Discrepancy between pypi.io and pypi.org for dask=2022.7.1

[jrbourbeau]

Describe the bug

When attempting to download the latest sdist of dask on PyPI from pypi.io using

curl -LO https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz

I get an empty file. However, when I go directly to PyPI to download dask-2022.7.1.tar.gz I get a non-empty file. My understanding is pypi.io is suppose to be a redirect for pypi.org (though my understanding may be wrong).

Expected behavior

I expected https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz to return the same sdist which was uploaded to pypi.org

To Reproduce

https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz is empty while https://files.pythonhosted.org/packages/68/e1/1edb5eeb15f88267075c37ee8c83c4527e462bdea328566c5b1e88db705c/dask-2022.7.1.tar.gz (i.e. the link I get from pypi.org when I attempt to download the dask=2022.7.1 sdist) is returning the sdist I would expect

My Platform

N/A I think, but happy to provide more details if needed

Additional context

This came up over in conda-forge/dask-core-feedstock#134 where we're attempting to create a conda package release on conda-forge for dask=2022.7.1

Possibly similar to pypi/warehouse#7070

[jakirkham]

Seeing the same issue with distributed=2022.7.1

• Empty file: https://pypi.io/packages/source/d/distributed/distributed-2022.7.1.tar.gz
• Non-empty file: https://files.pythonhosted.org/packages/57/f6/bb2532524de2bad548d5a0d731659389dc9fb3483b18715fa3c359c4111c/distributed-2022.7.1.tar.gz

[di]

This is likely due to pypi/warehouse#11949, but an empty file is likely not the intended failure method here, so we might need to do some additional fixes to have this fail in a better way in the future.

[jrbourbeau]

Thanks for the response @di. I just tried the curl command in the original post and I now am getting the expected file. Would you prefer we close this issue or keep open for tracking?

[di]

Let's leave this open, I don't think you should be getting an empty file here.

[jakirkham]

Thanks for all of your help with these issues @di! 🙏

Unfortunately we just ran into this another snag. This one with Cython. It also appears to be doing the empty file thing as well

# archive is 0B
curl -LO https://pypi.io/packages/source/C/Cython/Cython-0.29.31.tar.gz

# archive works as expected
curl -LO https://files.pythonhosted.org/packages/e3/96/ff430960a664e571285365009bf526fa8ec67267a9632b758914adf9206c/Cython-0.29.31.tar.gz

Edit: Fixed the command above as there was a typo there. Though the original run didn't have this typo.

cc @h-vetinari (for awareness)

[jakirkham]

Appears the Cython package can now be downloaded. Thanks for the help here! 🙏

[ewdurbin]

The primary issue (with purging) is resolved.

The remaining issue here that needs to be addressed with VCL is the empty file return. That is either an issue here (with VCL) or in conveyor.