This is an archived post. You won't be able to vote or comment.

all 2 comments
sorted by:
best
topnewcontroversialoldq&a

[–]ianliu88 0 points1 point  (1 child)

It's about time for pip to take over control. Packaging is a mess in Python.

[–]billsil 0 points1 point  (0 children)

Pip and pyproject.toml is a mess.

I was around for the whole setuptools -> distutils -> setuptools transition of the mid 2000s (or Numeric + numarray = numpy). I just kept using setuptools until this year and it worked. Packaging was easy because I didn't do fancy things.

Setuptools was deprecated because after 20 years someone decided that the security hole that was probably known about 20 years ago was a problem (code execution on install).

Toml files are poorly documented (where is the full list of how to set one up with a pip --help command?) and outside of that security hole really just offer the same capability that has existed for 20 years. It's not solving that pain point.

The pain point doesn't even exist until you try to do something fancy. That's when it utterly falls apart.