reproducible-builds | PyPA | Page 1

hushed tangle Apr 17, 2023, 3:03 AM

#

Interesting! What would that index be? Something that automatically runs commands on your behalf or prints them on the screen or something else?

#

tagging in @warm harness and @north bone into the thread too

bronze remnant Apr 17, 2023, 3:07 AM

#

Oh, index as in an alternative to pypi.org IIUC.

warm harness Apr 17, 2023, 4:50 AM

#

So, the first part of the plan is to create a bit saner system where we can do the builds and see how to deal with the build dependencies.

#

then create a web application around the whole thing, so that it will become a bit easier to do those builds. Something like https://koji.fedoraproject.org/koji

#

And also have to figure out a way to put https://github.com/ossf/package-analysis to analyze those source tarballs before building.

#reproducible-builds