Differences between revisions 72 and 189 (spanning 117 versions)
⇤ ← Revision 72 as of 2019-04-30 20:38:20 →
Size: 15133
Editor: SumanaHarihareswara
Comment: testing
← Revision 189 as of 2023-08-03 09:40:27 → ⇥
Size: 45878
Editor: smm
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
#format rst

Agenda
======

The purpose of this working group is to support the larger efforts of improving
and maintaining the packaging ecosystem in Python through fundraising and
disbursement of raised funds. It largely focuses on efforts such as PyPI,
pip, packaging.python.org, setuptools, and cross-project efforts.


Resources
==========

* Discussion: Slack and mailing list. The archives are set to private since there will be voting.
* Accounting: We rely on the PSF's `donation <http://donate.pypi.org/>`_ and accounting mechanisms to raise funds and disburse them to the selected recipients.


Current Projects
================

Fundraising
-----------

The Packaging Working Group is seeking sponsorships and grants to raise funds for `Fundable Packaging Improvements`_.

Sprints
-------

We will run PackagingSprints_ in 2019 at PyCon North America and possibly other conventions.

Warehouse
---------

The Packaging Working Group applied for and is receiving a grant to implement & deploy security and accessibility improvements for Warehouse (PyPI's codebase).

* *Summary*: `See March 13 2019 blog post <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_.
* *Roadmap*: WarehouseRoadmap_ -- to be updated, as of 8 March 2019. As of 22 March 2019, the Warehouse team has shut down the legacy PyPI installation. A team funded by the Open Technology Fund is `working on security, accessibility, and internationalization/localization improvements to Warehouse <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_, and volunteers are working on Milestone 6, "Post Legacy Shutdown".
* *Code*: `GitHub repo <https://github.com/pypa/warehouse/>`_.
* *Deployment*: `pypi.org <https://pypi.org/>`_.
* *Testing*: WarehousePackageMaintainerTesting_
* *Meetings and Updates*: See below.


Meetings and status updates from the grant-funded project:


============================================================================================================================================================= ================== ==========================
                  Meeting/update Type Date
============================================================================================================================================================= ================== ==========================
`PyPI security work: multifactor auth progress & help needed <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042>`_ Forum post March 22nd, 2019
`Prioritizing extant security issues <PackagingWG/2019-03-22-Warehouse>`_ Meeting notes March 22nd, 2019
`Starting security, a11y, & i18n improvements to PyPI for 2019 <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_ Blog post March 13th, 2019
`Kickoff planning meeting with grant-funded team <PackagingWG/2019-03-11-Warehouse>`_ Meeting notes March 11th, 2019
============================================================================================================================================================= ================== ==========================



Administration
===============

* Donald Stufft <donald@python.org> (chair)
* Ewa Jodlowska <ewa@python.org> (co-chair)
* `PSF Packaging WG Charter <PackagingWG/Charter>`_


Members
=======

* Donald Stufft
* Ewa Jodlowska
* Nick Coghlan
* Ernest W. Durbin III
* Thea Flowers
* Sumana Harihareswara
* Nicole Harris
* Dustin Ingram
* Kenneth Reitz
* Nathaniel J. Smith
* Jacqueline Kazil (non-voting observer from PSF board)
* Laura Hampton (non-voting member)
* (others will be added as they accept their invitation to the WG)

Meetings
========
<<TableOfContents()>>

= Packaging Working Group =

The Packaging Working Group is a volunteer [[https://www.python.org/psf/committees/#packaging-work-group|work group of the Python Software Foundation]].

== Agenda ==

The purpose of this working group is to support the larger efforts of improving and maintaining the packaging ecosystem in Python through fundraising (including [[https://pyfound.blogspot.com/2020/04/sponsoring-python-packaging.html|a sponsorship program]]) and disbursement of raised funds. It largely focuses on efforts such as PyPI, pip, packaging.python.org, setuptools, and cross-project efforts.

== Resources ==

  * Discussion: Slack and mailing list. The archives are set to private since there is voting.
  * Accounting: We rely on the PSF's [[http://donate.pypi.org/|donation]] and accounting mechanisms to raise funds and disburse them to the selected recipients.
  * Project ideas: [[https://github.com/psf/fundable-packaging-improvements/|Fundable packaging improvements]]

== Governance ==

Decisions on what fundraising and projects/efforts to support will be done by a simple majority and in the case of a tie, will escalate to the PSF Board. See [[PackagingWG/Charter|the PSF Packaging WG Charter]].

=== Administration and Contact ===

  * Donald Stufft &lt;[[mailto:donald@python.org|donald@python.org]]&gt; (chair)
  * Dustin Ingram &lt;[[mailto:di@python.org|di@python.org]]&gt; (co-chair)
  * Nicole Harris &lt;[[mailto:n.harris@kabucreative.com|n.harris@kabucreative.com]]&gt; (co-chair)
  * [[PackagingWG/Charter|PSF Packaging WG Charter]]

To contact the Packaging WG, email &lt;[[mailto:packaging-wg@python.org|packaging-wg@python.org]]&gt;.

=== Members ===

  * Nick Coghlan
  * Ee Durbin
  * Thea Flowers
  * Sumana Harihareswara
  * Nathaniel J. Smith
  * Tzu-ping Chung
  * Jannis Leidel
  * (others will be added as they accept their invitation to the WG)

=== Meetings ===
Line 90: Line 47:

Governance
==============

Decisions on what fundraising and projects/efforts to support will be done by a
simple majority and in the case of a tie, will escalate to the PSF Board. See `the PSF Packaging WG Charter <PackagingWG/Charter>`_.


Past projects
=============

Warehouse
---------

The Packaging Working Group supported the implementation & deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered `legacy PyPI <https://github.com/pypa/pypi-legacy>`_. `Announced on PSF blog in January 2016 <https://pyfound.blogspot.com/2016/01/welcome-to-warehouse.html>`_; see its history in `this April 2018 LWN article <https://lwn.net/Articles/751458/>`_.

* *Summary*: `PSF blog post about the MOSS grant <https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html>`_.
* *Roadmap*: WarehouseRoadmap_. As of 30 April 2018, the Warehouse team has shut down the legacy PyPI installation, and -- on a volunteer basis -- is working on Milestone 6, "Post Legacy Shutdown".
* *Code*: `GitHub repo <https://github.com/pypa/warehouse/>`_.
* *Deployment*: `pypi.org <https://pypi.org/>`_.
* *Testing*: See `the PSF blog post about testing for the beta <https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html#test>`_. (Previously: WarehousePackageMaintainerTesting_, `PSF blog post about testing package maintainer functionality <https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html>`_.)
* *Meetings and Updates*: See below.
 == Current Projects ==

=== Fundraising ===

The Packaging Working Group is seeking [[https://pyfound.blogspot.com/2020/04/sponsoring-python-packaging.html|sponsorships]] and grants to raise funds for [[https://github.com/psf/fundable-packaging-improvements|fundable packaging improvements]].

=== Sprints ===

We run [[PackagingSprints]] at conventions and as standalone events. We're open to companies and organizations hosting sprints and work weeks to help us move packaging forward; get in contact with a Working Group member.

=== PyPI Malware Reporting and Response project ===

The PSF has received funding from the Center for Security and Emerging Technology (CSET) to develop and improve the infrastructure for malware reporting and response on PyPI.

  * ''Summary'': Develop an API that allows malware reporting and define the criteria for automated consensus based takedown and soft-deletes of packages
  * ''Schedule'': One year
  * ''Meetings and Updates'': See below.

Meetings and status updates:

|| Meeting/update || Type || Date ||
|| [[https://docs.google.com/document/d/1En1SlRZ_jx6J0qKqyes1iFuaL2DDo7yrPXzPQrb8eB0/edit#bookmark=id.xbqxogzehosb | Meeting with PyPI admins ]] || Meeting minutes || June 02, 2023 ||
|| [[https://discuss.python.org/t/pypi-malware-detection-project/28222 | Project Update ]] || Discourse Post || June 21, 2023 ||
|| [[https://blog.pypi.org/posts/2023-06-22-malware-detection-project/ | Project Update ]] || PyPI Blog Post || June 22, 2023 ||
|| [[https://docs.google.com/document/d/1En1SlRZ_jx6J0qKqyes1iFuaL2DDo7yrPXzPQrb8eB0/edit#bookmark=id.kulfvlfl0iwf | Meeting with CSET ]] || Meeting minutes || July 03, 2023 ||
|| [[ | Outreach Meeting ]] || Meeting minutes || July 19, 2023 ||
|| [[https://docs.google.com/document/d/1En1SlRZ_jx6J0qKqyes1iFuaL2DDo7yrPXzPQrb8eB0/edit#bookmark=id.dqjshlfmy8ng | Outreach Meeting ]] || Meeting minutes || July 19, 2023 ||
|| [[ | Outreach Meeting ]] || Meeting minutes || July 20, 2023 ||
|| [[ | Outreach Meeting ]] || Meeting minutes || July 20, 2023 ||
|| [[ | Outreach Meeting ]] || Meeting minutes || July 21, 2023 ||
|| [[ | Outreach Meeting ]] || Meeting minutes || July 25, 2023 ||
|| [[https://docs.google.com/document/d/1En1SlRZ_jx6J0qKqyes1iFuaL2DDo7yrPXzPQrb8eB0/edit#bookmark=id.7nyszbbnjcw7 | Outreach Meeting ]] || Meeting minutes || July 26, 2023 ||
|| [[https://docs.google.com/document/d/1En1SlRZ_jx6J0qKqyes1iFuaL2DDo7yrPXzPQrb8eB0/edit#bookmark=id.1mkszphbj6m1 | Outreach Meeting ]] || Meeting minutes || July 27, 2023 ||


== Past projects ==

=== PyPI Organization Account ===

The Python Software Foundation, with the Packaging WG's approval, funded a project to deploy organization account features in PyPI.

  * ''Summary'': Organization accounts in PyPI will allow organizations to create accounts, manage users, manage projects and set permission levels for a team.
  * ''Schedule'': 16 weeks that commenced on April 1, 2022
  * ''High level Roadmap'': [[https://docs.google.com/document/d/1F_PfSFVvOiBTml6ImJtLnw-dAjRUTg393TYG74PNGIA/edit?usp=sharing | PyPI Organization Account High-level Roadmap]]
  * ''Detailed Roadmap'': [[https://docs.google.com/document/d/1U3d8fCnoxeuZvy2WmXL6pxyfXuW10LN5F8Jp7fr6S2w/edit?usp=sharing | PyPI Organization Account Detailed Roadmap]]
  * ''RfP'': [[https://github.com/psf/request-for/blob/main/2022-PyPI/RFP.md | PyPI Organization Account RfP]]
  * ''Code and discussion'': [[https://github.com/pypa/warehouse/|GitHub repository for Warehouse]], and [[https://discuss.python.org/c/packaging|Discourse forum]]
  * ''Project Board'': [[https://github.com/orgs/pypi/projects/1/views/1|PyPI Organization Account Project Board]]
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': [[https://discuss.python.org/t/pypi-organization-account-roadmaps/14699 |PyPI Organization Account User Testing]]
  * ''Manager'': Shamika Mohanan
  * ''Meetings and Updates'': See below.

Meetings and status updates:

|| Meeting/update || Type || Date ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.1a06c3qhywph | Onboarding ]] || Meeting minutes || April 1, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.cjbdnfks14ib|Team Meeting]] || Meeting minutes || April 5, 2022 ||
|| [[https://discuss.python.org/t/pypi-organization-account-project-update/14913 | Project Update ]] || Discourse Post || April 8, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.nubhxohfoa4|Team Meeting]] || Meeting minutes || April 12, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.42sl7ivfzsoh|Team Meeting]] || Meeting minutes || April 19, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.40s1xqezgygm|Team Meeting]] || Meeting minutes || April 26, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.hibcqhje4v6y|Team Meeting]] || Meeting minutes || May 3, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.e80zhg6m4k7c|Team Meeting]] || Meeting minutes || May 10, 2022 ||
|| [[https://discuss.python.org/t/pypi-org-account-project-update-ii/15661 | Project Update ]] || Discourse Post || May 10, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.yl5dhj6qtkms|Team Meeting]] || Meeting minutes || May 17, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.v66xpa3bxs7j|Team Meeting]] || Meeting minutes || May 24, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.k5ocjng05grp|User Testing]] || Meeting minutes || May 27, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.nolcanx62w3o|Team Meeting]] || Meeting minutes || May 31, 2022 ||
|| [[https://discuss.python.org/t/pypi-org-account-project-update-iii/16136 | Project Update ]] || Discourse Post || May 31, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.6wd5x6rmb8ic|User Testing]] || Meeting minutes || June 1, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.vh8rkurxikfw|User Testing]] || Meeting minutes || June 3, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.ydi6bp6b1z7t|Team Meeting]] || Meeting minutes || June 7, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.5qu66m6usbkx|Team Meeting]] || Meeting minutes || June 14, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.9c7hh1xh44q2|Team Meeting]] || Meeting minutes || June 21, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=kix.9jo1669ckb2x|Team Meeting]] || Meeting minutes || June 28, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.yrsu7yva42tw|Team Meeting]] || Meeting minutes || July 5, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.pjv2b4k37lle|User Testing]] || Meeting minutes || June 6, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.qakpg5c45ovy|Team Meeting]] || Meeting minutes || July 12, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.j4urf12vxoob|Team Meeting]] || Meeting minutes || July 19, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.s1ao4euwi6an|Team Meeting]] || Meeting minutes || July 26, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.90je7vz7grmp|Team Meeting]] || Meeting minutes || Aug 02, 2022 ||
|| [[https://discuss.python.org/t/pypi-organization-account-project-update-iv/17940 | Project Update ]] || Discourse Post || Aug 03, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.h6zfh4kmp9rc|User Testing]] || Meeting minutes || Aug 05, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.w9mlatfq0mcw|User Testing]] || Meeting minutes || Aug 05, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.m7ic4tc5l4bx|User Testing]] || Meeting minutes || Aug 08, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.1p65w4pna4ad|User Testing]] || Meeting minutes || Aug 08, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.jfs6mfz2e771|User Testing]] || Meeting minutes || Aug 08, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.w763i2p9xr1y|Team Meeting]] || Meeting minutes || Aug 09, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.l6o5eh7gdza5|Team Meeting]] || Meeting minutes || Aug 16, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.fjv73tyhnsj4|Team Meeting]] || Meeting minutes || Sep 06, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=kix.rxgeucub9675|Team Meeting]] || Meeting minutes || Sep 13, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=kix.3suwu2gvfg8y|Team Meeting]] || Meeting minutes || Sep 27, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.loeg4akti4lk|Team Meeting]] || Meeting minutes || Oct 4, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.k9irfdhirabr|Team Meeting]] || Meeting minutes || Oct 11, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.wqz7ef1o66x8|User Testing]] || Meeting minutes || Oct 14, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.h6dpg5ofap3e|User Testing]] || Meeting minutes || Oct 20, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.hvg030lpxqse|User Testing]] || Meeting minutes || Oct 20, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.2itj98rewvvo|User Testing]] || Meeting minutes || Oct 21, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.vbucr64fbh8w|User Testing]] || Meeting minutes || Oct 21, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.ayhmmckepnyv|User Testing]] || Meeting minutes || Oct 24, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.bliqtvamn15d|Team Meeting]] || Meeting minutes || Oct 25, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.efo8qa3dh6th|User Testing]] || Meeting minutes || Oct 27, 2022 ||
|| [[https://docs.google.com/document/d/1v1_1c0C8jyHw72jj_suOzejaVBvdUjKBwMVxuoRWFqk/edit#bookmark=id.og8jwfc3xalx|User Testing]] || Meeting minutes || Nov 09, 2022 ||

=== Warehouse: Facebook gift ===

The Packaging Working Group applied for and is receiving a gift from Facebook to implement &amp; deploy security features for Warehouse (PyPI's codebase).

  * ''Summary'': Cryptographic signing of artifacts, and malware detection. [[https://pyfound.blogspot.com/2018/12/upcoming-pypi-improvements-for-2019.html|See announcement blog post]], and [[https://github.com/pypa/warehouse/milestone/16|the milestone description on GitHub]].
  * ''Schedule'': As of 2 January 2020, the PSF has hired contractors to carry out this work, and has commenced work.
  * ''Roadmap'': [[WarehouseRoadmap]]
  * ''Code and discussion'': [[https://github.com/pypa/warehouse/|GitHub repository for Warehouse]], [[https://python.zulipchat.com/#narrow/stream/223926-pep458-implementation/|Zulip livechat]], and [[https://discuss.python.org/c/packaging|Discourse forum]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': To be determined
  * ''Manager'': Ee Durbin
  * ''Meetings and Updates'': See below.

Meetings and status updates:

|| Meeting/update || Type || Date ||
|| [[https://www.youtube.com/watch?v=jjAq7S49eow|Python Package Index - Python Software Foundation's TUF key generation and signing ceremonies]] || Live video stream of ceremony || October 30th, 2020 ||
|| [[PackagingWG/2019-06-20-Warehouse|Scoping Facebook-funded work]] || Meeting notes || June 20th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/08/pypi-security-q4-2019-request-for.html|Announcement of Request for Information]] || Blog post || August 28th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/09/pypi-security-q4-2019-request-for.html|Announcement of Request for Proposals]] || Blog post || September 25th, 2019 ||
|| [[PackagingWG/2019-12-11-Warehouse|Kickoff - 2019 Q4 RFP Milestone 2 - Automated Detection of Malicious Uploads]] || Meeting notes || December 11th, 2019 ||
|| [[https://ssl.engineering.nyu.edu/blog/2020-02-03-transparent-logs|Contrasting Transparent Logs and The Update Framework]] || Blog post || February 3rd, 2020 ||
|| [[https://pyfound.blogspot.com/2020/03/an-update-pypi-funded-work.html|An Update PyPI Funded Work]] || Blog post || March 4th, 2020 ||
|| [[https://www.meetup.com/pacifichackers/events/267932809/|Automatic detection of Malware in PyPi]] ([[https://www.youtube.com/watch?v=28BoQLWKGWw|video]]) || Online talk || March 14th, 2020 ||

=== Dependency resolver and user experience improvements for pip ===

The Packaging Working Group applied for and is receiving funding to work in 2020 on the design, implementation, and rollout of [[https://github.com/psf/fundable-packaging-improvements/blob/master/FUNDABLES.md#finish-dependency-resolver-for-pip|pip's next-generation dependency resolver]]. The donors funding this work are the [[https://chanzuckerberg.com/eoss/proposals/improving-user-experience-and-debuggability-of-pip-for-all-python-users/|Chan Zuckerberg Initiative]] (USD$200,000) and [[https://www.mozilla.org/en-US/moss/|Mozilla Open Source Support]] (USD$207,000).

  * ''Summary'': Complete [[https://github.com/psf/fundable-packaging-improvements/blob/master/FUNDABLES.md#finish-dependency-resolver-for-pip|pip's next-generation dependency resolver]], and do [[https://github.com/psf/fundable-packaging-improvements/blob/master/FUNDABLES.md#improve-pip-user-experience|user experience research and design to improve pip's usability and debuggability]]
  * ''Schedule'': The PSF chose contractors to carry out this work in late 2019/early 2020, and commenced work in early 2020. In July 2020 the team delivered pip 20.2, which includes a beta of the new resolver. The team [[https://pip.pypa.io/en/latest/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020|shipped the new resolver as default in pip 20.3]], in November 2020. The work will end in December 2020/early January 2021.
  * ''Roadmap'': [[Pip2020DonorFundedRoadmap]]
  * ''Code and discussion'': [[https://github.com/pypa/pip/|GitHub repository for pip]], [[https://python.zulipchat.com/#narrow/stream/218659-pip-development|Zulip livechat]], and [[https://discuss.python.org/c/packaging|Discourse forum]].
  * ''Testing'': A mix of automated testing and a series of general public beta periods.
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.

Meetings and status updates:

|| Meeting/update || Type || Date ||
|| [[PackagingWG/2020-12-23-pip-team-meeting|Team meeting]] || Meeting notes || December 23rd, 2020 ||
|| [[PackagingWG/2020-12-22-pip-team-meeting|Team meeting]] || Meeting notes || December 22nd, 2020 ||
|| [[PackagingWG/2020-12-16-pip-team-meeting|Team meeting]] || Meeting notes || December 16th, 2020 ||
|| [[PackagingWG/2020-12-15-pip-team-meeting|Team meeting]] || Meeting notes || December 15th, 2020 ||
|| [[https://zenodo.org/record/4484437|Retrospective presentation at CZI convening]] || Presentation || December 10th, 2020 ||
|| [[PackagingWG/2020-12-09-pip-team-meeting|Team meeting]] || Meeting notes || December 9th, 2020 ||
|| [[PackagingWG/2020-12-08-pip-team-meeting|Team meeting]] || Meeting notes || December 8th, 2020 ||
|| [[PackagingWG/2020-12-02-pip-team-meeting|Team meeting]] || Meeting notes || December 2nd, 2020 ||
|| [[PackagingWG/2020-12-01-pip-team-meeting|Team meeting]] || Meeting notes || December 1st, 2020 ||
|| [[PackagingWG/2020-11-25-pip-small-meeting|Pradyun-Sumana meeting]] || Meeting notes || November 25th, 2020 ||
|| [[https://discuss.python.org/t/announcement-pip-20-3-release/5948|Announcement: pip 20.3 release!]] || Forum post || November 30th, 2020 ||
|| [[https://pyfound.blogspot.com/2020/11/pip-20-3-new-resolver.html| Releasing pip 20.3, featuring new dependency resolver ]] || Blog post || November 30th, 2020 ||
|| [[PackagingWG/2020-11-24-pip-team-meeting|Team meeting]] || Meeting notes || November 24th, 2020 ||
|| [[PackagingWG/2020-11-23-pip-team-meeting|Team meeting]] || Meeting notes || November 23rd, 2020 ||
|| [[PackagingWG/2020-11-18-pip-team-meeting|Team meeting]] || Meeting notes || November 18th, 2020 ||
|| [[PackagingWG/2020-11-17-pip-team-meeting|Team meeting]] || Meeting notes || November 17th, 2020 ||
|| [[PackagingWG/2020-11-11-pip-team-meeting|Team meeting]] || Meeting notes || November 11th, 2020 ||
|| [[PackagingWG/2020-11-10-pip-teamwide-meeting|Full teamwide meeting]] || Meeting notes || November 10th, 2020 ||
|| [[PackagingWG/2020-11-02-pip-teamwide-meeting|Team meeting]] || Meeting notes || November 2nd, 2020 ||
|| [[PackagingWG/2020-10-28-pip-teamwide-meeting|Full teamwide meeting]] || Meeting notes || October 28th, 2020 ||
|| [[PackagingWG/2020-10-27-pip-teamwide-meeting|Full teamwide meeting]] || Meeting notes || October 27th, 2020 ||
|| [[PackagingWG/2020-10-21-pip-teamwide-meeting|Full teamwide meeting]] || Meeting notes || October 21st, 2020 ||
|| [[PackagingWG/2020-10-20-pip-team-meeting|Team meeting]] || Meeting notes || October 20th, 2020 ||
|| [[PackagingWG/2020-10-12-pip-teamwidemeeting|Full teamwide meeting]] || Meeting notes || October 12th, 2020 ||
|| [[PackagingWG/2020-10-07-pip-teamwidemeeting|Full teamwide meeting]] || Meeting notes || October 7th, 2020 ||
|| [[PackagingWG/2020-10-06-pip-teamwidemeeting|Mini- meeting]] || Meeting notes || October 6th, 2020 ||
|| [[https://realpython.com/podcasts/rpp/29/|Real Python podcast interview with Georgia Bullen and Sumana Harihareswara, "Resolving Package Dependencies With the New Version of Pip"]] || Podcast interview || October 2nd, 2020 ||
|| [[PackagingWG/2020-09-30-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || September 30th, 2020 ||
|| [[https://devjourney.info/Guests/120-SumanaHarihareswara.html|Software Developers Journey Podcast interview with Sumana Harihareswara]] || Podcast interview || September 29th, 2020 ||
|| [[https://www.youtube.com/watch?v=B4GQCBBsuNU|"Changes are coming to pip" video]] || Video on !YouTube || September 29th, 2020 ||
|| [[PackagingWG/2020-09-29-pip-teamwidemeeting|Mini-team meeting]] || Meeting notes || September 29th, 2020 ||
|| [[PackagingWG/2020-09-23-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || September 23rd, 2020 ||
|| [[PackagingWG/2020-09-16-pip-mini-team-meeting|Teamwide meeting]] || Meeting notes || September 16th, 2020 ||
|| [[https://pyfound.blogspot.com/2020/09/answer-surveys-improve-pip-ux.html|Answer these surveys to improve pip's usability]] || Blog post || September 15th, 2020 ||
|| [[PackagingWG/2020-09-09-pip-mini-team-meeting|Mini-team meeting]] || Meeting notes || September 9th, 2020 ||
|| [[PackagingWG/2020-09-08-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || September 8th, 2020 ||
|| [[https://twit.tv/shows/floss-weekly/episodes/594?autostart=false|FLOSS Weekly #594: Pip and the Python Package Index]] || Podcast interview || September 2nd, 2020 ||
|| [[PackagingWG/2020-09-02-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || September 2nd, 2020 ||
|| [[PackagingWG/2020-08-26-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || August 26th, 2020 ||
|| [[PackagingWG/2020-08-19-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || August 19th, 2020 ||
|| [[PackagingWG/2020-08-12-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || August 12th, 2020 ||
|| [[PackagingWG/2020-08-05-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || August 5th, 2020 ||
|| [[https://testandcode.com/124|Test & Code 124: pip dependency resolver changes]] || Podcast interview || August 3rd, 2020 ||
|| [[https://blog.python.org/2020/07/upgrade-pip-20-2-changes-20-3.html|Upgrade to pip 20.2, plus, changes coming in 20.3]] || Blog post || July 30th, 2020 ||
|| [[PackagingWG/2020-07-29-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || July 29th, 2020 ||
|| [[PackagingWG/2020-07-22-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || July 22nd, 2020 ||
|| [[PackagingWG/2020-07-15-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || July 15th, 2020 ||
|| [[https://pyfound.blogspot.com/2020/07/pip-team-midyear-report.html|Pip team midyear report]] || Blog post || July 13th, 2020 ||
|| [[PackagingWG/2020-07-08-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || July 8th, 2020 ||
|| [[PackagingWG/2020-07-01-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || July 1st, 2020 ||
|| [[PackagingWG/2020-06-24-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || June 24th, 2020 ||
|| [[PackagingWG/2020-06-17-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || June 17th, 2020 ||
|| [[PackagingWG/2020-06-10-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || June 10th, 2020 ||
|| [[PackagingWG/2020-06-03-pip|Developer team syncup, and teamwide meeting]] || Meeting notes || June 3rd, 2020 ||
|| [[PackagingWG/2020-05-27-pip|Developer team syncup, and teamwide meeting]] || Meeting notes || May 27th, 2020 ||
|| [[https://www.pythonpodcast.com/pip-resolver-dependency-management-episode-264/|Podcast.__init__ episode "Dependency Management Improvements In Pip's Resolver - Episode 264"]] || Podcast interview || May 25th, 2020 ||
|| [[PackagingWG/2020-05-20-pip-teamwidemeeting|Teamwide meeting]] || Meeting notes || May 20th, 2020 ||
|| [[PackagingWG/2020-05-20-pip|Developer team meeting]] || Meeting notes || May 20th, 2020 ||
|| [[PackagingWG/2020-05-18-pip|UX-dev collaboration discussion]] || Meeting notes || May 18th, 2020 ||
|| [[PackagingWG/2020-05-14-pip|Teamwide syncup]] || Meeting notes || May 14th, 2020 ||
|| [[PackagingWG/2020-05-13-pip|Nicole-Pradyun discussion]] || Meeting notes || May 13th, 2020 ||
|| [[PackagingWG/2020-05-11-pip|Developer team syncup]] || Meeting notes || May 11th, 2020 ||
|| [[PackagingWG/2020-05-07-pip|Teamwide syncup]] || Meeting notes || May 7th, 2020 ||
|| [[PackagingWG/2020-05-05-pip|Developer team syncup, and pip UX/resolver collaboration notes]] || Meeting notes || May 5th-7th, 2020 ||
|| [[https://blog.python.org/2020/04/pip-20-1-released.html|Pip 20.1 has been released]] || Blog post || April 30th, 2020 ||
|| [[PackagingWG/2020-04-30-pip|Teamwide syncup]] || Meeting notes || April 30th, 2020 ||
|| [[PackagingWG/2020-04-29-pip|Tzu-Ping and Pradyun discussion]] || Meeting notes || April 29th, 2020 ||
|| [[PackagingWG/2020-04-28-pip|Developer team syncup]] || Meeting notes || April 28th, 2020 ||
|| [[PackagingWG/2020-04-23-pip|Resolver planning team syncup]] || Meeting notes || April 23rd, 2020 ||
|| [[PackagingWG/2020-04-22-pip|Developer team syncup]] || Meeting notes || April 22nd, 2020 ||
|| [[https://discuss.python.org/t/an-update-on-pip-and-dependency-resolution/1898/4|An update on pip and dependency resolution]] || Forum post || April 20th, 2020 ||
|| [[PackagingWG/2020-04-16-pip|Resolver planning discussion and team syncup]] || Meeting notes || April 16th, 2020 ||
|| [[PackagingWG/2020-04-14-pip|Resolver planning discussion]] || Meeting notes || April 14th, 2020 ||
|| [[PackagingWG/2020-04-09-pip|Weekly team syncup]] || Meeting notes || April 9th, 2020 ||
|| [[PackagingWG/2020-04-08-pip|Resolver planning discussion]] || Meeting notes || April 8th, 2020 ||
|| [[PackagingWG/2020-04-04-pip|Test-writing planning meeting]] || Meeting notes || April 4th, 2020 ||
|| [[PackagingWG/2020-04-02-pip|Resolver planning discussion and team syncup]] || Meeting notes || April 2nd, 2020 ||
|| [[PackagingWG/2020-03-28-pip|Test-writing planning meeting]] || Meeting notes || March 28th, 2020 ||
|| [[PackagingWG/2020-03-27-pip|Test planning meeting]] || Meeting notes || March 27th, 2020 ||
|| [[PackagingWG/2020-03-26-pip|Resolver planning discussion and team syncup]] || Meeting notes || March 26th, 2020 ||
|| [[https://pyfound.blogspot.com/2020/03/new-pip-resolver-to-roll-out-this-year.html|New pip resolver to roll out this year]] || Blog post || March 23rd, 2020 ||
|| [[PackagingWG/2020-03-19-pip|Resolver planning discussion and team syncup]] || Meeting notes || March 19th, 2020 ||
|| [[PackagingWG/2020-03-17-pip|Resolver planning discussion]] || Meeting notes || March 17th, 2020 ||
|| [[PackagingWG/2020-03-12-pip|Resolver planning discussion and team syncup]] || Meeting notes || March 12th, 2020 ||
|| [[PackagingWG/2020-03-10-pip|Resolver planning discussion]] || Meeting notes || March 10th, 2020 ||
|| [[http://www.ei8fdb.org/thoughts/2020/03/pip-ux-study-recruitment/|Sign-up for the pip UX Studies!]] || Blog post || March 5th, 2020 ||
|| [[PackagingWG/2020-03-05-pip|Resolver planning discussion and weekly team syncup]] || Meeting notes || March 5th, 2020 ||
|| [[PackagingWG/2020-03-03-pip|Resolver planning discussion]] || Meeting notes || March 3rd, 2020 ||
|| [[PackagingWG/2020-02-27-pip|Weekly team syncup]] || Meeting notes || February 27th, 2020 ||
|| [[https://zenodo.org/record/3852050|Presentation "Python Packaging and Science" from CZI convening]] || Presentation || February 25th, 2020 ||
|| [[PackagingWG/2020-02-20-pip|Weekly team syncup]] || Meeting notes || February 20th, 2020 ||
|| [[PackagingWG/2020-02-19-pip|PyCon UX research planning discussion]] || Meeting notes || February 19th, 2020 ||
|| [[PackagingWG/2020-02-17-pip|Resolver planning discussion]] || Meeting notes || February 17th, 2020 ||
|| [[PackagingWG/2020-02-13-pip|Weekly team syncup]] || Meeting notes || February 13th, 2020 ||
|| [[PackagingWG/2020-02-07-pip-explanation|Explanation of pip's moving parts]] || Meeting notes || February 7th, 2020 ||
|| [[PackagingWG/2020-02-06-pip|Weekly team syncup]] || Meeting notes || February 6th, 2020 ||
|| [[PackagingWG/2020-01-29-pip|Planning UX research work]] || Meeting notes || January 29th, 2020 ||
|| [[PackagingWG/2020-01-23-pip|Planning test infrastructure work]] || Meeting notes || January 23rd, 2020 ||
|| [[PackagingWG/2020-01-08-pip|Beginning to plan resolver work]] || Meeting notes || January 8th, 2020 ||
|| [[https://pyfound.blogspot.com/2019/12/moss-czi-support-pip.html|Mozilla and Chan Zuckerberg Initiative to support pip]] || Blog post || December 4th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/11/seeking-developers-for-paid-contract.html|Seeking Developers for Paid Contract Improving pip]] || Blog post || November 11th, 2019 ||

=== Warehouse: OTF grant ===

The Packaging Working Group applied for and [[https://www.opentech.fund/results/supported-projects/pypi-improvements/|received a performance-based contract (like a grant) from the Open Technology Fund]] to implement &amp; deploy security, localization, and accessibility improvements for Warehouse (PyPI's codebase).

  * ''Summary'': [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|See March 13 2019 blog post]].
  * ''Roadmap'': [[https://warehouse.readthedocs.io/roadmap/|On Read the Docs.]]
  * ''Schedule'': Several contractors worked, paid by PSF using the OTF funds, from March 2019 till October 2019. As of 8 October 2019, OTF-funded contractors [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|have finished security improvements, accessibility and internationalization/localization improvements to Warehouse]], and volunteers are working on Milestone 6, "Post Legacy Shutdown".
  * ''Code'': [[https://github.com/pypa/warehouse/|GitHub repository]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': [[WarehousePackageMaintainerTesting]]
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.

Meetings and status updates from the OTF grant-funded project:

|| Meeting/update || Type || Date ||
|| [[https://pyfound.blogspot.com/2020/01/start-using-2fa-and-api-tokens-on-pypi.html|Start using 2FA and API Tokens on PyPI]] || Blog post || January 17th, 2020 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/49|API tokens and all 2FA methods are out of beta]] || Forum post || January 17th, 2020 ||
|| [[https://discuss.python.org/t/pypi-localization-accessibility-progress/2284/4|Concluding report on localisation and accessibility work]] || Forum post || October 8th, 2019 ||
|| [[https://discuss.python.org/t/pypi-localization-accessibility-progress/2284|Early Sept. update on accessibility &amp; localisation work]] || Forum post || September 8th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/47|Early September update on security work]] || Forum post || September 8th, 2019 ||
|| [[https://twit.tv/shows/floss-weekly/episodes/545?autostart=false|FLOSS Weekly 545, PyPI Security]] || Podcast interview || September 4th, 2019 ||
|| [[PackagingWG/2019-08-29-Warehouse|Prioritizing and estimating security, l10n and a11y work]] || Meeting notes || August 29th, 2019 ||
|| [[https://www.pythonpodcast.com/pypi-improvements-episode-225/|Podcast.__init__ Episode 225: Security, UX, and Sustainability For The Python Package Index]] || Podcast interview || August 19th, 2019 ||
|| [[https://blog.python.org/2019/08/inspect-pypi-event-logs-audit-security.html|Inspect PyPI event logs to audit your account's and project's security]] || Blog post || August 15th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/43|Early Aug. update on 2FA, API keys, audit log, &amp; a11y work]] || Forum post || August 6th, 2019 ||
|| [[PackagingWG/2019-08-02-Warehouse|Prioritizing API token and 2FA issues]] || Meeting notes || August 2nd, 2019 ||
|| [[PackagingWG/2019-07-31-Warehouse|Audit log design planning]] || Meeting notes || July 31st, 2019 ||
|| [[https://blog.python.org/2019/07/pypi-now-supports-uploading-via-api.html|PyPI now supports uploading via API token]] || Blog post || July 31st, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/31|preliminary announcement of API token beta]] || Forum post || July 25th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/29|Mid-July update on 2FA, API keys, and a11y work]] || Forum post || July 17th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/27|Early July update on 2FA, API keys, and a11y work]] || Forum post || July 3rd, 2019 ||
|| [[PackagingWG/2019-06-24-Warehouse|API key design planning]] || Meeting notes || June 24th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/06/pypi-now-supports-two-factor-login-via.html|PyPI Now Supports Two-Factor Login via WebAuthn]] || Blog post || June 18th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/23|Early June update on WebAuthn and accessibility work]] || Forum post || June 8th, 2019 ||
|| [[PackagingWG/2019-06-07-Warehouse|Initial a11y and i18n planning]] || Meeting notes || June 7th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/05/use-two-factor-auth-to-improve-your.html|Use two-factor auth to improve your PyPI account's security]] || Blog post || May 30th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/17|Late May update on TOTP and WebAuthN work]] || Forum post || May 22nd, 2019 ||
|| [[https://mail.python.org/archives/list/distutils-sig@python.org/thread/JMOBWXWYC2EFYB5JBFMXWBEGD4EAD3CC/|PyPI two-factor auth (2FA) trial May 3-20]] || Mailing list post || May 2nd, 2019 ||
|| [[https://discuss.python.org/t/pypi-two-factor-auth-2fa-trial-may-3-20/1590|(cross-post) PyPI two-factor auth (2FA) trial May 3-20]] || Forum post || May 2nd, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/10?|Early April update on work and request for advice]] || Forum post || April 3rd, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042|PyPI security work: multifactor auth progress &amp; help needed]] || Forum post || March 22nd, 2019 ||
|| [[PackagingWG/2019-03-22-Warehouse|Prioritizing extant security issues]] || Meeting notes || March 22nd, 2019 ||
|| [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|Commencing security, a11y, &amp; i18n improvements to PyPI for 2019]] || Blog post || March 13th, 2019 ||
|| [[PackagingWG/2019-03-11-Warehouse|Kickoff planning meeting with grant-funded team]] || Meeting notes || March 11th, 2019 ||
|| [[https://pyfound.blogspot.com/2018/12/upcoming-pypi-improvements-for-2019.html|Upcoming PyPI Improvements for 2019]] || Blog post || December 20th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/12/pypi-security-and-accessibility-q1-2019.html|PyPI Security and Accessibility Q1 2019 Request for Proposals Update]] || Blog post || December 19th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/11/pypi-security-and-accessibility-q1-2019.html|PyPI Security and Accessibility Q1 2019 Request for Proposals period opens]] || Blog post || November 19th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/10/pypi-security-and-accessibility-q1-2019.html|PyPI Security and Accessibility Q1 2019 Request for Information period opens]] || Blog post || October 30th, 2018 ||

=== Warehouse rollout ===

The Packaging Working Group supported the implementation &amp; deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered [[https://github.com/pypa/pypi-legacy|legacy PyPI]]. [[https://pyfound.blogspot.com/2016/01/welcome-to-warehouse.html|Announced on PSF blog in January 2016]]; see its history in [[https://lwn.net/Articles/751458/|this April 2018 LWN article]].

  * ''Summary'': [[https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html|PSF blog post about the MOSS grant]].
  * ''Roadmap'': [[WarehouseRoadmap]]. As of 30 April 2018, the Warehouse team has shut down the legacy PyPI installation, and -- on a volunteer basis -- is working on Milestone 6, "Post Legacy Shutdown".
  * ''Code'': [[https://github.com/pypa/warehouse/|GitHub repository]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': See [[https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html#test|the PSF blog post about testing for the beta]]. (Previously: [[WarehousePackageMaintainerTesting]], [[https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html|PSF blog post about testing package maintainer functionality]].)
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.
Line 116: Line 358:

========================================================================================================================================================== ================== ==========================
                  Meeting/update Type Date
========================================================================================================================================================== ================== ==========================
`PSF announcement of $170,000 MOSS award to improve sustainability of PyPI <https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html>`_ Blog post November 27, 2017
`Kickoff meeting <PackagingWG/2017-12-04-Warehouse>`_ Meeting notes Monday, Dec. 4, 2017
`Kickoff/milestone update <https://mail.python.org/pipermail/distutils-sig/2017-December/031803.html>`_ Mailing list post Thursday, Dec. 7, 2017
Developer experience audit walkthrough in-person meeting Tuesday, December 12, 2017
`Maintainer MVP milestone bug triage <PackagingWG/2017-12-19-Warehouse>`_ Meeting notes Tuesday, Dec. 19, 2017
`Maintainer MVP milestone schedule discussion <PackagingWG/2018-01-10-Warehouse>`_ Meeting notes January 10, 2018
`Mid-January progress <https://groups.google.com/forum/#!topic/pypa-dev/u-RSxosXQh4>`_ Mailing list post Jan. 15, 2018
`Role management and welcoming first-time contributors <https://groups.google.com/forum/#!topic/pypa-dev/f7VZ_gh5Je0>`_ Mailing list post Jan. 23, 2018
`Standup, bug triage, and milestone schedule discussion <PackagingWG/2018-01-29-Warehouse>`_ Meeting notes January 29, 2018
`Late January progress <https://groups.google.com/forum/#!topic/pypa-dev/es_-fC-sdpk>`_ Mailing list post Jan. 30, 2018
`Standup, bug triage, milestone schedule discussion <PackagingWG/2018-02-05-Warehouse>`_ Meeting notes February 5, 2018
`Warehouse update: still on track, new features <https://groups.google.com/forum/#!topic/pypa-dev/OuFoQqo8ajA>`_ Mailing list post Feb. 6, 2018
`Standup/bug triage/milestone schedule update meeting <PackagingWG/2018-02-12-Warehouse>`_ Meeting notes Feb. 12th, 2018
`Warehouse: package manager features & question about advertising <https://groups.google.com/forum/#!topic/pypa-dev/xQb5RvDb5rc>`_ Mailing list post Feb. 13, 2018
`Standup, bug triage, & milestone schedule update meeting <PackagingWG/2018-02-20-Warehouse>`_ Meeting notes Feb. 20th, 2018
`Warehouse: essential maintainer features & next steps <https://mail.python.org/pipermail/distutils-sig/2018-February/032013.html>`_ Mailing list post Feb. 21st, 2018
`Standup, bug triage, and milestone schedule update meeting <PackagingWG/2018-02-26-Warehouse>`_ Meeting notes Feb. 26th, 2018
`Python package maintainers, help test the new PyPI! <https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html>`_ Blog post Feb. 26th, 2018
`Warehouse update: a week of testing, polish, & infrastructure <https://mail.python.org/pipermail/distutils-sig/2018-February/032020.html>`_ Mailing list post Feb. 27th, 2018
`Planning meeting <PackagingWG/2018-03-06-Warehouse>`_ Meeting notes March 6th, 2018
`PyPI & Warehouse update: redirecting & shutting down legacy by end of April <https://groups.google.com/forum/#!topic/pypa-dev/L9sF30_Yr2A>`_ Mailing list post March 7th, 2018
`Core Warehouse developers' planning meeting <PackagingWG/2018-03-12-Warehouse>`_ Meeting notes March 12th, 2018
`new stuff overview, beta next week, user tests, & other Warehouse updates <https://mail.python.org/pipermail/distutils-sig/2018-March/032043.html>`_ Mailing list post March 14th, 2018
`Planning meeting with core Warehouse developers <PackagingWG/2018-03-19-Warehouse>`_ Meeting notes March 19th, 2018
`PyPI/Warehouse: infrastructure hardening & the CAPTCHA conundrum <https://mail.python.org/pipermail/distutils-sig/2018-March/032065.html>`_ Mailing list post March 20th, 2018
`Weekly planning meeting with core Warehouse developers <PackagingWG/2018-03-26-Warehouse>`_ Meeting notes March 20th, 2018
`Warehouse: All New PyPI is now in beta <https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html>`_ Blog post March 26th, 2018
`The all new Python Package Index is now in beta at pypi.org <https://blog.python.org/2018/03/the-all-new-python-package-index-is-now.html>`_ Blog post March 26th, 2018
`beta, pythonhosted docs, PEP 541 <https://mail.python.org/pipermail/distutils-sig/2018-March/032100.html>`_ Mailing list post March 28th, 2018
`Early April planning meeting with core Warehouse developers <PackagingWG/2018-04-02-Warehouse>`_ Meeting notes April 2nd, 2018
`PyPI/Warehouse update: new advice & launch, shutdown dates <https://mail.python.org/pipermail/distutils-sig/2018-April/032120.html>`_ Mailing list post April 3rd, 2018
`Mid-April planning meeting with core Warehouse developers <PackagingWG/2018-04-10-Warehouse>`_ Meeting notes April 10th, 2018
`PyPI/Warehouse (short) weekly report: Progress towards launch milestone <https://mail.python.org/pipermail/distutils-sig/2018-April/032143.html>`_ Mailing list post April 10th, 2018
`Summary of PyPI overhaul in new LWN article <https://mail.python.org/pipermail/distutils-sig/2018-April/032154.html>`_ Mailing list post April 11th, 2018
`Next Generation PyPI rollout incident report <https://status.python.org/incidents/mgjw1g5yjy5j>`_ Statuspage report April 16th, 2018
`New PyPI launched, legacy PyPI shutting down April 30 <https://blog.python.org/2018/04/new-pypi-launched-legacy-pypi-shutting.html>`_ Blog post April 16th, 2018
`Post-launch planning with core Warehouse developers <PackagingWG/2018-04-17-Warehouse>`_ Meeting notes April 17th, 2018
`Warehouse/PyPI update: launch, project wrapup approaching <https://groups.google.com/forum/#!topic/pypa-dev/MBa5300VlI8>`_ Mailing list post April 18th, 2018
`Pre-legacy-shutdown planning with core Warehouse developers <PackagingWG/2018-04-23-Warehouse>`_ Meeting notes April 23rd, 2018
`PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding <https://groups.google.com/forum/#!topic/pypa-dev/zzaTiAoQrA0>`_ Mailing list post April 24th, 2018
`Python legacy sunsetting <https://status.python.org/incidents/ptvp1wnn0jmq>`_ Statuspage report April 30th, 2018
`legacy.pypi.org shutdown notice <https://mail.python.org/mm3/archives/list/distutils-sig@python.org/thread/YREMU56QKRMTTFBFVFJ2B4EHOEKOJZFJ/>`_ Mailing list post April 30th, 2018
`End-of-project conference call <PackagingWG/2018-04-30-Warehouse>`_ Meeting notes April 30th, 2018
`Final weekly report: legacy is shut down <https://mail.python.org/mm3/archives/list/distutils-sig@python.org/message/EUCKR3LP6WSH3ZY3YHIXDHYHF6R3HFJE/>`_ Mailing list post May 1, 2018
========================================================================================================================================================== ================== ==========================		 || Meeting/update || Type || Date ||
|| [[https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html|PSF announcement of $170,000 MOSS award to improve sustainability of PyPI]] || Blog post || November 27, 2017 ||
|| [[PackagingWG/2017-12-04-Warehouse|Kickoff meeting]] || Meeting notes || Monday, Dec. 4, 2017 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2017-December/031803.html|Kickoff/milestone update]] || Mailing list post || Thursday, Dec. 7, 2017 ||
|| Developer experience audit walkthrough || in-person meeting || Tuesday, December 12, 2017 ||
|| [[PackagingWG/2017-12-19-Warehouse|Maintainer MVP milestone bug triage]] || Meeting notes || Tuesday, Dec. 19, 2017 ||
|| [[PackagingWG/2018-01-10-Warehouse|Maintainer MVP milestone schedule discussion]] || Meeting notes || January 10, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/u-RSxosXQh4|Mid-January progress]] || Mailing list post || Jan. 15, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/f7VZ_gh5Je0|Role management and welcoming first-time contributors]] || Mailing list post || Jan. 23, 2018 ||
|| [[PackagingWG/2018-01-29-Warehouse|Standup, bug triage, and milestone schedule discussion]] || Meeting notes || January 29, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/es_-fC-sdpk|Late January progress]] || Mailing list post || Jan. 30, 2018 ||
|| [[PackagingWG/2018-02-05-Warehouse|Standup, bug triage, milestone schedule discussion]] || Meeting notes || February 5, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/OuFoQqo8ajA|Warehouse update: still on track, new features]] || Mailing list post || Feb. 6, 2018 ||
|| [[PackagingWG/2018-02-12-Warehouse|Standup/bug triage/milestone schedule update meeting]] || Meeting notes || Feb. 12th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/xQb5RvDb5rc|Warehouse: package manager features &amp; question about advertising]] || Mailing list post || Feb. 13, 2018 ||
|| [[PackagingWG/2018-02-20-Warehouse|Standup, bug triage, &amp; milestone schedule update meeting]] || Meeting notes || Feb. 20th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-February/032013.html|Warehouse: essential maintainer features &amp; next steps]] || Mailing list post || Feb. 21st, 2018 ||
|| [[PackagingWG/2018-02-26-Warehouse|Standup, bug triage, and milestone schedule update meeting]] || Meeting notes || Feb. 26th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html|Python package maintainers, help test the new PyPI!]] || Blog post || Feb. 26th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-February/032020.html|Warehouse update: a week of testing, polish, &amp; infrastructure]] || Mailing list post || Feb. 27th, 2018 ||
|| [[PackagingWG/2018-03-06-Warehouse|Planning meeting]] || Meeting notes || March 6th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/L9sF30_Yr2A|PyPI &amp; Warehouse update: redirecting &amp; shutting down legacy by end of April]] || Mailing list post || March 7th, 2018 ||
|| [[PackagingWG/2018-03-12-Warehouse|Core Warehouse developers' planning meeting]] || Meeting notes || March 12th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032043.html|new stuff overview, beta next week, user tests, &amp; other Warehouse updates]] || Mailing list post || March 14th, 2018 ||
|| [[PackagingWG/2018-03-19-Warehouse|Planning meeting with core Warehouse developers]] || Meeting notes || March 19th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032065.html|PyPI/Warehouse: infrastructure hardening &amp; the CAPTCHA conundrum]] || Mailing list post || March 20th, 2018 ||
|| [[PackagingWG/2018-03-26-Warehouse|Weekly planning meeting with core Warehouse developers]] || Meeting notes || March 20th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html|Warehouse: All New PyPI is now in beta]] || Blog post || March 26th, 2018 ||
|| [[https://blog.python.org/2018/03/the-all-new-python-package-index-is-now.html|The all new Python Package Index is now in beta at pypi.org]] || Blog post || March 26th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032100.html|beta, pythonhosted docs, PEP 541]] || Mailing list post || March 28th, 2018 ||
|| [[PackagingWG/2018-04-02-Warehouse|Early April planning meeting with core Warehouse developers]] || Meeting notes || April 2nd, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032120.html|PyPI/Warehouse update: new advice &amp; launch, shutdown dates]] || Mailing list post || April 3rd, 2018 ||
|| [[PackagingWG/2018-04-10-Warehouse|Mid-April planning meeting with core Warehouse developers]] || Meeting notes || April 10th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032143.html|PyPI/Warehouse (short) weekly report: Progress towards launch milestone]] || Mailing list post || April 10th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032154.html|Summary of PyPI overhaul in new LWN article]] || Mailing list post || April 11th, 2018 ||
|| [[https://status.python.org/incidents/mgjw1g5yjy5j|Next Generation PyPI rollout incident report]] || Statuspage report || April 16th, 2018 ||
|| [[https://blog.python.org/2018/04/new-pypi-launched-legacy-pypi-shutting.html|New PyPI launched, legacy PyPI shutting down April 30]] || Blog post || April 16th, 2018 ||
|| [[PackagingWG/2018-04-17-Warehouse|Post-launch planning with core Warehouse developers]] || Meeting notes || April 17th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/MBa5300VlI8|Warehouse/PyPI update: launch, project wrapup approaching]] || Mailing list post || April 18th, 2018 ||
|| [[PackagingWG/2018-04-23-Warehouse|Pre-legacy-shutdown planning with core Warehouse developers]] || Meeting notes || April 23rd, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/zzaTiAoQrA0|PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding]] || Mailing list post || April 24th, 2018 ||
|| [[https://talkpython.fm/episodes/show/159/inside-the-new-pypi-launch|Talk Python Episode #159: Inside the new PyPI launch]] || Podcast interview || April 27, 2018 ||
|| [[https://status.python.org/incidents/ptvp1wnn0jmq|Python legacy sunsetting]] || Statuspage report || April 30th, 2018 ||
|| [[https://mail.python.org/mm3/archives/list/distutils-sig@python.org/thread/YREMU56QKRMTTFBFVFJ2B4EHOEKOJZFJ/|legacy.pypi.org shutdown notice]] || Mailing list post || April 30th, 2018 ||
|| [[PackagingWG/2018-04-30-Warehouse|End-of-project conference call]] || Meeting notes || April 30th, 2018 ||
|| [[https://mail.python.org/mm3/archives/list/distutils-sig@python.org/message/EUCKR3LP6WSH3ZY3YHIXDHYHF6R3HFJE/|Final weekly report: legacy is shut down]] || Mailing list post || May 1, 2018 ||
|| [[https://twit.tv/shows/floss-weekly/episodes/482?autostart=false|FLOSS Weekly #482, PyPI]] || Podcast interview || May 2, 2018 ||

Contents

  1. Packaging Working Group
    1. Agenda
    2. Resources
    3. Governance
      1. Administration and Contact
      2. Members
      3. Meetings
    4. Current Projects
      1. Fundraising
      2. Sprints
      3. PyPI Malware Reporting and Response project
    5. Past projects
      1. PyPI Organization Account
      2. Warehouse: Facebook gift
      3. Dependency resolver and user experience improvements for pip
      4. Warehouse: OTF grant
      5. Warehouse rollout

Packaging Working Group

The Packaging Working Group is a volunteer work group of the Python Software Foundation.

Agenda

The purpose of this working group is to support the larger efforts of improving and maintaining the packaging ecosystem in Python through fundraising (including a sponsorship program) and disbursement of raised funds. It largely focuses on efforts such as PyPI, pip, packaging.python.org, setuptools, and cross-project efforts.

Resources

  • Discussion: Slack and mailing list. The archives are set to private since there is voting.

  • Accounting: We rely on the PSF's donation and accounting mechanisms to raise funds and disburse them to the selected recipients.

  • Project ideas: Fundable packaging improvements

Governance

Decisions on what fundraising and projects/efforts to support will be done by a simple majority and in the case of a tie, will escalate to the PSF Board. See the PSF Packaging WG Charter.

Administration and Contact

To contact the Packaging WG, email <packaging-wg@python.org>.

Members

  • Nick Coghlan
  • Ee Durbin
  • Thea Flowers
  • Sumana Harihareswara
  • Nathaniel J. Smith
  • Tzu-ping Chung
  • Jannis Leidel
  • (others will be added as they accept their invitation to the WG)

Meetings

As needed.

Current Projects

Fundraising

The Packaging Working Group is seeking sponsorships and grants to raise funds for fundable packaging improvements.

Sprints

We run PackagingSprints at conventions and as standalone events. We're open to companies and organizations hosting sprints and work weeks to help us move packaging forward; get in contact with a Working Group member.

PyPI Malware Reporting and Response project

The PSF has received funding from the Center for Security and Emerging Technology (CSET) to develop and improve the infrastructure for malware reporting and response on PyPI.

  • Summary: Develop an API that allows malware reporting and define the criteria for automated consensus based takedown and soft-deletes of packages

  • Schedule: One year

  • Meetings and Updates: See below.

Meetings and status updates:

Meeting/update

Type

Date

Meeting with PyPI admins

Meeting minutes

June 02, 2023

Project Update

Discourse Post

June 21, 2023

Project Update

PyPI Blog Post

June 22, 2023

Meeting with CSET

Meeting minutes

July 03, 2023

Outreach Meeting

Meeting minutes

July 19, 2023

Outreach Meeting

Meeting minutes

July 19, 2023

Outreach Meeting

Meeting minutes

July 20, 2023

Outreach Meeting

Meeting minutes

July 20, 2023

Outreach Meeting

Meeting minutes

July 21, 2023

Outreach Meeting

Meeting minutes

July 25, 2023

Outreach Meeting

Meeting minutes

July 26, 2023

Outreach Meeting

Meeting minutes

July 27, 2023

Past projects

PyPI Organization Account

The Python Software Foundation, with the Packaging WG's approval, funded a project to deploy organization account features in PyPI.

Meetings and status updates:

Meeting/update

Type

Date

Onboarding

Meeting minutes

April 1, 2022

Team Meeting

Meeting minutes

April 5, 2022

Project Update

Discourse Post

April 8, 2022

Team Meeting

Meeting minutes

April 12, 2022

Team Meeting

Meeting minutes

April 19, 2022

Team Meeting

Meeting minutes

April 26, 2022

Team Meeting

Meeting minutes

May 3, 2022

Team Meeting

Meeting minutes

May 10, 2022

Project Update

Discourse Post

May 10, 2022

Team Meeting

Meeting minutes

May 17, 2022

Team Meeting

Meeting minutes

May 24, 2022

User Testing

Meeting minutes

May 27, 2022

Team Meeting

Meeting minutes

May 31, 2022

Project Update

Discourse Post

May 31, 2022

User Testing

Meeting minutes

June 1, 2022

User Testing

Meeting minutes

June 3, 2022

Team Meeting

Meeting minutes

June 7, 2022

Team Meeting

Meeting minutes

June 14, 2022

Team Meeting

Meeting minutes

June 21, 2022

Team Meeting

Meeting minutes

June 28, 2022

Team Meeting

Meeting minutes

July 5, 2022

User Testing

Meeting minutes

June 6, 2022

Team Meeting

Meeting minutes

July 12, 2022

Team Meeting

Meeting minutes

July 19, 2022

Team Meeting

Meeting minutes

July 26, 2022

Team Meeting

Meeting minutes

Aug 02, 2022

Project Update

Discourse Post

Aug 03, 2022

User Testing

Meeting minutes

Aug 05, 2022

User Testing

Meeting minutes

Aug 05, 2022

User Testing

Meeting minutes

Aug 08, 2022

User Testing

Meeting minutes

Aug 08, 2022

User Testing

Meeting minutes

Aug 08, 2022

Team Meeting

Meeting minutes

Aug 09, 2022

Team Meeting

Meeting minutes

Aug 16, 2022

Team Meeting

Meeting minutes

Sep 06, 2022

Team Meeting

Meeting minutes

Sep 13, 2022

Team Meeting

Meeting minutes

Sep 27, 2022

Team Meeting

Meeting minutes

Oct 4, 2022

Team Meeting

Meeting minutes

Oct 11, 2022

User Testing

Meeting minutes

Oct 14, 2022

User Testing

Meeting minutes

Oct 20, 2022

User Testing

Meeting minutes

Oct 20, 2022

User Testing

Meeting minutes

Oct 21, 2022

User Testing

Meeting minutes

Oct 21, 2022

User Testing

Meeting minutes

Oct 24, 2022

Team Meeting

Meeting minutes

Oct 25, 2022

User Testing

Meeting minutes

Oct 27, 2022

User Testing

Meeting minutes

Nov 09, 2022

Warehouse: Facebook gift

The Packaging Working Group applied for and is receiving a gift from Facebook to implement & deploy security features for Warehouse (PyPI's codebase).

Meetings and status updates:

Meeting/update

Type

Date

Python Package Index - Python Software Foundation's TUF key generation and signing ceremonies

Live video stream of ceremony

October 30th, 2020

Scoping Facebook-funded work

Meeting notes

June 20th, 2019

Announcement of Request for Information

Blog post

August 28th, 2019

Announcement of Request for Proposals

Blog post

September 25th, 2019

Kickoff - 2019 Q4 RFP Milestone 2 - Automated Detection of Malicious Uploads

Meeting notes

December 11th, 2019

Contrasting Transparent Logs and The Update Framework

Blog post

February 3rd, 2020

An Update PyPI Funded Work

Blog post

March 4th, 2020

Automatic detection of Malware in PyPi (video)

Online talk

March 14th, 2020

Dependency resolver and user experience improvements for pip

The Packaging Working Group applied for and is receiving funding to work in 2020 on the design, implementation, and rollout of pip's next-generation dependency resolver. The donors funding this work are the Chan Zuckerberg Initiative (USD$200,000) and Mozilla Open Source Support (USD$207,000).

Meetings and status updates:

Meeting/update

Type

Date

Team meeting

Meeting notes

December 23rd, 2020

Team meeting

Meeting notes

December 22nd, 2020

Team meeting

Meeting notes

December 16th, 2020

Team meeting

Meeting notes

December 15th, 2020

Retrospective presentation at CZI convening

Presentation

December 10th, 2020

Team meeting

Meeting notes

December 9th, 2020

Team meeting

Meeting notes

December 8th, 2020

Team meeting

Meeting notes

December 2nd, 2020

Team meeting

Meeting notes

December 1st, 2020

Pradyun-Sumana meeting

Meeting notes

November 25th, 2020

Announcement: pip 20.3 release!

Forum post

November 30th, 2020

Releasing pip 20.3, featuring new dependency resolver

Blog post

November 30th, 2020

Team meeting

Meeting notes

November 24th, 2020

Team meeting

Meeting notes

November 23rd, 2020

Team meeting

Meeting notes

November 18th, 2020

Team meeting

Meeting notes

November 17th, 2020

Team meeting

Meeting notes

November 11th, 2020

Full teamwide meeting

Meeting notes

November 10th, 2020

Team meeting

Meeting notes

November 2nd, 2020

Full teamwide meeting

Meeting notes

October 28th, 2020

Full teamwide meeting

Meeting notes

October 27th, 2020

Full teamwide meeting

Meeting notes

October 21st, 2020

Team meeting

Meeting notes

October 20th, 2020

Full teamwide meeting

Meeting notes

October 12th, 2020

Full teamwide meeting

Meeting notes

October 7th, 2020

Mini- meeting

Meeting notes

October 6th, 2020

Real Python podcast interview with Georgia Bullen and Sumana Harihareswara, "Resolving Package Dependencies With the New Version of Pip"

Podcast interview

October 2nd, 2020

Teamwide meeting

Meeting notes

September 30th, 2020

Software Developers Journey Podcast interview with Sumana Harihareswara

Podcast interview

September 29th, 2020

"Changes are coming to pip" video

Video on YouTube

September 29th, 2020

Mini-team meeting

Meeting notes

September 29th, 2020

Teamwide meeting

Meeting notes

September 23rd, 2020

Teamwide meeting

Meeting notes

September 16th, 2020

Answer these surveys to improve pip's usability

Blog post

September 15th, 2020

Mini-team meeting

Meeting notes

September 9th, 2020

Teamwide meeting

Meeting notes

September 8th, 2020

FLOSS Weekly #594: Pip and the Python Package Index

Podcast interview

September 2nd, 2020

Teamwide meeting

Meeting notes

September 2nd, 2020

Teamwide meeting

Meeting notes

August 26th, 2020

Teamwide meeting

Meeting notes

August 19th, 2020

Teamwide meeting

Meeting notes

August 12th, 2020

Teamwide meeting

Meeting notes

August 5th, 2020

Test & Code 124: pip dependency resolver changes

Podcast interview

August 3rd, 2020

Upgrade to pip 20.2, plus, changes coming in 20.3

Blog post

July 30th, 2020

Teamwide meeting

Meeting notes

July 29th, 2020

Teamwide meeting

Meeting notes

July 22nd, 2020

Teamwide meeting

Meeting notes

July 15th, 2020

Pip team midyear report

Blog post

July 13th, 2020

Teamwide meeting

Meeting notes

July 8th, 2020

Teamwide meeting

Meeting notes

July 1st, 2020

Teamwide meeting

Meeting notes

June 24th, 2020

Teamwide meeting

Meeting notes

June 17th, 2020

Teamwide meeting

Meeting notes

June 10th, 2020

Developer team syncup, and teamwide meeting

Meeting notes

June 3rd, 2020

Developer team syncup, and teamwide meeting

Meeting notes

May 27th, 2020

Podcast.__init__ episode "Dependency Management Improvements In Pip's Resolver - Episode 264"

Podcast interview

May 25th, 2020

Teamwide meeting

Meeting notes

May 20th, 2020

Developer team meeting

Meeting notes

May 20th, 2020

UX-dev collaboration discussion

Meeting notes

May 18th, 2020

Teamwide syncup

Meeting notes

May 14th, 2020

Nicole-Pradyun discussion

Meeting notes

May 13th, 2020

Developer team syncup

Meeting notes

May 11th, 2020

Teamwide syncup

Meeting notes

May 7th, 2020

Developer team syncup, and pip UX/resolver collaboration notes

Meeting notes

May 5th-7th, 2020

Pip 20.1 has been released

Blog post

April 30th, 2020

Teamwide syncup

Meeting notes

April 30th, 2020

Tzu-Ping and Pradyun discussion

Meeting notes

April 29th, 2020

Developer team syncup

Meeting notes

April 28th, 2020

Resolver planning team syncup

Meeting notes

April 23rd, 2020

Developer team syncup

Meeting notes

April 22nd, 2020

An update on pip and dependency resolution

Forum post

April 20th, 2020

Resolver planning discussion and team syncup

Meeting notes

April 16th, 2020

Resolver planning discussion

Meeting notes

April 14th, 2020

Weekly team syncup

Meeting notes

April 9th, 2020

Resolver planning discussion

Meeting notes

April 8th, 2020

Test-writing planning meeting

Meeting notes

April 4th, 2020

Resolver planning discussion and team syncup

Meeting notes

April 2nd, 2020

Test-writing planning meeting

Meeting notes

March 28th, 2020

Test planning meeting

Meeting notes

March 27th, 2020

Resolver planning discussion and team syncup

Meeting notes

March 26th, 2020

New pip resolver to roll out this year

Blog post

March 23rd, 2020

Resolver planning discussion and team syncup

Meeting notes

March 19th, 2020

Resolver planning discussion

Meeting notes

March 17th, 2020

Resolver planning discussion and team syncup

Meeting notes

March 12th, 2020

Resolver planning discussion

Meeting notes

March 10th, 2020

Sign-up for the pip UX Studies!

Blog post

March 5th, 2020

Resolver planning discussion and weekly team syncup

Meeting notes

March 5th, 2020

Resolver planning discussion

Meeting notes

March 3rd, 2020

Weekly team syncup

Meeting notes

February 27th, 2020

Presentation "Python Packaging and Science" from CZI convening

Presentation

February 25th, 2020

Weekly team syncup

Meeting notes

February 20th, 2020

PyCon UX research planning discussion

Meeting notes

February 19th, 2020

Resolver planning discussion

Meeting notes

February 17th, 2020

Weekly team syncup

Meeting notes

February 13th, 2020

Explanation of pip's moving parts

Meeting notes

February 7th, 2020

Weekly team syncup

Meeting notes

February 6th, 2020

Planning UX research work

Meeting notes

January 29th, 2020

Planning test infrastructure work

Meeting notes

January 23rd, 2020

Beginning to plan resolver work

Meeting notes

January 8th, 2020

Mozilla and Chan Zuckerberg Initiative to support pip

Blog post

December 4th, 2019

Seeking Developers for Paid Contract Improving pip

Blog post

November 11th, 2019

Warehouse: OTF grant

The Packaging Working Group applied for and received a performance-based contract (like a grant) from the Open Technology Fund to implement & deploy security, localization, and accessibility improvements for Warehouse (PyPI's codebase).

Meetings and status updates from the OTF grant-funded project:

Meeting/update

Type

Date

Start using 2FA and API Tokens on PyPI

Blog post

January 17th, 2020

API tokens and all 2FA methods are out of beta

Forum post

January 17th, 2020

Concluding report on localisation and accessibility work

Forum post

October 8th, 2019

Early Sept. update on accessibility &amp; localisation work

Forum post

September 8th, 2019

Early September update on security work

Forum post

September 8th, 2019

FLOSS Weekly 545, PyPI Security

Podcast interview

September 4th, 2019

Prioritizing and estimating security, l10n and a11y work

Meeting notes

August 29th, 2019

Podcast.__init__ Episode 225: Security, UX, and Sustainability For The Python Package Index

Podcast interview

August 19th, 2019

Inspect PyPI event logs to audit your account's and project's security

Blog post

August 15th, 2019

Early Aug. update on 2FA, API keys, audit log, &amp; a11y work

Forum post

August 6th, 2019

Prioritizing API token and 2FA issues

Meeting notes

August 2nd, 2019

Audit log design planning

Meeting notes

July 31st, 2019

PyPI now supports uploading via API token

Blog post

July 31st, 2019

preliminary announcement of API token beta

Forum post

July 25th, 2019

Mid-July update on 2FA, API keys, and a11y work

Forum post

July 17th, 2019

Early July update on 2FA, API keys, and a11y work

Forum post

July 3rd, 2019

API key design planning

Meeting notes

June 24th, 2019

PyPI Now Supports Two-Factor Login via WebAuthn

Blog post

June 18th, 2019

Early June update on WebAuthn and accessibility work

Forum post

June 8th, 2019

Initial a11y and i18n planning

Meeting notes

June 7th, 2019

Use two-factor auth to improve your PyPI account's security

Blog post

May 30th, 2019

Late May update on TOTP and WebAuthN work

Forum post

May 22nd, 2019

PyPI two-factor auth (2FA) trial May 3-20

Mailing list post

May 2nd, 2019

(cross-post) PyPI two-factor auth (2FA) trial May 3-20

Forum post

May 2nd, 2019

Early April update on work and request for advice

Forum post

April 3rd, 2019

PyPI security work: multifactor auth progress &amp; help needed

Forum post

March 22nd, 2019

Prioritizing extant security issues

Meeting notes

March 22nd, 2019

Commencing security, a11y, &amp; i18n improvements to PyPI for 2019

Blog post

March 13th, 2019

Kickoff planning meeting with grant-funded team

Meeting notes

March 11th, 2019

Upcoming PyPI Improvements for 2019

Blog post

December 20th, 2018

PyPI Security and Accessibility Q1 2019 Request for Proposals Update

Blog post

December 19th, 2018

PyPI Security and Accessibility Q1 2019 Request for Proposals period opens

Blog post

November 19th, 2018

PyPI Security and Accessibility Q1 2019 Request for Information period opens

Blog post

October 30th, 2018

Warehouse rollout

The Packaging Working Group supported the implementation & deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered legacy PyPI. Announced on PSF blog in January 2016; see its history in this April 2018 LWN article.

Meetings and status updates from the MOSS-funded project:

Meeting/update

Type

Date

PSF announcement of $170,000 MOSS award to improve sustainability of PyPI

Blog post

November 27, 2017

Kickoff meeting

Meeting notes

Monday, Dec. 4, 2017

Kickoff/milestone update

Mailing list post

Thursday, Dec. 7, 2017

Developer experience audit walkthrough

in-person meeting

Tuesday, December 12, 2017

Maintainer MVP milestone bug triage

Meeting notes

Tuesday, Dec. 19, 2017

Maintainer MVP milestone schedule discussion

Meeting notes

January 10, 2018

Mid-January progress

Mailing list post

Jan. 15, 2018

Role management and welcoming first-time contributors

Mailing list post

Jan. 23, 2018

Standup, bug triage, and milestone schedule discussion

Meeting notes

January 29, 2018

Late January progress

Mailing list post

Jan. 30, 2018

Standup, bug triage, milestone schedule discussion

Meeting notes

February 5, 2018

Warehouse update: still on track, new features

Mailing list post

Feb. 6, 2018

Standup/bug triage/milestone schedule update meeting

Meeting notes

Feb. 12th, 2018

Warehouse: package manager features &amp; question about advertising

Mailing list post

Feb. 13, 2018

Standup, bug triage, &amp; milestone schedule update meeting

Meeting notes

Feb. 20th, 2018

Warehouse: essential maintainer features &amp; next steps

Mailing list post

Feb. 21st, 2018

Standup, bug triage, and milestone schedule update meeting

Meeting notes

Feb. 26th, 2018

Python package maintainers, help test the new PyPI!

Blog post

Feb. 26th, 2018

Warehouse update: a week of testing, polish, &amp; infrastructure

Mailing list post

Feb. 27th, 2018

Planning meeting

Meeting notes

March 6th, 2018

PyPI &amp; Warehouse update: redirecting &amp; shutting down legacy by end of April

Mailing list post

March 7th, 2018

Core Warehouse developers' planning meeting

Meeting notes

March 12th, 2018

new stuff overview, beta next week, user tests, &amp; other Warehouse updates

Mailing list post

March 14th, 2018

Planning meeting with core Warehouse developers

Meeting notes

March 19th, 2018

PyPI/Warehouse: infrastructure hardening &amp; the CAPTCHA conundrum

Mailing list post

March 20th, 2018

Weekly planning meeting with core Warehouse developers

Meeting notes

March 20th, 2018

Warehouse: All New PyPI is now in beta

Blog post

March 26th, 2018

The all new Python Package Index is now in beta at pypi.org

Blog post

March 26th, 2018

beta, pythonhosted docs, PEP 541

Mailing list post

March 28th, 2018

Early April planning meeting with core Warehouse developers

Meeting notes

April 2nd, 2018

PyPI/Warehouse update: new advice &amp; launch, shutdown dates

Mailing list post

April 3rd, 2018

Mid-April planning meeting with core Warehouse developers

Meeting notes

April 10th, 2018

PyPI/Warehouse (short) weekly report: Progress towards launch milestone

Mailing list post

April 10th, 2018

Summary of PyPI overhaul in new LWN article

Mailing list post

April 11th, 2018

Next Generation PyPI rollout incident report

Statuspage report

April 16th, 2018

New PyPI launched, legacy PyPI shutting down April 30

Blog post

April 16th, 2018

Post-launch planning with core Warehouse developers

Meeting notes

April 17th, 2018

Warehouse/PyPI update: launch, project wrapup approaching

Mailing list post

April 18th, 2018

Pre-legacy-shutdown planning with core Warehouse developers

Meeting notes

April 23rd, 2018

PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding

Mailing list post

April 24th, 2018

Talk Python Episode #159: Inside the new PyPI launch

Podcast interview

April 27, 2018

Python legacy sunsetting

Statuspage report

April 30th, 2018

legacy.pypi.org shutdown notice

Mailing list post

April 30th, 2018

End-of-project conference call

Meeting notes

April 30th, 2018

Final weekly report: legacy is shut down

Mailing list post

May 1, 2018

FLOSS Weekly #482, PyPI

Podcast interview

May 2, 2018

PackagingWG (last edited 2023-08-03 09:40:27 by smm)

Unable to view page? See the FrontPage for instructions.