News for hackers. Stuff that matters.

A comment on Todo-or-die – Provides procedural macros that act as checked reminders. Parent comment

Re:Todo-or-die – Provides procedural macros that act as chec... by pabs3 on Monday September 06, 2021 @05:29AM (#28431929)
PyPI really needs reproducible builds and bootstrappable builds.

https://reproducible-builds.org/ https://bootstrappable.org/

[ Parent | on HN ]
Re:Todo-or-die – Provides procedural macros that act as chec... by nighthawk454 on Monday September 06, 2021 @02:58PM (#28436806)
Badly. Best I can tell, you can't even get the source for a certain build. Even if the owners bother to put a tag in git, there's no proof that's the code they used or even necessarily how they built it.

Everything on PyPI is just random artifacts uploaded by whoever ran a build script on their machine - it's nuts.

[ Parent | on HN ]