packages on PyPI

2014-11-12 Thread Richard Jones
+1 pending detail Sent from my mobile - please excuse any brevity. On 13 Nov 2014 12:08, "Ian Cordasco" wrote: > +1 from me as well > > On Wed, Nov 12, 2014 at 1:41 PM, Donald Stufft wrote: > > > >> On Nov 12, 2014, at 2:34 PM, Alex Gaynor wrote: > >> > >> Hi everybody! > >> > >> Right now, Py

Re: [Distutils] Replacing md5 hashes for packages on PyPI

2014-11-12 Thread Ian Cordasco
+1 from me as well On Wed, Nov 12, 2014 at 1:41 PM, Donald Stufft wrote: > >> On Nov 12, 2014, at 2:34 PM, Alex Gaynor wrote: >> >> Hi everybody! >> >> Right now, PyPI provides MD5 hashes for packages, which is used by pip to >> check >> for corruption in transit. I'd like to propose we replace

Re: [Distutils] Replacing md5 hashes for packages on PyPI

2014-11-12 Thread Donald Stufft
> On Nov 12, 2014, at 2:34 PM, Alex Gaynor wrote: > > Hi everybody! > > Right now, PyPI provides MD5 hashes for packages, which is used by pip to > check > for corruption in transit. I'd like to propose we replace MD5 with SHA256 for > PyPi, and move to deprecate MD5 support in pip and setupto

[Distutils] Replacing md5 hashes for packages on PyPI

2014-11-12 Thread Alex Gaynor
Hi everybody! Right now, PyPI provides MD5 hashes for packages, which is used by pip to check for corruption in transit. I'd like to propose we replace MD5 with SHA256 for PyPi, and move to deprecate MD5 support in pip and setuptools. Why should we do this? MD5 is broken. Collision resistance is

Re: [Distutils] windows overlay files

2014-11-12 Thread Steve Dower
Robin Becker wrote: > Hi, > I hope some windows expert can assist me with a production problem. We > support a > user using windows who reports problems concerning missing attributes. Using > GotoMeeting we inspected the file together and see that the attribute should > be > present. I asked them

[Distutils] windows overlay files

2014-11-12 Thread Robin Becker
Hi, I hope some windows expert can assist me with a production problem. We support a user using windows who reports problems concerning missing attributes. Using GotoMeeting we inspected the file together and see that the attribute should be present. I asked them to zip up the reportlab folder

Re: [Distutils] logs/download numbers on pypi decreased a lot

2014-11-12 Thread holger krekel
On Tue, Nov 11, 2014 at 15:13 -0500, Donald Stufft wrote: > > On Nov 11, 2014, at 7:22 AM, holger krekel wrote: > > > > On Tue, Nov 11, 2014 at 07:10 -0500, Donald Stufft wrote: > >>> Hi Donald, all, > >>> > >>> i noticed that for several packages daily download numbers are only a > >>> tenth or