Miserlou
PyPI releases
It would be great if the latest changes landing in master released to PyPI at the same time. This process can be automated once and for all.
Hi everyone. We see that your project in PyPI hasn't been updated yet. Can you release the latest change on PyPI? Because manually installing this repo on pip via specific commit from git creates a large file that forces us to use slim_handler. In turn, the deployment fails because there's something wrong with the slim_handler when I use it in my zappa settings. It forces me to not use slim_handler instead even though it uploads some 131 MB zip file to Lambda.
(In my case, the error with slim_handler is that it can't find the modules specified in the events field of the zappa settings when triggered. But this issue should be on another discourse.)
I was having trouble with old version of cryptography library included in this package causing the same error as here: https://github.com/Miserlou/Zappa/issues/1455. I found workaround by installing this package from Github and excluding it in zappa_settings.json so I don't have to use slim handler.
pip install git+https://github.com/Miserlou/lambda-packages.git
And add this to zappa_settings.json
"exclude": ["lambda_packages*"]
In your zappa_settings.json you can just set use_precompiled_packages to false if you're trying to avoid lambda_packages entirely.
Same problem and the previously mentioned:
"exclude": ["lambda_packages*"]
hack didn't prevent the huge zip file. Still waiting for this to be properly pushed to PyPI.
Further motivation to make a new release - cryptography 2.1.4 has a CVE, fixed in 2.3.1. https://nvd.nist.gov/vuln/detail/CVE-2018-10903
