Re: the new PyPI, coming next month

2018-03-31 Thread Dominik George
Hi, > To be clear, PGP signatures can still be uploaded and they are still > available for download, they just don’t appear in the UI anymore. So, what does the pypi.debian.net redirector use for uscan? I imagine it used to scrape the website. Can it be changed to use the JSON API? > Longer t

Re: the new PyPI, coming next month

2018-03-31 Thread Sumana Harihareswara
Scott, Thanks for your reply. I wrote about this at a little more length in https://mail.python.org/pipermail/python-list/2018-March/732329.html in response to a related question. But for more discussion on this particular point, the people you want to talk with are in the Python distribution/pack

Re: the new PyPI, coming next month

2018-03-31 Thread Donald Stufft
> On Mar 31, 2018, at 11:23 PM, Scott Kitterman wrote: > > What replaces gpg for ensuring integrity of the uploaded code? To be clear, PGP signatures can still be uploaded and they are still available for download, they just don’t appear in the UI anymore. Longer term I’d *like* to get rid o

Re: the new PyPI, coming next month

2018-03-31 Thread Scott Kitterman
What replaces gpg for ensuring integrity of the uploaded code? Scott K On April 1, 2018 2:15:54 AM UTC, Sumana Harihareswara wrote: >Debian-Python experts, > >I'm writing to you in hopes you will forward this to the right places, >and file relevant bugs against uscan/watch, which I don't quite

the new PyPI, coming next month

2018-03-31 Thread Sumana Harihareswara
Debian-Python experts, I'm writing to you in hopes you will forward this to the right places, and file relevant bugs against uscan/watch, which I don't quite understand enough to do myself. And if you want to follow up on https://github.com/pypa/warehouse/issues/358#issuecomment-337233792 and file