Todo-or-die – Provides procedural macros that act as checked reminders

Re:Todo-or-die – Provides procedural macros that act as chec... by nighthawk454 on Monday September 06, 2021 @03:33AM (#28431351)

Thank you for writing this. It helped me relate a lot of half-thoughts around coordinated releases, and lack of connection between build artifacts and code (see: PyPI…).

There is a certain strangeness that we have a very distributed and local notion of code, but _running_ that code (even in local environments) is much harder.

[ Parent | on HN ]

Re:Todo-or-die – Provides procedural macros that act as chec... by pabs3 on Monday September 06, 2021 @05:29AM (#28431929)

PyPI really needs reproducible builds and bootstrappable builds.

https://reproducible-builds.org/ https://bootstrappable.org/

[ Parent | on HN ]

Re:Todo-or-die – Provides procedural macros that act as chec... by nighthawk454 on Monday September 06, 2021 @02:58PM (#28436806)

Badly. Best I can tell, you can't even get the source for a certain build. Even if the owners bother to put a tag in git, there's no proof that's the code they used or even necessarily how they built it.

Everything on PyPI is just random artifacts uploaded by whoever ran a build script on their machine - it's nuts.

[ Parent | on HN ]