On 17 February 2024 23:31:43 GMT, Matthias Koeppe <matthiaskoe...@gmail.com> 
wrote:
>On Saturday, February 17, 2024 at 3:04:49 PM UTC-8 Nathan Dunfield wrote:
>
>It seems to me that the "wheel" type Sage packages, each of which is 
>primarily just the version number of a file on PyPI and its hash, is like a 
>"requirements.txt" file (or "conda-lock" file, for that matter) spread over 
>multiple directories.  Personally, I don't view that as packaging a 
>dependency, but rather saving some metadata to aid 
>reliability/reproducibility.
>
>
>I agree with this viewpoint.
>I'll note that in addition to aiding reliability/reproducibility, the 
>metadata in build/pkgs is also important for discoverability and 
>attribution.

Merely pinning down the versions doesn't magically brings you reproducibility, 
unless you are also willing to pin down the OS version, and the hardware. It's 
often just doesn't make sence.
E.g. try to build Sage 8 or 9 on a modern machine with a recent OS. Chances are 
it won't work, despite you knowing all the versions.

Besides, to create a pinning of all the versions of Python packages, just run 
the appropriate pip command, it will produce a full list of all the versions, 
ready to be used to reproduce the environment. No need to maintain these 
pinnings by hand.

Yes, metadata is important, it's just make-work to maintain it manually. We 
don't need to carry out this make-work.


 
>
>Of course one could point out that our format is relatively verbose, as it 
>is spread over several plain-text files -- for simplicity of access with 
>shell scripts. Our format dates back to at least 2015, see the sage-devel 
>thread "Is there an online index of the standard packages shipped in Sage?" 
>(https://groups.google.com/g/sage-devel/c/aEmUmFOwJYQ/m/4pmmYrt3nXQJ) Other 
>distributions such as Pyodide 
>(https://github.com/pyodide/pyodide/tree/main/packages) use contemporary 
>structured datafile formats such as yaml instead. But it is probably safe 
>to say that most Sage users and even most Sage developers do not look at 
>the contents of the build/pkgs/ directory. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"sage-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sage-devel+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/sage-devel/14A14401-9869-4DA1-9C53-7C37A0FD5466%40gmail.com.

Reply via email to