{"author":"Tim Hatch","author_email":"tim@timhatch.com","bugtrack_url":null,"classifiers":["Development Status :: 4 - Beta","Environment :: Console","License :: OSI Approved :: Apache Software License","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.6","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Topic :: Utilities"],"description":"# Honesty\n\nThere's a long tail of people doing interesting/sketchy things to packages on\npypi. Most aren't malicious, but this project gives you an easy way to check\nfor some of the obvious ways that packages might be tampered with.\n\n# Usage\n\n```\nhonesty list \nhonesty check [==version|==*] [--verbose]\nhonesty download [==version|==*] [--dest=some-path/]\nhonesty extract [==version|==*] [--dest=some-path/]\nhonesty license [==version|==*]\n\n(provisional)\nhonesty ispep517 [==version|==*]\nhonesty native [==version|==*]\nhonesty age [==version|==*]\n```\n\nIt will store a package cache, using the normal appdirs package to pick a\nlocation (on Linux, this defaults to `~/.cache/honesty/pypi` but, you can\noverride with `XDG_CACHE_HOME` or `HONESTY_CACHE` environment variables).\n\nIf you have a local bandersnatch, specify `HONESTY_INDEX_URL` to your `/simple/`\nurl. It also must support `/pypi//json` or pass `--nouse-json` to the\ncommands that support it.\n\n\n# Exit Status of 'check'\n\nThese are bit flags to make sense when there are multiple problems. If you pass\n`*` for version, they are or'd together.\n\n```\n0 if only sdist or everything matches\n1 if only bdist\n2 (reserved for future \"extraction error\")\n4 some .py from bdist not in sdist\n8 some .py files present with same name but different hash in sdist (common\n when using versioneer or 2to3)\n```\n\n\n# License\n\nHonesty is copyright [Tim Hatch](http://timhatch.com/), and licensed under\nthe MIT license. I am providing code in this repository to you under an open\nsource license. This is my personal repository; the license you receive to\nmy code is from me and not from my employer. See the `LICENSE` file for details.\n\n\n","description_content_type":"text/markdown","docs_url":null,"download_url":"","downloads":{"last_day":-1,"last_month":-1,"last_week":-1},"dynamic":null,"home_page":"https://github.com/python-packaging/honesty/","keywords":"","license":"MIT","license_expression":null,"license_files":null,"maintainer":"","maintainer_email":"","name":"honesty","package_url":"https://pypi.org/project/honesty/","platform":"","project_url":"https://pypi.org/project/honesty/","project_urls":{"Homepage":"https://github.com/python-packaging/honesty/"},"provides_extra":null,"release_url":"https://pypi.org/project/honesty/0.2.1/","requires_dist":["aiohttp (>=3.6)","appdirs (>=1.4)","click (>=7.0)","infer-license (>=0.0.6)","dataclasses (>=0.7) ; python_version < \"3.7\""],"requires_python":">=3.6","summary":"Double check sdist/bdist on pypi","version":"0.2.1","yanked":false,"yanked_reason":null}

Dependency	Optional
aiohttp	false
appdirs	false
click	false
dataclasses	false
infer-license	false

Package search

honesty

project_urls

Dependencies

All package metadata

Releases