search

pypi / support

Issue tracker for support requests related to using https://pypi.org
95 stars 47 forks source link

PEP 541 Request: `logfire-python` #5187

Open samuelcolvin opened 4 days ago

samuelcolvin commented 4 days ago

Project to be claimed

PROJECT_NAME: https://pypi.org/project/logfire-python

Your PyPI username

USER_NAME: https://pypi.org/user/samuelcolvin

Reasons for the request

The PyPI username logfire - https://pypi.org/user/logfire is also infringing our trademark.

We (Pydantic Services Inc.) own the trademark for LOGFIRE in the USA, EU, UK, Japan, Australia, Canada, trademarks in other jurisdictions are pending - see WIPO search. We have reached out to every contact we can find for the logfire-python package and logfire username and asked them to use a different name, including legal cease and desist letters. They have not engaged with us whatsoever.

We are extremely concerned that uses will install logfire-python as a result of confusing it for our increasingly popular package logfire

Their use of the logfire username is unnecessary and make this eventuality even more likely.

The logfire-python package is virtually unused, https://pepy.tech/ shows that logfire-python has had 475 downloads in the last month while logfire has had 145,000.

Even more worrying, downloads of logfire-python show some spikes in downloads:

This is strong evidence that users are accidentally installing the wrong package!

Image

source: https://pepy.tech/projects/logfire-python

Maintenance or replacement?

Replacement

Source code repositories URLs

Our logfire package repository: https://github.com/pydantic/logfire

Repository for logfire-python: https://github.com/logfire-ai/logfire-python (no commits since Jun 23, 2023)

Contact and additional research

The logfire-python package appears to be linked to https://logfire.ai and https://logfire.sh (domain is now dead).

https://logfire.ai indicates it is developed by "Altrova, Inc.".

Our lawyers sent a letter to Altrova, and every contact we could find of them and logfire.ai/sh in July 7th. We received no reply.

I've also tried to reach out to individual developers on social media, but have had no reply.

Code of Conduct

samuelcolvin commented 2 days ago

@pradyunsg @di any chance you could help with this? Or point me to someone who can?

Sorry to ping, but it looks like without roping someone in to help, these requests don't get much attention, and I do think this is a security issue as well as trademark infringement.