Issue71

Title Verify eggs before installation by checking PKG-INFO against egg name
Priority wish Status chatting
Superseder Nosy List exarkun, pje
Assigned To Keywords

Created on 2009-05-21.21:44:40 by exarkun, last changed 2009-10-10.17:20:46 by pje.

Messages
msg364 (view) Author: pje Date: 2009-10-10.17:20:45
I understand, but since the normal workflow for egg creation and uploading
doesn't involve any renaming steps, I'm classifying this as a low-priority
feature request (to verify that an egg has not been renamed, after download but
prior to installation).
msg362 (view) Author: exarkun Date: 2009-10-10.13:39:39
I doubt it is the case that *nothing* can be done about it.

For example, off the top of my head, it seems that the version number inside the
egg could be checked against the one derived from the filename.  If they
disagree, a warning could be emitted so the user is aware that something might
be wrong.
msg358 (view) Author: pje Date: 2009-10-10.04:28:17
Unfortunately, that name means "pyOpenSSL, version 0.9.py2.5-winxp32", which is
a perfectly valid (if weird) version number, of an egg which is not specific to
any particular Python version or platform.  There's really nothing that can be
done about a renaming that results in a valid, but wrong version, any more than
anything could be done about renaming that gave it a valid, but wrong project
name, Python version, or platform.
msg290 (view) Author: exarkun Date: 2009-05-21.21:44:40
Due to user error, an egg which should have been a Python 2.5 Windows binary egg
got renamed to "pyOpenSSL-0.9.py2.5-winxp32.egg" and uploaded to PyPI. 
easy_install will select this egg for installation on Linux, though it is not
usable on that platform.
History
Date User Action Args
2009-10-10 17:20:46pjesetpriority: bug -> wish
messages: + msg364
title: type of renamed eggs misdetected by easy_install -> Verify eggs before installation by checking PKG-INFO against egg name
2009-10-10 13:39:39exarkunsetstatus: resolved -> chatting
messages: + msg362
2009-10-10 04:28:19pjesetstatus: unread -> resolved
nosy: + pje
messages: + msg358
2009-05-21 21:44:40exarkuncreate