Publish sdist for future pyVmomi releases to meet SLSA and compliance requirements
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 2.3k
- Forks
- 763
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
Our project requires building all dependencies from source for security and compliance reasons (e.g., following SLSA 3).
Since pyVmomi 9.0.0.0 only ships wheels (no sdist), we cannot build it from source, which makes it harder to meet these requirements.
Describe the solution you'd like
Please publish a source distribution (sdist) on PyPI for future pyVmomi releases, alongside the wheels.
This would allow downstream projects like ours to build from source and remain compliant.
Describe alternatives you've considered
No response
Additional context
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files or tests. Start by inspecting the repository’s Python packaging and release configuration, along with the workflow that publishes packages to PyPI. Done means future releases include an sdist alongside wheels and remain usable for downstream source builds.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- build-system, release
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100