PyPI as a Project repository vs. Name registry (a.k.a. PyPI namesquatting, e.g. for Fedora packages)

[ncoghlan (Alyssa Coghlan)]

As far as the original write-up goes, I can confirm that the problem I ran into with dnf was a C/C++ build system that directly created a system package for the system Python bindings, rather than emitting an sdist that could build fresh bindings for any Python installation.

Reworking the build system was more work than I was prepared to take on, so I instead reserved the name on PyPI and then allowed the use of system site packages in the project that needed those bindings.

[encukou (Petr Viktorin)]

@dustin

@encukou

But what about unblocking the packages as maintainers get ready to share the code on PyPI?

I think this is still preferable over any potential for PEP 541 requests or additional user confusion.

The rpl package is waiting for being unblocked since October. Is there anything I can do to help unblock it?
As I feared, PyPI admin time is becoming a bottleneck now. I understand the reasons, but, wouldn’t it be better to have a process that doesn’t require admin access for the undisputed cases?

[dustin (Dustin Ingram)]

@encukou

As I feared, PyPI admin time is becoming a bottleneck now. I understand the reasons , but, wouldn’t it be better to have a process that doesn’t require admin access for the undisputed cases?

The volume on this issue is pretty high. If you @-mention my GitHub username in the future these will get resolved faster.

[encukou (Petr Viktorin)]

@dustin

@encukou

My intention is to help PyPI admins by making name reservations self-service: rather than up-front review, they’d only require admin attention if they’re disputed. Let me know if that’s not the right direction.

I appreciate this but I think it’s actually easier for us to block a list of project names en masse rather than handle potential PEP 541 requests for the names in question.

@dustin

@encukou

But what about unblocking the packages as maintainers get ready to share the code on PyPI?

I think this is still preferable over any potential for PEP 541 requests or additional user confusion.

As I feared, it is now taking three months to unblock a package. Is there anything I can do to help PyPI admins speed this up?

[dustin (Dustin Ingram)]

@encukou

As I feared, it is now taking three months to unblock a package. Is there anything I can do to help PyPI admins speed this up?

Sorry, I missed the @-mention there somehow. I’ve resolved the issue.

[dustin (Dustin Ingram)]

We can also make it possible for PyPI moderators to release these names, so it’s not blocked on administrators.

[roelderickx]

@dustin

We can also make it possible for PyPI moderators to release these names, so it’s not blocked on administrators.

Yes that would be good, as long as @encukou investigates first to see if it’s legit the risk of releasing a package name to the wrong person should be minimal.