A RetroSearch Logo

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Search Query:

Showing content from https://github.com/pypa/warehouse/issues/4164 below:

Handle security implications of PEP 561 type hinting packages · Issue #4164 · pypi/warehouse · GitHub

The mypy devs are working on a feature that allows automatic discovery and downloading of project interface stubs by appending a suffix to existing projects (in the form of <name>-stubs): https://www.python.org/dev/peps/pep-0561/#stub-only-packages

(see https://lwn.net/SubscriberLink/757218/a7b754a41ad74a49/ for more background)

A version of this is already implemented in mypy, which means that if a PyPI project doesn't have a stubs package, and doesn't advertise itself as providing type hints, mypy may go and download the related stubs package.

This suggests that there may need to be some special rules put in place for stub interface packages on the PyPI side of things, such as not allowing stub packages to be published without the approval of the base package maintainers (or at least without alerting them to the fact that the stub package exists).


RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4