TODO tracking issue

[hauntsaninja]

From recent PRs, we've accumulated some TODOs in the source code. Putting them in this issue so they're more visible:

• Use requires_dist for the version spec we want:

  stub_uploader/stub_uploader/metadata.py

  Line 198 in 32dca63

  # TODO: PyPI doesn't seem to have version specific requires_dist. This does mean we can be

• Have some sensible restrictions on which typeshed distributions can depend on other typeshed distributions. This will let us loosen the external allowlist:

  stub_uploader/stub_uploader/metadata.py

  Line 151 in 32dca63

  # TODO: make sure that if a typeshed distribution depends on other typeshed stubs,

• Less hacky support for distributions that aren't on PyPI:

  stub_uploader/stub_uploader/metadata.py

  Line 29 in 32dca63

  # TODO: add a field to METADATA.toml if the stubs are for a package

• Maybe have better support for packages that don't have wheels (add some hacky setup.py parsing):

  stub_uploader/stub_uploader/metadata.py

  Line 195 in 32dca63

  # TODO: consider allowing external dependencies for stubs for packages that do not ship wheels.

[Avasam]

Maybe have better support for packages that don't have wheels (add some hacky setup.py parsing)

Could you look at *.egg-info/requires.txt ? It may not cover all cases. But the problematic ones right now (pycocotools and click-default-group) would work. Feels less hacky, simpler, and doesn't require executing code. Just need to download and unzip the package.

Also possibly useful feature requests:
pypi/warehouse#474
pypi/warehouse#8254