Supporting signed file URLs in the simple package repository API

[dstufft (Donald Stufft)]

@EpicWink

PS: PEP 691 (JSON API) was the first time I head of PEP 658’s (metadata file serving) acceptance (and the second time I heard of the PEP at all). I don’t think there was enough communication of its acceptance, given how active I am in following the community. What do I have to subscribe to to see packaging PEP announcements?

PEP 658: Static Distribution Metadata in the Simple Repository API

This is a PEP to add data-dist-info-metadata to provide a structure for Simple Repository API servers to expose the METADATA file in a wheel (or sdist, if they are specified in the future to provide static distribution metadata with it). The issue on pypa/warehouse that prompted this PEP also contains some discussion that should be relevant for people interested in designing this. UPDATE: The rendered version is now available at PEP 658 -- Static Distribution Metadata in the Simple Repository …