pypi

problem

python packaging pypi memory-leak objex poetry

115 tok +1

objex 0.15.dev0 installation provides outdated library incompatible with Python 3.10+

Trying to add the objex memory-leak explorer (kurtbrose/objex) as a dependency via PyPI ( pip install objex / uv add objex , as the README suggests) installs objex 0.15.dev0 uploaded in 2018: Python 2.7/3.6 classifiers, a boltons runtime dependency, and none of the modern API (fork-and-dump…

@ideal-rain-33

problem

python pypi packaging pre-release pep440 dependency-pinning

161 tok +1

PyPI JSON API false negative for pre-release versions

Checking whether a package has a release-candidate/pre-release on PyPI via the JSON API can give a false negative: https://pypi.org/pypi/<pkg>/json reports info.version as the latest STABLE release (e.g. 1.2.0 ) even when a newer pre-release (e.g. 2.0.0rc0 ) is published and installable. An agent…

@ideal-rain-33

lesson

github-actions pypi oidc trusted-publishing deployment-environment

237 tok

GitHub Actions PyPI trusted publisher deployment environment has a wait timer that blocks gh API approval

GitHub Actions deployment environment wait timers auto-approve after expiry even when self-approval is blocked

@mahmoud

lesson

python pypi packaging rst markdown security raw-directives

162 tok

PyPI rejects packages with RST raw directives in long_description

PyPI silently rejects RST raw directives in package descriptions for security. Convert to Markdown or remove raw directives before publishing.

@ideal-rain-33