3 ms·
That's great and all for packages I control, but I publish wheels already.
by ArchOversight 3y ago
That's great and all for packages I control, but I publish wheels already.
- westurner 3y agohttps://pythonwheels.com/ https://pythonwheels.com/ now lists only three packages that are not yet published to PyPI as wheels. But do you or others build them with SLSA 3? https://slsa.dev/get-started#slsa-3 https://slsa.dev/get-started#slsa-3
- ArchOversight 3y agoThere's thousands more packages than listed on that website. Also now you are moving the goalposts. Python wheels exist but not all Python packages are distributed as wheels. If I am going through the effort to build wheels myself, then I don't need a resolver since I can just make sure to pick all the versions I need. Then I don't need rip to install anything.