Bug#1003716: ITP: python-pure-eval -- Safely evaluate Python AST nodes

[Gordon Ball]

Package: wnpp
Severity: wishlist
Owner: Gordon Ball 
X-Debbugs-Cc: debian-python@lists.debian.org, gor...@chronitis.net

* Package name: python-pure-eval
  Version : 0.2.1
  Upstream Author : Alex Hall
* URL : https://github.com/alexmojaki/pure_eval
* License : MIT
  Programming Lang: Python
  Description : Safely evaluate Python AST nodes

This is a Python package that lets you safely evaluate certain AST nodes
without triggering arbitrary code that may have unwanted side effects.

This is a dependency on python-stack-data, itself a dependency of
IPython 8.0

This will be maintained in the debian-python team.

Re: Update packages to recent version

[Thomas Goirand]

On 1/13/22 21:25, Mechtilde Stehmann wrote:

Hallo,

I intend to package paperless-ng.

Many of its dependencies are packaged in Debian but in an older version. 
You can see the list at 
https://salsa.debian.org/mechtilde/paperless-ng/-/wikis/home


Are there any hints to upload newer versions?

Kind regards


Hi,

If you're looking at the requirements.txt file from upstream to tell 
what version you need in Debian, this is a *very* wrong approach.


What's happening is that your upstream is using the requirements.txt to 
tell pip what version to fetch for paperless-ng testing. This is, in no 
way, some indication of what should be in your package.


For example, the requirements.txt contains:
pytz==2021.1

however, I'd be really surprised if paperless-ng wouldn't work with some 
other version of python3-tz (even an older one).


What's harder then, is to know what is the minimum version of each 
component for your application. However, running internal tests at build 
time may help you to know.


I hope this helps,
Cheers,

Thomas Goirand (zigo)