collective / collective.saml2

Installation of SAML2 web single-sign-on for Plone (dm.zope.saml2)
5 stars 6 forks source link

Rename product #14

Open wesleybl opened 3 weeks ago

wesleybl commented 3 weeks ago

The name collective.saml2 is in use in pypi:

https://pypi.org/project/collective.saml2/

But it was not generated using collective code. It looks like it was generated using:

https://github.com/hai-bui-kkday/collective.saml2

The package that is in pypi today is broken. To see:

https://github.com/collective/collective.saml2/issues/12 https://github.com/hai-bui-kkday/collective.saml2/issues/1

@hai-bui-kkday, the owner of collective.saml2 in pypi is missing from github. So I have no hope that he can add someone from the collective as a pypi maintainer.

To place the collective code in pypi, the remaining option is to rename the product. I suggest collective_saml2. Another suggestion? Can anyone rename the product on github? I can make a PR by renaming the package.

CC @djay @mauritsvanrees @ericof @davisagli @jensens

jensens commented 3 weeks ago

I would add @polyester here.

I think there is a process to "take over" PyPI community packages? Who knows details?

djay commented 3 weeks ago

@wesleybl crap. I thought I had released it on pypi previously :( my bad.

BTW. In order to get a working python 3 release it really should have tests. Something I've started but haven't had a chance to finish and would welcome any help with. https://github.com/collective/collective.saml2/pull/11

djay commented 3 weeks ago

The process is outlined in https://peps.python.org/pep-0541 As far as I can see it doesn't count as an invalid project unless somehow uploading from a fork is against the terms of use but it does count is discontinued if it can be demonstrated he is uncontactable. https://peps.python.org/pep-0541/#continued-maintenance-of-an-abandoned-project He's probably left that company but I haven't found another page for him yet. I'll try emailing him myself and if nothing open the request.

changing the name is a bad idea. it just creates confusion.

EDIT: request submitted https://github.com/pypi/support/issues/4196

wesleybl commented 3 weeks ago

The process is outlined in https://peps.python.org/pep-0541

@djay cool! I didn't know there was a process for this. However, it appears that it is not effective. I saw requests made over a year ago and they were not answered. Therefore I would still consider renaming the product.

Did you email the owner?

djay commented 3 weeks ago

Yes you have to show proof of contact to submit the request