Packaging/2017-12-19-Warehouse

Legacy Wiki Page

This page was migrated from the old MoinMoin-based wiki. Information may be outdated or no longer applicable. For current documentation, see python.org.

Meeting: Tuesday, Dec. 19th Attendees:

  • Laura Hampton

  • Ernest W. Durbin III

  • Dustin Ingram

  • Mark Mangoba

  • Sumana Harihareswara

  • Donald Stufft

  • Nicole Harris

I. Which of these issues ought to be in the Maintainer MVP milestone? Maintainer MVP milestone: https://github.com/pypa/warehouse/milestone/8 Probable:

  • https://github.com/pypa/warehouse/issues/424 We need UI that will allow users to modify the project/release/files they register & upload to Warehouse.

    • Upload may be deprecated, but how should users modify?

    • Resolution: Ernest - absolutely MVP milestone

    • Ernest: Do we need to update this to include “delete” for files, releases, projects?

    • Ernest: Sounds like we may not want to allow for updating metadata at all

    • Followup with Donald?

    • Donald - don’t allow modifying metadata

      • Dustin: give people an alternative, e.g., staged releases, Markdown support

      • but current feature parity does not demand that.

    • Resolution: WONTFIX the metadata change – people generally legitimately want this because of a typo in .rst, so test it first. otherwise, open to malicious stuff, & changing this breaks pip show. But the sub-issue that’s about deletion needs to happen, as does managing hidden vs unhidden releases

      • TODO: Sumana & Donald to update per above

  • https://github.com/pypa/warehouse/issues/423 - Enable users to modify their own account

    • Resolution: Ernest - absolutely MVP milestone

    • Existing PR: https://github.com/pypa/warehouse/pull/1847

      • TODO: Sumana to message contributor to say …. – we have time to work on this, do you have time to update & rebase in the next few days?

    • Nicole: do we want to do dummy backend first? or backend first? if someone could create empty view with empty template in next few days, I have somewhere to put HTML, I could work on it

      • Dustin will provide this

  • https://github.com/pypa/warehouse/issues/956 UI for adding maintainers

    • Resolution: Ernest - absolutely MVP milestone

  • https://github.com/pypa/warehouse/issues/1228 Implement “forgot password” feature

    • Resolution: Ernest - absolutely MVP milestone

    • Existing PR: https://github.com/pypa/warehouse/pull/1262

      • TODO: Sumana to message contributor to say …. – we have time to work on this, do you have time to update & rebase in the next few days?

  • https://github.com/pypa/warehouse/issues/2216 Classifiers in development DB are out of date

    • Dustin - mild annoyance for users - consult Donald; issue is out of date

    • Resolution: push to later milestone

  • https://github.com/pypa/warehouse/issues/2418 Blacklisting project does not purge the cache

    • Security implications?

    • Ernest: this is just a bug… self-assigned!

    • Resolution: Ernest - part of MVP milestone

Also need to discuss (issues added during meeting):

  • https://github.com/pypa/warehouse/issues/61 OpenID Login/Google Login?

    • Ernest: Probably _should_ be available, but not _strictly_ necessary for Maintainer MVP

    • Donald: Deprecate before legacy shutdown

    • Ernest: TODO: Deprecation notice on Google Auth/OpenID Login

    • Resolution: Donald - not maintainer MVP since all maintainers will not be using Google Auth/OpenID

    • Donald: TODO: Poke hornets nest on this (distutils-sig discussion)

  • https://github.com/pypa/warehouse/issues/582 Removal/Redirect – documentation uploaded to python-hosted

    • Explanation: you used to be able to upload a tarball we would extract & host on a path at pythonhosted and people used that as official hosting (some people)

    • has never worked great. S3 usage is expensive – when we switched uploading to Warehouse, did not implement doc upload API. All those people who had previously uploaded files to this static site needed a way to deal with that. Ernest? implemented a button to delete all files we had [for each user?] …. unhappiness re throwing away juice

    • Ernest: happy to own & drive this, Nick Coghlan. Ernest TODO to lead on community basis on getting out of this situation and moving forward.

      • Resolution: biggest thing for maintainer MVP: a delete button and/or redirect button

      • but open redirect problem/issue/ to watch out for

Maybe:

Sumana wonders whether previous decision was correct :)“) :

II. Discuss schedule and decide: what is our tentative deadline for the first milestone? Assignments - what’s on whose plate?

  • Dustin:

    • Will stub out some pages for Nicole so she can get started, wrap up role maintenance as well

  • Ernest:

  • Donald:

    • leave comments on updating description & openID/Google login (2170 & 424 & 61)

  • Nicole:

    • maintainer UI & forgot password (956 & 1228)

  • Sumana & Laura:

    • turn notes from this meeting into GitHub updates, solidify Milestone 1

Deferred till after GitHub updates:

  • Figure out hours estimates for these issues and delivery date range