• PackagingWG
• 2017-12-19-Warehouse

Meeting: Tuesday, Dec. 19th Attendees:

• Laura Hampton
• Ernest W. Durbin III
• Dustin Ingram
• Mark Mangoba
• Sumana Harihareswara
• Donald Stufft
• Nicole Harris

I. Which of these issues ought to be in the Maintainer MVP milestone? Maintainer MVP milestone: https://github.com/pypa/warehouse/milestone/8 Probable:

• https://github.com/pypa/warehouse/issues/424 We need UI that will allow users to modify the project/release/files they register & upload to Warehouse.

  • Upload may be deprecated, but how should users modify?

  • Resolution: Ernest - absolutely MVP milestone

  • Ernest: Do we need to update this to include "delete" for files, releases, projects?
  • Ernest: Sounds like we may not want to allow for updating metadata at all
  • Followup with Donald?
  • Donald - don't allow modifying metadata
    • Dustin: give people an alternative, e.g., staged releases, Markdown support
    • but current feature parity does not demand that.

  • Resolution: WONTFIX the metadata change -- people generally legitimately want this because of a typo in .rst, so test it first. otherwise, open to malicious stuff, & changing this breaks pip show. But the sub-issue that's about deletion needs to happen, as does managing hidden vs unhidden releases

    • TODO: Sumana & Donald to update per above

• https://github.com/pypa/warehouse/issues/423 - Enable users to modify their own account

  • Resolution: Ernest - absolutely MVP milestone

  • Existing PR: https://github.com/pypa/warehouse/pull/1847

    • TODO: Sumana to message contributor to say .... -- we have time to work on this, do you have time to update & rebase in the next few days?

  • Nicole: do we want to do dummy backend first? or backend first? if someone could create empty view with empty template in next few days, I have somewhere to put HTML, I could work on it
    • Dustin will provide this

• https://github.com/pypa/warehouse/issues/956 UI for adding maintainers

  • Resolution: Ernest - absolutely MVP milestone

• https://github.com/pypa/warehouse/issues/1228 Implement "forgot password" feature

  • Resolution: Ernest - absolutely MVP milestone

  • Existing PR: https://github.com/pypa/warehouse/pull/1262

    • TODO: Sumana to message contributor to say .... -- we have time to work on this, do you have time to update & rebase in the next few days?

• https://github.com/pypa/warehouse/issues/2216 Classifiers in development DB are out of date

  • Dustin - mild annoyance for users - consult Donald; issue is out of date

  • Resolution: push to later milestone

• https://github.com/pypa/warehouse/issues/2418 Blacklisting project does not purge the cache

  • Security implications?
  • Ernest: this is just a bug... self-assigned!

  • Resolution: Ernest - part of MVP milestone

Also need to discuss (issues added during meeting):

• https://github.com/pypa/warehouse/issues/61 OpenID Login/Google Login?

  • Ernest: Probably _should_ be available, but not _strictly_ necessary for Maintainer MVP
  • Donald: Deprecate before legacy shutdown
  • Ernest: TODO: Deprecation notice on Google Auth/OpenID Login

  • Resolution: Donald - not maintainer MVP since all maintainers will not be using Google Auth/OpenID

  • Donald: TODO: Poke hornets nest on this (distutils-sig discussion)

• https://github.com/pypa/warehouse/issues/582 Removal/Redirect -- documentation uploaded to python-hosted

  • Explanation: you used to be able to upload a tarball we would extract & host on a path at pythonhosted and people used that as official hosting (some people)

  • has never worked great. S3 usage is expensive -- when we switched uploading to Warehouse, did not implement doc upload API. All those people who had previously uploaded files to this static site needed a way to deal with that. Ernest? implemented a button to delete all files we had [for each user?] .... unhappiness re throwing away juice

  • Ernest: happy to own & drive this, Nick Coghlan. Ernest TODO to lead on community basis on getting out of this situation and moving forward.

    • Resolution: biggest thing for maintainer MVP: a delete button and/or redirect button

    • but open redirect problem/issue/ to watch out for

Maybe:

• https://github.com/pypa/warehouse/issues/398 Hook sessions into pyramid_tm to make them transactional

  • Ernest - this may done? Implementation detail.

  • Resolution: Donald - not an issue for the MVP milestone

• https://github.com/pypa/warehouse/issues/2144 import SCSS tools

  • Ernest - consult Nicole

  • Resolution: Nicole: just a refactor, not for any milestone

• https://github.com/pypa/warehouse/issues/1919 functionality to rename a project

  • Resolution: Ernest: new feature! def not MVP/milestone1 likely an "admin" feature.

• https://github.com/pypa/warehouse/issues/472 Handle Version Sorting (or a related issue, or breaking out a sub-issue?)

  • Resolution: Ernest: https://github.com/pypa/warehouse/issues/472#issuecomment-295899658 notes that this is not milestone1

• https://github.com/pypa/warehouse/issues/1536 Tests depend on manifest.json existing

  • Resolution: Dustin - not part of MVP milestone

Sumana wonders whether previous decision was correct :

• https://github.com/pypa/warehouse/issues/2486 File size limit error message should include size of the limit

  • Resolution: Dustin - I think this can be included in the MVP

  • Existing PR: https://github.com/pypa/warehouse/pull/2487

• https://github.com/pypa/warehouse/issues/1322 Add roadmap to documentation - link to it from footer

  • Donald - out of date one may be worse than none
  • Sumana - need roadmap only during project, and then remove?

    • Resolution: add to MVP milestone, remove in launch milestone

• https://github.com/pypa/warehouse/issues/2170 How to update the "Description" in pypi.org ?

  • Dustin - Likely not going to be supported

    • Instead: staged releases https://github.com/pypa/warehouse/issues/726 , supporting Markdown https://github.com/pypa/warehouse/issues/2206 , telling people to run python setup.py check -r -s first https://github.com/pypa/python-packaging-user-guide/issues/210

  • Ernest - not part of MVP milestone
  • Donald - not part of MVP milestone
  • Ernest: Indeed, this ties back into #424 relating to not allowing for update to metadata
  • Ernest: Personally I'm _for_ allowing description updates in a limited time period after release (1-2wks)

  • RESOLUTION: say: we're not going to do this right now, but let's discuss on distutils-sig (this is now at https://mail.python.org/pipermail/distutils-sig/2017-December/031826.html )

    • TODO: Donald to WONTFIX

• https://github.com/pypa/warehouse/issues/789 Dependency and Reverse Dependency

  • Resolution: Ernest: Definitely not MVP/milestone1, this is a new feature

II. Discuss schedule and decide: what is our tentative deadline for the first milestone? Assignments - what's on whose plate?

• Dustin:
  • Will stub out some pages for Nicole so she can get started, wrap up role maintenance as well
• Ernest:
  • Ernest: Deprecation/Password warning on Google/OpenID Login for pypi-legacy

  • Ernest: https://github.com/pypa/warehouse/issues/582 notes on delete/redirect for pythonhosted

  • Ernest: Ping E. Holscher on https://github.com/pypa/warehouse/issues/582

  • Ernest: Continuing to push platform/foundation for kuberenetes deploy - Hope to have this done and move onto actual warehouse things by EOW
• Donald:

  • leave comments on updating description & openID/Google login (2170 & 424 & 61)

• Nicole:

  • maintainer UI & forgot password (956 & 1228)

• Sumana & Laura:

  • turn notes from this meeting into GitHub updates, solidify Milestone 1

Deferred till after GitHub updates:

• Figure out hours estimates for these issues and delivery date range