Alex Waygood
Alex Waygood
No idea what's causing the pytype errors :/ it'll be easier to take a look at those if you file the PR, then we can play around with it :)...
> So maybe we should allow `X: Final = 1` in stubs? This to me feels much more expressive than writing `X: Literal[1]`, so I'd be in favour of allowing...
As per our [policy](https://github.com/python/typeshed/blob/master/CONTRIBUTING.md#third-party-library-removal-policy), we'll want to wait until the library has shipped with a `py.typed` file for at least six months before removing the stubs from typeshed, but this...
> I'll plan to file a separate issue for automated `py.typed` detection to gauge interest in this type of automation / integration. Stubsabot already does that for us (see, e.g.,...
There doesn't appear to be a bug in stubsabot. The `master` branch has the `py.typed` marker, but the latest release, 2.1.0, released on September 17, does not have the `py.typed`...
We now have a release with a `py.typed` file! - #9051
> this introduces a security hole Could you expand on what the security risk is, exactly? Like @Akuli, I'm not sure I've ever seen it fully explained (probably because I'm...
> Arbitrary code can be executed during a Python package installation That's surely a security risk for any open-source package depending on another open-source package -- is the security hole...
Got it, thanks!
Reopening this for now, as we'll still need to rework a few test scripts on the typeshed side for this to work (but hooray! 🥳)