On 2021-09-29 16:32:05 -0400 (-0400), Sandro Tosi wrote:
One note: I'd consider watching for PyPI instead of GitHub.
there was actually a recent discussion on this list, discouraging
from using PyPI in favor of github, since GH tarball usually
contains docs, tests, and other files useful when building from
source, usually not included in tarball released to users, ie pypi
And as was also pointed out in that discussion, this depends a lot
on the upstream maintainers and their workflow. Some upstreams are
careful to always include all files from the Git worktree within
their sdist tarballs, but may also include required files which
aren't contained in their Git worktree (such as version information,
copyright holders, or release notes extracted from Git tags,
revision history, Git "notes" refs, and so on)... in which cases you
either need their sdist or the full Git repository, since a "GitHub
tarball" of the worktree alone is insufficient to reproduce this
information.
Also since the advent of "wheels" a lot of maintainers are more
willing to make their sdists full archives of their projects (as was
the original intent for a "source distribution" package), since most
users installing directly from PyPI are going to pull a wheel
instead of an sdist when available, and wheels are expected to be
much more pared down anyway.
Like many things in the packaging realm, there is no
one-size-fits-all answer.
--
Jeremy Stanley
-----BEGIN PGP SIGNATURE-----
iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmFU0kNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WCk0Qw//UJqH0Jr2PbWXBMl6Djem68/sRAITeN0gZ9CJ89BdlieGlB5Pobwk0LVR 4T4ySgB79WfZd7naWozmBNexiQDgMSVD0kj18xZFTEc1lDzpLwQCMpju2MVT/Ie4 ExH2g5LFxAcJwKtNulQU0B//pkB5CGpi0BTPofvzsCtCxgmT/13Nqqj0IygxIZtz I9nDwqWFeVLR4YZybLnrpRiY47Uf5htL80e4IY6qyiZJfSi83jH6tZiWrEWVQdUC REm+CVe4C1ftKfk4IIdFSfAte8RzL71zSBjoHEFXop07gyBL7om79wyMHvbXq7wO t6nbiqyxQXdPj0Rqq+TA0ABE7BC3iHnooGI1V2P37z4ElvBnQYIjlAc/qGGsffB7 zfUIYEf+mdTaeCIqQXHTCZjSzPXShTkqLLwMOT9tQPOPXWc81/QIQYessuQXAShX +vS9AvuxTOO/dTF3r5W8iQZXCa2w4un8Ia6/KY64pHfMhXJ/dBwaDlkf6t/a8aZI +ugJiKq8u566IdU/WUj5WnwsbSjigOCcPnGYZvO6kPagP26nBXeXJGHi1XGvbZnO y5zzEh/cw7QO/xk+UgXiXv5VrSVASyIiecUeSAvCG8RVnT03UpHWjxL7ODsVlYQO zyxSN0CV6/HNKTNRQLSVVt7O9LGOTWWqX7aeoGGK/2e9ZCBEhIY=
=eakU
-----END PGP SIGNATURE-----
--- SoupGate-Win32