What metadata/installability checks should Warehouse check uploads for?
See original GitHub issueRecently, a project that I worked on pushed a new version to PyPI and it turned out to be completely broken, because the setup.py
was referencing a README.rst
file that was not present in the sdist.
It would be awesome if PyPI could so checking of packages that are uploaded.
To start with, it could create a virtualenv and try pip installing the package and make sure that exits with status 0. Perhaps it could also try easy_install to make sure that works too.
There are more elaborate things that could be done like run tests if they are included (many packages don’t bundle their tests though) or try to validate the RST, but I think just pip installing is a very good first start, as it detects packages that are completely broken.
Issue Analytics
- State:
- Created 10 years ago
- Reactions:4
- Comments:30 (23 by maintainers)
Top Results From Across the Web
What metadata/installability checks should Warehouse check ...
What metadata /installability checks should Warehouse check uploads for? ... It would be awesome if PyPI could so checking of packages that ...
Read more >PackagingWG/2019-06-20-Warehouse - PSF Wiki
Re: autodetection of malicious uploads: we're being funded to build infrastructure that will also help with spam, metadata, installability, and ...
Read more >Metadata in Data Warehouse (ETL) Explained With Examples
This Tutorial Explains The Role of Metadata in ETL, Examples & Types of Metadata, Metadata Repository & Challenges in Metadata Management.
Read more >2 Set up clinical data models - Oracle Help Center
A clinical data model is a set of logically related tables. You need one input model for each data source. You create target...
Read more >7 Warehouse Inspections You Need to Carry Out | ShipBob
There is also pressure to ensure that everything has been checked and accounted for to avoid accidents, OSHA fines, or even lawsuits. 7 ......
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Name
is required and validatedVersion
is required and validatedDescription
is optional (and IMO should remain so)Author
is optional (this field is also not required to contain contact information, so might not make sense to require)Classifiers
is optional (and IMO should remain so,Requies-Python
is probably what we should focus on here)Example of how CPAN runs tests on packages:
http://ppm4.activestate.com/i686-linux/5.16/1600/M/MS/MSABRAMO/App-TarColor-0.011.d/log-20120801T133902.txt
We can’t let Perl show us up! 😄
ActiveState is active in Python as well as Perl – maybe they are interesting in hosting a service like this like they do for the Perl community?