Twine: Metadata for upload rejection

Created on 11 Dec 2019  路  4Comments  路  Source: pypa/twine

I have a private package, and I want to make sure the built distributions can't get uploaded to PyPI (so it can't easily be leaked), I realize this is a quite specific request, but I would be very grateful if it could be added.

Most helpful comment

You can set a classifier on your distribution such as Private :: Do Not Upload (or anything with the Private top-level classifier) and PyPI will refuse to accept it.

This would prevent it from accidentally being uploaded... anyone intentionally trying to leak it would still be able to (by removing the classifier), but there's not much that can be done to prevent that.

All 4 comments

This would need to move to a different repository. Twine can't make arbitrary changes to the metadata specification for Python packaging

https://github.com/pypa/packaging-problems is the right repo _I think_

You can set a classifier on your distribution such as Private :: Do Not Upload (or anything with the Private top-level classifier) and PyPI will refuse to accept it.

This would prevent it from accidentally being uploaded... anyone intentionally trying to leak it would still be able to (by removing the classifier), but there's not much that can be done to prevent that.

That is exactly what I need. Thank you @di 馃槃

Was this page helpful?
0 / 5 - 0 ratings

Related issues

brainwane picture brainwane  路  10Comments

InAnimaTe picture InAnimaTe  路  5Comments

sigmavirus24 picture sigmavirus24  路  8Comments

anentropic picture anentropic  路  8Comments

iMoses picture iMoses  路  6Comments