From unknown Thu Jun 12 08:36:13 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#35673 <35673@debbugs.gnu.org> To: bug#35673 <35673@debbugs.gnu.org> Subject: Status: pypi importer returns the wheel hash when it fails to find a proper source. Reply-To: bug#35673 <35673@debbugs.gnu.org> Date: Thu, 12 Jun 2025 15:36:13 +0000 retitle 35673 pypi importer returns the wheel hash when it fails to find a = proper source. reassign 35673 guix submitter 35673 Jack Hill severity 35673 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Fri May 10 14:41:34 2019 Received: (at submit) by debbugs.gnu.org; 10 May 2019 18:41:34 +0000 Received: from localhost ([127.0.0.1]:39070 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hPASc-0007g9-43 for submit@debbugs.gnu.org; Fri, 10 May 2019 14:41:34 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58343) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hPASZ-0007fx-Ta for submit@debbugs.gnu.org; Fri, 10 May 2019 14:41:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:40549) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hPASU-00056w-PK for submit@debbugs.gnu.org; Fri, 10 May 2019 14:41:26 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44492) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hPAST-0004f4-PW for bug-guix@gnu.org; Fri, 10 May 2019 14:41:26 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hPASS-00055n-Sj for bug-guix@gnu.org; Fri, 10 May 2019 14:41:25 -0400 Received: from minsky.hcoop.net ([104.248.1.95]:59160) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hPASS-00054W-O7 for bug-guix@gnu.org; Fri, 10 May 2019 14:41:24 -0400 Received: from marsh.hcoop.net ([45.55.52.66]) by minsky.hcoop.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hPASR-00008y-IP for bug-guix@gnu.org; Fri, 10 May 2019 14:41:23 -0400 Date: Fri, 10 May 2019 14:41:23 -0400 (EDT) From: Jack Hill X-X-Sender: jackhill@marsh.hcoop.net To: bug-guix@gnu.org Subject: pypi importer returns the wheel hash when it fails to find a proper source. Message-ID: User-Agent: Alpine 2.20 (DEB 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=US-ASCII X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 104.248.1.95 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) As discussed on guix-devel[0] the pypi importer should probably not fill in the hash with that of the wheel if a proper source archive is not found on pypi. [0] https://lists.gnu.org/archive/html/guix-devel/2019-05/msg00209.html Best, Jack From debbugs-submit-bounces@debbugs.gnu.org Tue Mar 08 05:22:32 2022 Received: (at 35673) by debbugs.gnu.org; 8 Mar 2022 10:22:32 +0000 Received: from localhost ([127.0.0.1]:55351 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nRWz9-0001Kj-VA for submit@debbugs.gnu.org; Tue, 08 Mar 2022 05:22:32 -0500 Received: from mail-wm1-f47.google.com ([209.85.128.47]:35672) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nRWz7-0001JW-0D for 35673@debbugs.gnu.org; Tue, 08 Mar 2022 05:22:31 -0500 Received: by mail-wm1-f47.google.com with SMTP id v2-20020a7bcb42000000b0037b9d960079so1111134wmj.0 for <35673@debbugs.gnu.org>; Tue, 08 Mar 2022 02:22:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=Jsidx4crxj1E3aHOeUHh9OnCpTpg0YxWOCJ5GkI9/TA=; b=gyrrPe4+XRhfuLcZfaKuNFd2puBIHQUZBAlLr7Q1AbBM2gsYk+I024rOFlhN5FscDl x4wT2/kD37vur5GV9P8sL5s5BQW1rLUv60t9jeaNsLSVqvN2mTfefpdXIF/Dl+zPpvly kNVDM2Sz4p7qh3S30Ql3opqz/JI18WyB2oXQcfSi2roEIefhC0m2wcP+wcIhr3tNLfU1 n09nS0fyZBTEOKnu+FEceMAU7ljvVMkMVJ++qhAf1G/Cs/C9SoX2sLZNwc/dcSGskaTb 0P5K4QoK1AVFqhOyU+2GW152U05YnrY3cg49CS1eYE2QY5mJbmZeAB8p8dgwidWx7TS5 ZGBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=Jsidx4crxj1E3aHOeUHh9OnCpTpg0YxWOCJ5GkI9/TA=; b=1plXUqfIKRBK3VTBr6kl9pK5Ss8Ux+bn6VudeX3AhgghXJavjo19KyAQQfSY3wp9K5 OVgA+jAx0hXFvIVSkph3FlabHSFSNtUJF+P3go0PviNuentVrVN0rCFB1+pOD6CjLlh4 Uq1eT2lb+ov41e/1Pmzv0ND+3BjoewCXAWxNOD8heEf48kwzm0eKcb1jRHUHBncjpHfO 3GEHyH6JlPADZOw6wrQwTvMjpL8uYJBdop3zwq6YbbfJ0D3UDomoQdoRC91VPa9vHjEL s03y/CBhN9c10cBMJZDJar9zMVMY69Baon6krNkM+D24tN9Ggd+hwNUtQUGCYashA83h L90g== X-Gm-Message-State: AOAM5322kGhRxmyefrKDRwwKyIoR+ae/zqD/TPD8rj9ndP6XaZaEqYys 41sImxTHykS0mJO6JyS2M+DO+b32a6w= X-Google-Smtp-Source: ABdhPJxOYGpGNzQvFnyCUfDLqh1RWwaloxBlrKoVtFTL+Ru1itaGaHb/ZS5PXeS0Fg4cUUzctuTvMA== X-Received: by 2002:a05:600c:3ac3:b0:389:adb4:e7a1 with SMTP id d3-20020a05600c3ac300b00389adb4e7a1mr2984242wms.136.1646734943481; Tue, 08 Mar 2022 02:22:23 -0800 (PST) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id l1-20020a05600c4f0100b00387369f380bsm1981778wmq.41.2022.03.08.02.22.22 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Mar 2022 02:22:23 -0800 (PST) From: zimoun To: Jack Hill Subject: Re: bug#35673: pypi importer returns the wheel hash when it fails to find a proper source. References: Date: Tue, 08 Mar 2022 11:19:03 +0100 In-Reply-To: (Jack Hill's message of "Fri, 10 May 2019 14:41:23 -0400 (EDT)") Message-ID: <87bkyg4ui0.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 35673 Cc: 35673@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, On ven., 10 mai 2019 at 14:41, Jack Hill wrote: > As discussed on guix-devel[0] the pypi importer should probably not fill = in > the hash with that of the wheel if a proper source archive is not found on > pypi. > > [0] https://lists.gnu.org/archive/html/guix-devel/2019-05/msg00209.html Now the importer displays some warnings and hint, for instance: --8<---------------cut here---------------start------------->8--- $ guix import pypi PyPortfolioOpt following redirection to `https://pypi.org/pypi/pyportfolioopt/json'... Starting download of /tmp/guix-file.6rSGsS >From https://files.pythonhosted.org/packages/97/c2/c7569f2773f3e942367e90dc= ca15a235af3d3330ac8abfcbfbe67a8ba8dd/PyPortfolioOpt-1.5.1.tar.gz... =E2=80=A6t-1.5.1.tar.gz 56KiB 8.2MiB/s 00:00 [#############= #####] 100.0% Starting download of /tmp/guix-file.MFmUSK >From https://files.pythonhosted.org/packages/90/98/3906835b783ba39cfc613c7b= 0c0fde9c758c729ff3406d45f1c2a1116961/PyPortfolioOpt-1.5.1-py3-none-any.whl.= .. =E2=80=A6.1-py3-none-any.whl 60KiB 45.2MiB/s 00:00 [#############= #####] 100.0% guix import: warning: Failed to extract file: PyPortfolioOpt-1.5.1.dist-inf= o/METADATA from wheel. guix import: warning: Cannot guess requirements from source archive: no req= uires.txt file found. guix import: warning: project name pyportfolioopt does not appear verbatim = in the PyPI URI hint: The PyPI URI is: `https://files.pythonhosted.org/packages/97/c2/c7569f2773f3e942367e90dcca15 a235af3d3330ac8abfcbfbe67a8ba8dd/PyPortfolioOpt-1.5.1.tar.gz'. You should review the pypi-uri declaration in the generated package. You may need to replace "pyportfolioopt" with a substring of the PyPI URI that identifies the package. (package (name "python-pyportfolioopt") (version "1.5.1") (source (origin (method url-fetch) (uri (pypi-uri "pyportfolioopt" version)) (sha256 (base32 "162d6jyvba0xk2blssbp52rrjqpjv011h988k150p1fg7x7nzbs9")))) (build-system python-build-system) (home-page "https://github.com/robertmartin8/PyPortfolioOpt") (synopsis "Financial portfolio optimization in python") (description "Financial portfolio optimization in python") (license license:expat)) --8<---------------cut here---------------end--------------->8--- If it is not enough, could you provide an example? Cheers, simon