PEP 710 - Recording the provenance of installed packages

No worries. PEPs are intended to act as both a technical specification and an argument for the feature being described. That means that the PEP needs to be written in such a way as to persuade the reader that the feature is worth implementing, without making too many assumptions about how much knowledge the reader might have. If it helps, I tend to assume that I’m writing for someone who’s being asked to implement the proposal - such a person is typically being asked to do a non-trivial amount of work, and doesn’t necessarily have a need for the feature themselves (and may not even understand what the fetaure is for).

It appears that @dstufft is the sponsor for this PEP - if you haven’t done so already, you might want to discuss with him how to frame the arguments the PEP is making.

4 Likes

The “Security Considerations” heading on the Direct URL page is now live, so PEP 710 can link directly to it where appropriate: Direct URL Data Structure - Python Packaging User Guide

(these paragraphs were already there, they just didn’t previously have their own linkable heading)

2 Likes