[Distutils] does pypi or red-dove have a better firehose API than "download all the packages"?

Daniel Holth dholth at gmail.com
Fri May 24 18:06:48 CEST 2013


On Fri, May 24, 2013 at 10:51 AM, Marius Gedminas <marius at pov.lt> wrote:
> On Fri, May 24, 2013 at 02:01:16PM +0000, holger krekel wrote:
>> On Fri, May 24, 2013 at 09:55 -0400, Donald Stufft wrote:
>> > Most packages also have an egg-info inside of them you can parse.
>> >
>> > Of course the issue is that you're only going to get the
>> > requirements of the system that ran setup.py, either the authors or
>> > the servers. Which doesn't accurately represent all of the
>> > dependencies all of the time.
>>
>> True but maybe it would go a long way for most packages.
>
> In that case you might find
> https://github.com/mgedmin/ztk-py3-status/blob/master/get_deps.py
> useful.
>
> Marius Gedminas

Amazing. http://zope3.pov.lt/py3/

Is anyone interested in doing one for every package on pypi?

+1 on potentially inaccurate but useful dependency information. Even
the non-regenerated requires.txt from the sdist probably gets you
80-90% there and you can always make sure it was correct during the
actual install.

You could also parse setup.py to discover which ones definitely don't
feature conditional dependencies, marking the served up metadata as
"suspect" or "trustworthy".


More information about the Distutils-SIG mailing list