prospector
prospector copied to clipboard
[maintenance] Remove twine from the dev dependencies
- It's not required to release anymore as it's done in CI
- it brings a version of cryptography that contains a CVE
- Unless we remove python 3.9.0 from the supported version, but we don't want to drop this version unless necessary"
twine looks to be required!
I've mistaken this project with another one, we need to do something like https://github.com/pylint-dev/pylint/pull/10263
I think that's good to keep the twine check, And it's also good to migrate to Trusted publisher, but this needs also to be configured in the pypi package admin interface, which one I didn't have access.
@Pierre-Sassoulas you are on PyPI as maintainer, is that enough to set it up? @sbrunner I can add you as a maintainer, what is your PyPI username? Is it the same as this GitHub one?
I can set it up the trusted publisher if you need me to. It looks fairly straightforward but I wasn't aware of it until just now so if someone who knows more wants to do it go ahead :-)
My pypi username is also sbrunner thanks :-)
This was on my todo list, but I must admit to myself that I don't have time for this, sorry.
Status?
Need take over, I won't be able to work on this, sorry.