Double check sdist/bdist on pypi
Project description
Honesty
There's a long tail of people doing interesting/sketchy things to packages on pypi. Most aren't malicious, but this project gives you an easy way to check for some of the obvious ways that packages might be tampered with.
Usage
honesty list <package name>
honesty check <package name>[==version|==*] [--verbose]
honesty download <package name>[==version|==*] [--dest=some-path/]
It will store a package cache by default under ~/.cache/honesty/pypi but you
can change that with HONESTY_CACHE env var. If you have a local bandersnatch,
specify HONESTY_INDEX_URL to your /simple/ url.
Exit Status
These are bit flags to make sense when there are multiple problems. If you pass
* for version, they are or'd together.
0 if only sdist or everything matches
1 if only bdist
2 (reserved for future "extraction error")
4 some .py from bdist not in sdist
8 some .py files present with same name but different hash in sdist (common
when using versioneer or 2to3)
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
File details
Details for the file honesty-0.1.2.tar.gz.
File metadata
- Download URL: honesty-0.1.2.tar.gz
- Upload date:
- Size: 12.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/2.0.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/40.8.0 requests-toolbelt/0.9.1 tqdm/4.36.1 CPython/3.7.4
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 5b2866d81bd0ce42f7b1e24c68103b6bf4ffa879324a37d2245a4bdb701aae8e |
|
| MD5 | e1424fb06c598ca6397cd47b57dc9bd0 |
|
| BLAKE2b-256 | af1ac1195d855579c8109f7e83995af3350f59339d38f55518de8a102b77d3d5 |
Provenance
File details
Details for the file honesty-0.1.2-py3-none-any.whl.
File metadata
- Download URL: honesty-0.1.2-py3-none-any.whl
- Upload date:
- Size: 20.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/2.0.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/40.8.0 requests-toolbelt/0.9.1 tqdm/4.36.1 CPython/3.7.4
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | cf965ff3ff2f67dc7ef37b8591cf9d632734895a5ae10568489a97b0914f8073 |
|
| MD5 | e3bb8680a91c47439e80a2c3fe2bf3a0 |
|
| BLAKE2b-256 | 042be813e5815624995d80188e0c47ff136cda10d18aa095b77c7238a23a1b3f |
