Re: the new PyPI, coming next month

2018-04-03 Thread Sumana Harihareswara
Reminder that the next livechat is in a little under 2 hours, 1500 UTC. On 04/01/2018 06:54 AM, Sumana Harihareswara wrote: > On 03/31/2018 10:15 PM, Sumana Harihareswara wrote: >> Debian-Python experts, >> >> I'm writing to you in hopes you will forward this to the right places, >> and file relev

Re: the new PyPI, coming next month

2018-04-01 Thread Donald Stufft
> On Apr 1, 2018, at 2:27 AM, Dominik George wrote: > > Hi, > >> To be clear, PGP signatures can still be uploaded and they are still >> available for download, they just don’t appear in the UI anymore. > > So, what does the pypi.debian.net redirector use for uscan? I imagine it > used to sc

Re: the new PyPI, coming next month

2018-04-01 Thread Sumana Harihareswara
On 03/31/2018 10:15 PM, Sumana Harihareswara wrote: > Debian-Python experts, > > I'm writing to you in hopes you will forward this to the right places, > and file relevant bugs against uscan/watch, which I don't quite > understand enough to do myself. And if you want to follow up on > https://gith

Re: the new PyPI, coming next month

2018-03-31 Thread Dominik George
Hi, > To be clear, PGP signatures can still be uploaded and they are still > available for download, they just don’t appear in the UI anymore. So, what does the pypi.debian.net redirector use for uscan? I imagine it used to scrape the website. Can it be changed to use the JSON API? > Longer t

Re: the new PyPI, coming next month

2018-03-31 Thread Sumana Harihareswara
Scott, Thanks for your reply. I wrote about this at a little more length in https://mail.python.org/pipermail/python-list/2018-March/732329.html in response to a related question. But for more discussion on this particular point, the people you want to talk with are in the Python distribution/pack

Re: the new PyPI, coming next month

2018-03-31 Thread Donald Stufft
> On Mar 31, 2018, at 11:23 PM, Scott Kitterman wrote: > > What replaces gpg for ensuring integrity of the uploaded code? To be clear, PGP signatures can still be uploaded and they are still available for download, they just don’t appear in the UI anymore. Longer term I’d *like* to get rid o

Re: the new PyPI, coming next month

2018-03-31 Thread Scott Kitterman
What replaces gpg for ensuring integrity of the uploaded code? Scott K On April 1, 2018 2:15:54 AM UTC, Sumana Harihareswara wrote: >Debian-Python experts, > >I'm writing to you in hopes you will forward this to the right places, >and file relevant bugs against uscan/watch, which I don't quite

the new PyPI, coming next month

2018-03-31 Thread Sumana Harihareswara
Debian-Python experts, I'm writing to you in hopes you will forward this to the right places, and file relevant bugs against uscan/watch, which I don't quite understand enough to do myself. And if you want to follow up on https://github.com/pypa/warehouse/issues/358#issuecomment-337233792 and file