From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 67928158011 for ; Mon, 10 Jan 2022 12:27:31 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EC1582BC02B; Mon, 10 Jan 2022 12:27:25 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 417B42BC00D for ; Mon, 10 Jan 2022 12:27:25 +0000 (UTC) Message-ID: <18cebe2b8ad9f7ed5f8c6342434a3a045e151d49.camel@gentoo.org> Subject: Re: [gentoo-dev] Looking for a solution to the distutils/setuptools .egg-info mess From: =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?= To: gentoo-dev@lists.gentoo.org Date: Mon, 10 Jan 2022 13:27:21 +0100 In-Reply-To: References: <908ab66e71703930054cdbfd1cf63eb888ea35e2.camel@gentoo.org> Organization: Gentoo Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.42.3 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Archives-Salt: 365e5769-7182-469f-a58e-14b3b4ff3c74 X-Archives-Hash: 6a37705fb8a708b0e9e7b9be485b0af5 On Mon, 2022-01-10 at 17:01 +0500, Anna wrote: > On 2022-01-10 06:39, Michał Górny wrote: > > > However, this isn't going to help for dead projects. > > Dead dependencies probably should be reported upstream too. > Unfortunately, upstreams often don't care. As long as it is installable via pip... What's even worse, it's not uncommon for people to add new dependencies on packages that haven't seen a release in 5+ years. -- Best regards, Michał Górny