[Distutils] Re-uploading packages

[holger krekel]

On Tue, Apr 02, 2013 at 22:12 +0200, Christian Theune wrote:
> Hi,
> 
> when developing bandersnatch I saw some checksum errors for the
> md5sums of downloaded package files that I didn't understand.
> I just saw another one and just want to check back whether this is
> true: I can go to PyPI, delete a package version, and upload a
> different file later.
> 
> True?

it's certainly possible.  Not sure if i even did something like
this in my early days :)

> This would explain that I can see a file that I downloaded
> successfully changing it's hash over time.

would be cool if bandersnatch can handle this case.
Maybe queue hash mismatches and only error out if the final
file mismatches its hash or so?

best,
holger

> 
> Feels like a bad idea to me, but I guess this is part of the "PyPI
> doesn't have an oppinion" deal …
> 
> Christian
> 
> 
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> http://mail.python.org/mailman/listinfo/distutils-sig