pypi / support

Issue tracker for support requests related to using https://pypi.org
95 stars 47 forks source link

PEP 541 Request: opensearch-sql-cli #1616

Closed zhongnansu closed 2 years ago

zhongnansu commented 2 years ago

Project to be claimed

PROJECT_NAME: https://webcache.googleusercontent.com/search?q=cache:https://pypi.org/project/opensearch-sql-cli/

Your PyPI username

USER_NAME: https://pypi.org/user/OpenSearch/

Reasons for the request

I am a member of OpenSearch community and the owner of opensearch-sql-cli .

We are preparing the initial release to PyPi. Uploading to TestPypi works, but the project name is not allowed when uploading the Pypi. I also documented the issue in our repo for tracking purpose. https://github.com/opensearch-project/sql-cli/issues/4

Although opensearch-sql-cli doesn't seem to exist on Pypi today, there's a snapshot showing it was released by someone else in the past. I wonder if he deleted it or Pypi prohibited this package., because I checked the uploaded artifacts, it's used for dependency confusion.opensearch-sql-cli-100.10.7.tar.gz https://webcache.googleusercontent.com/search?q=cache:https://pypi.org/project/opensearch-sql-cli/

I want to submit a request to claim the package name. Thank you.

Maintenance or replacement?

Replacement

Source code repositories URLs

https://github.com/opensearch-project/sql/tree/sql-cli-1.0

Contact and additional research

I downloaded the artifacts from the snapshot and it doesn't contain any of our code. It's used for dependency confusion.

"""My depencency confusion script."""

import os

def hack(xyz,abc):
    # amazing python code here

Code of Conduct

yeraydiazdiaz commented 2 years ago

Hello @zhongnansu, the project is indeed in the prohibited project names list, @pypa/warehouse-admins could you release it, please?

ewdurbin commented 2 years ago

Project released to the OpenSearch User on PyPI

zhongnansu commented 2 years ago

@yeraydiazdiaz @ewdurbin Thanks a lot!

peternied commented 2 years ago

Thanks!