search

MrTango / rispy

Python RIS files parser, provides RIS files as dictionary via generator.
MIT License
60 stars 18 forks source link

delete `RISparser` from pypi? #59

Open shapiromatron opened 8 months ago

shapiromatron commented 8 months ago

Delete the older version of this package from pypi? https://pypi.org/project/RISparser/

It was last updated w/ python 3.6, which has been EOL for over a year now. This can clear out the historical older versions of the package and potentially make it easier to find the modern version of the package, rispy.

I think this can only be done by @MrTango - I don't have access on the pypi website.

J535D165 commented 8 months ago

Enjoy this post with many CPython core devs: https://discuss.python.org/t/stop-allowing-deleting-things-from-pypi/17227.

I suggest cleaning the Description of the latest RISParser release (by publishing a new one) and seeing it fade in Google. Removing RISParser versions might affect users.

shapiromatron commented 8 months ago

I guess from a purity sense this makes sense, but practically, older versions of the library really aren't supported any more and we don't want people using them. It clutters the ecosystem, and I don't ever want to support it again. We have the releases here on github if someone wants them that bad and would rather use an old release.

I'm fine breaking things, even hypothetical ones. The last RISparser release was from 2018.

It's a lot less work for us maintainers to just delete the old ones, instead of mint a new release and publish it on pypi just to tell people not to use it anymore. And this is all hypothetical - they should update to the latest version, or vendor the old version into their application.

We could just publish version 0.4.3 on this github repo if someone needs it; https://github.com/MrTango/rispy/blob/main/HISTORY.rst#v043-2018-04-10

shapiromatron commented 6 months ago

@MrTango - thoughts on this? it's one less possible attack vector on PYPI in my opinion...