Question: Regarding the release process

faust-streaming / faust

Python Stream Processing. A Faust fork

https://faust-streaming.github.io/faust/

Other

1.65k stars 183 forks source link

Question: Regarding the release process #275

Closed lindycoder closed 2 years ago

lindycoder commented 2 years ago

Hello,

I noticed a faust-streaming 0.8.3 appeared on pypi (https://pypi.org/project/faust-streaming/0.8.3/), but I don't see a tag or release.

Luckily this particular release doesn’t appear to be malicious, however it does raise some concerns in light of recent supply chain attacks as the documented release procedure does not appear to have been followed.

If possible, could you shed some light ?

patkivikram commented 2 years ago

it is deleted in pypi and 0.8.4 was released. 0.8.3 was deployed from a dev branch while testing a feature