Enforcing consistent metadata for packages

[abravalheri (Anderson Bravalheri)]

@pf_moore

The impression I get is that the only backend that can produce dynamic metadata in this second (metadata 2.2) sense is setuptools, and then only if the value is marked as dynamic in pyproject.toml, or there’s no [project] section in pyproject.toml.

Just to clarify: if the metadata version is not marked as 2.2+ the assumption that core metadata cannot differ from PKG-INFO and METADATA does not hold, right?

I am asking this because I am not confident that setuptools is in a position right now that we can perform enforcement/consistency checks and just start producing 2.2/2.3 metadata. (So that is expectation management).