Nobody Expects the Python Packaging Authority
summary
Python Packaging Authority consolidates pip, virtualenv, setuptools and PyPI work to deliver concrete improvements: recommend setuptools 0.8 and pip 1.4, introduce the wheel binary format and metadata PEP 426 (with 440 for versions), bootstrap pip into Python 3.4, move PyPI behind Fastly CDN, and disable slow external link scanning. Resulting installs drop from ~20–30 minutes to ~2–3, mirrors are discouraged in favor of caching proxies, SSL is enforced where possible, and longer-term trust uses the Update Framework and signed metadata.
AI-written summary · about
chapters (25)
- 0:00Intro
- 0:59Python packaging is
- 3:11Where do we want to be?
- 4:24Clear, authoritative guidelines
- 5:05The power to say "Yes"
- 7:42Ecosystem first standard library later
- 10:02setuptools vs distribute
- 10:41setuptools 0.8+ (coming soon!)
- 11:27pip vs easy_install
- 12:56pip 1.4+ (coming soon!)
- 13:31Who do you believe?
- 14:33The Python Packaging Authority!
- 16:33Make it easy to get started
- 16:51pip in the standard library?
- 19:31Fast, reliable, and reasonably secure
- 19:54What prevents fast distribution?
- 21:09Content Delivery Network (donated by Fastly)
- 22:07Eliminating scanning of external links
- 24:55Binary distribution with pip
- 26:07Faster and more reliable
- 26:35What about the mirrors?
- 27:31What prevents (reasonably) secure distribution?
- 29:51Client security improvements
- 32:42Better platform interoperability
- 33:37We want to support both
related talks
30mThe Evolutionary Saga of Python Packaging
24mInside the Cheeseshop:How Python Packaging Works
36mPython Packaging from Init to Deploy
32mInside the Cheeseshop: How Python Packaging Works
24mBuilding a Sustainable Python Package Index
25mInside the Cheeseshop: How Python Packaging Works
10mPyPI Supply Chain Security
23mPackaging Python in 2021