8000 PEP 710: Recording the provenance of installed packages by fridex · Pull Request #3076 · python/peps · GitHub
[go: up one dir, main page]

Skip to content

PEP 710: Recording the provenance of installed packages #3076

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 29 commits into from
Apr 3, 2023
Merged
Changes from 1 commit
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
ea78881
PEP 9999: Recording provenance of installed packages
Mar 27, 2023
81a9dd7
Rename to PEP-710
Mar 27, 2023
29b86f8
Add PEP-710 to CODEOWNERS
Mar 28, 2023
ac86eda
Apply suggestions from code review
Mar 28, 2023
51ccbed
Apply suggestions from code review
Mar 28, 2023
1d394c4
Apply suggestions from code review
Mar 28, 2023
8a86906
Remove duplicate topic
Mar 28, 2023
3f0478b
Add Christopher A. M. Gerlach to the Acknowledgements section
Mar 28, 2023
c99e676
Fix name in the Acknowledgements section
Mar 28, 2023
d2cb745
Move Backwards Compatibility after Specification
Mar 29, 2023
a4334fb
Add How to Teach This section
Mar 29, 2023
e1b3106
Add Security Implications section
Mar 29, 2023
28d93a0
Add Reference Implementation section
Mar 29, 2023
8f2e4e4
Fix reference to pip-preserve
Mar 29, 2023
96f0a5e
Apply suggestions from code review
Mar 30, 2023
9eb94f8
s/*.dist-info/.dist-info/
Mar 30, 2023
2356439
Add Rationale section
Mar 30, 2023
ca729f8
Fix reference to a term
Mar 30, 2023
00ec0ea
Use a reference to the pip installation report thraed
Mar 30, 2023
bc55397
Apply suggestions from code review
Mar 30, 2023
de7cf45
Adjust Backwards Compatibility section
Mar 31, 2023
2a29627
State main difference between direct_url.json and provenance_url.json
Mar 31, 2023
3b09caf
State Conda's conda-meta directory created by Conda
Mar 31, 2023
8cb9ce9
Mention compatibility considerations with direct_url.json
Mar 31, 2023
7939192
Remove a leftover from review
Mar 31, 2023
b400b39
Fix links to project sites
Mar 31, 2023
eb3efa9
Apply suggestions from code review
Mar 31, 2023
6c9e95c
Create appendix for the tools survey
Mar 31, 2023
dfb21eb
Apply suggestions from code review
Apr 2, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Move Backwards Compatibility after Specification
Signed-off-by: Fridolin Pokorny <fridolin.pokorny@datadoghq.com>
  • Loading branch information
Fridolin Pokorny committed Mar 29, 2023
commit d2cb745c6f660e60424e3cdd52e1da0081643f8c
26 changes: 13 additions & 13 deletions pep-0710.rst
Original file line number Diff line number Diff line change
Expand Up @@ -124,6 +124,19 @@ information related to the cached distribution artifact, so that
the ``provenance_url.json`` file can be created even when installing distribution packages
from the installer's cache.

Backwards Compatibility
=======================

Since this PEP specifies a new file in the ``*.dist-info`` directory, there are
no backwards compatibility implications to consider in the ``provenance_url.json``
file itself. Also, this proposal does not make any changes to the
``direct_url.json`` described in :pep:`610` and
:ref:`its corresponding canonical PyPA spec <direct-url>`.

The content of ``provenance_url.json`` file was designed in a way to eventually
allow installers reuse some of the logic supporting ``direct_url.json`` when a
direct URL refers to a source archive or a wheel.

Examples
========

Expand Down Expand Up @@ -314,19 +327,6 @@ were intentionally left out of this PEP. However, any input by developers or
maintainers of these installers is valuable to possibly enrich the
``provenance_url.json`` file with information that would help in some way.

Backwards Compatibility
=======================

Since this PEP specifies a new file in the ``*.dist-info`` directory, there are
no backwards compatibility implications to consider in the ``provenance_url.json``
file itself. Also, this proposal does not make any changes to the
``direct_url.json`` described in :pep:`610` and
:ref:`its corresponding canonical PyPA spec <direct-url>`.

The content of ``provenance_url.json`` file was designed in a way to eventually
allow installers reuse some of the logic supporting ``direct_url.json`` when a
direct URL refers to a source archive or a wheel.

References
==========

Expand Down
0