[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Christophe Vu-Brugier]

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/python-urwid/python-urwid.hash | 3 +++
 package/python-urwid/python-urwid.mk   | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)
 create mode 100644 package/python-urwid/python-urwid.hash

diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
new file mode 100644
index 0000000..2b18082
--- /dev/null
+++ b/package/python-urwid/python-urwid.hash
@@ -0,0 +1,3 @@
+# md from https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175, sha256 locally computed
+md5  	a989acd54f4ff1a554add464803a9175  urwid-1.3.0.tar.gz
+sha256	29f04fad3bf0a79c5491f7ebec2d50fa086e9d16359896c9204c6a92bc07aba2  urwid-1.3.0.tar.gz
diff --git a/package/python-urwid/python-urwid.mk b/package/python-urwid/python-urwid.mk
index 4f1be46..1cd3022 100644
--- a/package/python-urwid/python-urwid.mk
+++ b/package/python-urwid/python-urwid.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PYTHON_URWID_VERSION = 1.2.1
+PYTHON_URWID_VERSION = 1.3.0
 PYTHON_URWID_SOURCE = urwid-$(PYTHON_URWID_VERSION).tar.gz
 PYTHON_URWID_SITE = https://pypi.python.org/packages/source/u/urwid
 PYTHON_URWID_LICENSE = LGPLv2.1+
-- 
2.5.0

[Buildroot] [PATCH 2/6] python-pyparsing: bump version

[Christophe Vu-Brugier]

Also download tarball from PyPI instead of SourceForge.

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/python-pyparsing/python-pyparsing.hash | 5 +++--
 package/python-pyparsing/python-pyparsing.mk   | 4 ++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/package/python-pyparsing/python-pyparsing.hash b/package/python-pyparsing/python-pyparsing.hash
index aee93af..df39116 100644
--- a/package/python-pyparsing/python-pyparsing.hash
+++ b/package/python-pyparsing/python-pyparsing.hash
@@ -1,2 +1,3 @@
-# Locally computed:
-sha256  17e43d6b17588ed5968735575b3983a952133ec4082596d214d7090b56d48a06  pyparsing-2.0.2.tar.gz
+# md5 from https://pypi.python.org/pypi?:action=show_md5&digest=0fe479be09fc2cf005f753d3acc35939, sha256 locally computed
+md5	0fe479be09fc2cf005f753d3acc35939  pyparsing-2.0.3.tar.gz
+sha256  06e729e1cbf5274703b1f47b6135ed8335999d547f9d8cf048b210fb8ebf844f  pyparsing-2.0.3.tar.gz
diff --git a/package/python-pyparsing/python-pyparsing.mk b/package/python-pyparsing/python-pyparsing.mk
index 8e83f34..ad066b8 100644
--- a/package/python-pyparsing/python-pyparsing.mk
+++ b/package/python-pyparsing/python-pyparsing.mk
@@ -4,9 +4,9 @@
 #
 ################################################################################
 
-PYTHON_PYPARSING_VERSION = 2.0.2
+PYTHON_PYPARSING_VERSION = 2.0.3
 PYTHON_PYPARSING_SOURCE = pyparsing-$(PYTHON_PYPARSING_VERSION).tar.gz
-PYTHON_PYPARSING_SITE = http://downloads.sourceforge.net/project/pyparsing/pyparsing/pyparsing-$(PYTHON_PYPARSING_VERSION)
+PYTHON_PYPARSING_SITE = https://pypi.python.org/packages/source/p/pyparsing
 PYTHON_PYPARSING_LICENSE = MIT
 PYTHON_PYPARSING_LICENSE_FILES = LICENSE
 PYTHON_PYPARSING_SETUP_TYPE = distutils
-- 
2.5.0

[Buildroot] [PATCH 3/6] python-rtslib-fb: bump version

[Christophe Vu-Brugier]

Also add new dependency to python-six.

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/python-rtslib-fb/python-rtslib-fb.mk | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/package/python-rtslib-fb/python-rtslib-fb.mk b/package/python-rtslib-fb/python-rtslib-fb.mk
index d45c261..85bee0b 100644
--- a/package/python-rtslib-fb/python-rtslib-fb.mk
+++ b/package/python-rtslib-fb/python-rtslib-fb.mk
@@ -4,10 +4,11 @@
 #
 ################################################################################
 
-PYTHON_RTSLIB_FB_VERSION = v2.1.fb50
+PYTHON_RTSLIB_FB_VERSION = v2.1.fb57
 PYTHON_RTSLIB_FB_SITE = $(call github,agrover,rtslib-fb,$(PYTHON_RTSLIB_FB_VERSION))
 PYTHON_RTSLIB_FB_LICENSE = Apache-2.0
 PYTHON_RTSLIB_FB_LICENSE_FILES = COPYING
 PYTHON_RTSLIB_FB_SETUP_TYPE = setuptools
+PYTHON_RTSLIB_FB_DEPENDENCIES = python-six
 
 $(eval $(python-package))
-- 
2.5.0

[Buildroot] [PATCH 4/6] python-configshell-fb: bump version

[Christophe Vu-Brugier]

Also add new dependency to python-six.

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/python-configshell-fb/python-configshell-fb.mk | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/python-configshell-fb/python-configshell-fb.mk b/package/python-configshell-fb/python-configshell-fb.mk
index 76ef48d..d0671d5 100644
--- a/package/python-configshell-fb/python-configshell-fb.mk
+++ b/package/python-configshell-fb/python-configshell-fb.mk
@@ -4,11 +4,11 @@
 #
 ################################################################################
 
-PYTHON_CONFIGSHELL_FB_VERSION = v1.1.fb15
+PYTHON_CONFIGSHELL_FB_VERSION = v1.1.fb18
 PYTHON_CONFIGSHELL_FB_SITE = $(call github,agrover,configshell-fb,$(PYTHON_CONFIGSHELL_FB_VERSION))
 PYTHON_CONFIGSHELL_FB_LICENSE = Apache-2.0
 PYTHON_CONFIGSHELL_FB_LICENSE_FILES = COPYING
 PYTHON_CONFIGSHELL_FB_SETUP_TYPE = setuptools
-PYTHON_CONFIGSHELL_FB_DEPENDENCIES = python-pyparsing python-urwid
+PYTHON_CONFIGSHELL_FB_DEPENDENCIES = python-pyparsing python-six python-urwid
 
 $(eval $(python-package))
-- 
2.5.0

[Buildroot] [PATCH 5/6] targetcli-fb: bump version

[Christophe Vu-Brugier]

Also add new dependency to python-six.

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/targetcli-fb/targetcli-fb.mk | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/targetcli-fb/targetcli-fb.mk b/package/targetcli-fb/targetcli-fb.mk
index b5f2fbe..0a64c46 100644
--- a/package/targetcli-fb/targetcli-fb.mk
+++ b/package/targetcli-fb/targetcli-fb.mk
@@ -4,12 +4,12 @@
 #
 ################################################################################
 
-TARGETCLI_FB_VERSION = v2.1.fb37
+TARGETCLI_FB_VERSION = v2.1.fb41
 TARGETCLI_FB_SITE = $(call github,agrover,targetcli-fb,$(TARGETCLI_FB_VERSION))
 TARGETCLI_FB_LICENSE = Apache-2.0
 TARGETCLI_FB_LICENSE_FILES = COPYING
 TARGETCLI_FB_SETUP_TYPE = setuptools
-TARGETCLI_FB_DEPENDENCIES = python-configshell-fb python-rtslib-fb
+TARGETCLI_FB_DEPENDENCIES = python-configshell-fb python-rtslib-fb python-six
 
 define TARGETCLI_FB_INSTALL_INIT_SYSV
 	$(INSTALL) -m 0755 -D package/targetcli-fb/S50target $(TARGET_DIR)/etc/init.d/S50target
-- 
2.5.0

[Buildroot] [PATCH 6/6] targetcli-fb: systemd support

[Christophe Vu-Brugier]

The systemd service file is taken from Fedora.

Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
---
 package/targetcli-fb/target.service  | 14 ++++++++++++++
 package/targetcli-fb/targetcli-fb.mk |  8 +++++++-
 2 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 package/targetcli-fb/target.service

diff --git a/package/targetcli-fb/target.service b/package/targetcli-fb/target.service
new file mode 100644
index 0000000..400284e
--- /dev/null
+++ b/package/targetcli-fb/target.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Restore LIO kernel target configuration
+Requires=sys-kernel-config.mount
+After=sys-kernel-config.mount network.target local-fs.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/targetctl restore
+ExecStop=/usr/bin/targetctl clear
+SyslogIdentifier=target
+
+[Install]
+WantedBy=multi-user.target
diff --git a/package/targetcli-fb/targetcli-fb.mk b/package/targetcli-fb/targetcli-fb.mk
index 0a64c46..cf7f29f 100644
--- a/package/targetcli-fb/targetcli-fb.mk
+++ b/package/targetcli-fb/targetcli-fb.mk
@@ -12,7 +12,13 @@ TARGETCLI_FB_SETUP_TYPE = setuptools
 TARGETCLI_FB_DEPENDENCIES = python-configshell-fb python-rtslib-fb python-six
 
 define TARGETCLI_FB_INSTALL_INIT_SYSV
-	$(INSTALL) -m 0755 -D package/targetcli-fb/S50target $(TARGET_DIR)/etc/init.d/S50target
+	$(INSTALL) -m 0755 -D package/targetcli-fb/S50target \
+		$(TARGET_DIR)/etc/init.d/S50target
+endef
+
+define TARGETCLI_FB_INSTALL_INIT_SYSTEMD
+	$(INSTALL) -m 0644 -D package/targetcli-fb/target.service \
+		$(TARGET_DIR)/usr/lib/systemd/system/target.service
 endef
 
 # Targetcli stores its configuration in /etc/target/saveconfig.json
-- 
2.5.0

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Baruch Siach]

Hi Christophe,

On Tue, Sep 01, 2015 at 10:10:27AM +0200, Christophe Vu-Brugier wrote:
> Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
> ---
>  package/python-urwid/python-urwid.hash | 3 +++
>  package/python-urwid/python-urwid.mk   | 2 +-
>  2 files changed, 4 insertions(+), 1 deletion(-)
>  create mode 100644 package/python-urwid/python-urwid.hash
> 
> diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
> new file mode 100644
> index 0000000..2b18082
> --- /dev/null
> +++ b/package/python-urwid/python-urwid.hash
> @@ -0,0 +1,3 @@
> +# md from https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175, sha256 locally computed

This is weird. You put the MD5 in the URL to retrieve the same MD5? Is there a 
way to lookup the MD5 using the package name? If not, I guess that 
https://pypi.python.org/pypi/urwid/1.3.0 would be good enough.

> +md5  	a989acd54f4ff1a554add464803a9175  urwid-1.3.0.tar.gz
> +sha256	29f04fad3bf0a79c5491f7ebec2d50fa086e9d16359896c9204c6a92bc07aba2  urwid-1.3.0.tar.gz
> diff --git a/package/python-urwid/python-urwid.mk b/package/python-urwid/python-urwid.mk
> index 4f1be46..1cd3022 100644
> --- a/package/python-urwid/python-urwid.mk
> +++ b/package/python-urwid/python-urwid.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -PYTHON_URWID_VERSION = 1.2.1
> +PYTHON_URWID_VERSION = 1.3.0
>  PYTHON_URWID_SOURCE = urwid-$(PYTHON_URWID_VERSION).tar.gz
>  PYTHON_URWID_SITE = https://pypi.python.org/packages/source/u/urwid
>  PYTHON_URWID_LICENSE = LGPLv2.1+

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

[Buildroot] [PATCH 3/6] python-rtslib-fb: bump version

[Baruch Siach]

Hi Christophe,

On Tue, Sep 01, 2015 at 10:10:29AM +0200, Christophe Vu-Brugier wrote:
> Also add new dependency to python-six.
> 
> Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
> ---
>  package/python-rtslib-fb/python-rtslib-fb.mk | 3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)
> 
> diff --git a/package/python-rtslib-fb/python-rtslib-fb.mk b/package/python-rtslib-fb/python-rtslib-fb.mk
> index d45c261..85bee0b 100644
> --- a/package/python-rtslib-fb/python-rtslib-fb.mk
> +++ b/package/python-rtslib-fb/python-rtslib-fb.mk
> @@ -4,10 +4,11 @@
>  #
>  ################################################################################
>  
> -PYTHON_RTSLIB_FB_VERSION = v2.1.fb50
> +PYTHON_RTSLIB_FB_VERSION = v2.1.fb57
>  PYTHON_RTSLIB_FB_SITE = $(call github,agrover,rtslib-fb,$(PYTHON_RTSLIB_FB_VERSION))
>  PYTHON_RTSLIB_FB_LICENSE = Apache-2.0
>  PYTHON_RTSLIB_FB_LICENSE_FILES = COPYING
>  PYTHON_RTSLIB_FB_SETUP_TYPE = setuptools
> +PYTHON_RTSLIB_FB_DEPENDENCIES = python-six

You should select BR2_PACKAGE_PYTHON_SIX in Config.in. Same for other package 
bumps adding python-six dependency in this series.

>  $(eval $(python-package))

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Christophe Vu-Brugier]

Hi Baruch,

Thank you for your review!

On Tue, 1 Sep 2015 13:08:16 +0300, Baruch Siach wrote :
> On Tue, Sep 01, 2015 at 10:10:27AM +0200, Christophe Vu-Brugier wrote:
> > Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
> > ---
> >  package/python-urwid/python-urwid.hash | 3 +++
> >  package/python-urwid/python-urwid.mk   | 2 +-
> >  2 files changed, 4 insertions(+), 1 deletion(-)
> >  create mode 100644 package/python-urwid/python-urwid.hash
> > 
> > diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
> > new file mode 100644
> > index 0000000..2b18082
> > --- /dev/null
> > +++ b/package/python-urwid/python-urwid.hash
> > @@ -0,0 +1,3 @@
> > +# md from https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175, sha256 locally computed
> 
> This is weird. You put the MD5 in the URL to retrieve the same MD5? Is there a 
> way to lookup the MD5 using the package name? If not, I guess that 
> https://pypi.python.org/pypi/urwid/1.3.0 would be good enough.

I noticed that other packages downloaded from PyPI (e.g. python-tornado,
python-requests) have the same header in their hash file and decided to
do the same.

I am not aware of a way to lookup the checksum from the package name.
The only association I see between a package name and its checksum is
the URL to download a package from PyPI. For instance:

  https://pypi.python.org/packages/source/u/urwid/urwid-1.3.0.tar.gz#md5=a989acd54f4ff1a554add464803a9175

The "show_md5" action displays the MD5 if it is known. For instance :

  https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175
  displays a989acd54f4ff1a554add464803a9175

Whereas

  https://pypi.python.org/pypi?:action=show_md5&digest=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  displays 404 not found 

Anyway, I am OK with using https://pypi.python.org/pypi/urwid/1.3.0 or
https://pypi.python.org/packages/source/u/urwid/urwid-1.3.0.tar.gz#md5=a989acd54f4ff1a554add464803a9175
if you prefer.

What do other developers think? What is the best header for the hash
file of a PyPI package?

With best regards,

-- 
Christophe Vu-Brugier

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Vicente Olivert Riera]

Dear Zhristophe Vu-Brugier,

could you please mark this v1 patch series as superseded in patchwork?
Thanks.

Regards,

Vincent.

On 09/01/2015 09:10 AM, Christophe Vu-Brugier wrote:
> Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
> ---
>  package/python-urwid/python-urwid.hash | 3 +++
>  package/python-urwid/python-urwid.mk   | 2 +-
>  2 files changed, 4 insertions(+), 1 deletion(-)
>  create mode 100644 package/python-urwid/python-urwid.hash
> 
> diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
> new file mode 100644
> index 0000000..2b18082
> --- /dev/null
> +++ b/package/python-urwid/python-urwid.hash
> @@ -0,0 +1,3 @@
> +# md from https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175, sha256 locally computed
> +md5  	a989acd54f4ff1a554add464803a9175  urwid-1.3.0.tar.gz
> +sha256	29f04fad3bf0a79c5491f7ebec2d50fa086e9d16359896c9204c6a92bc07aba2  urwid-1.3.0.tar.gz
> diff --git a/package/python-urwid/python-urwid.mk b/package/python-urwid/python-urwid.mk
> index 4f1be46..1cd3022 100644
> --- a/package/python-urwid/python-urwid.mk
> +++ b/package/python-urwid/python-urwid.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -PYTHON_URWID_VERSION = 1.2.1
> +PYTHON_URWID_VERSION = 1.3.0
>  PYTHON_URWID_SOURCE = urwid-$(PYTHON_URWID_VERSION).tar.gz
>  PYTHON_URWID_SITE = https://pypi.python.org/packages/source/u/urwid
>  PYTHON_URWID_LICENSE = LGPLv2.1+
> 

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Christophe Vu-Brugier]

Dear Vincent,

On Fri, 4 Sep 2015 16:04:04 +0100, Vicente Olivert Riera wrote :
> could you please mark this v1 patch series as superseded in patchwork?
> Thanks.

Done: I have marked the whole v1 patch serie as superseded.
Also thank you for reviewing and testing v2.

Best regards,

-- 
Christophe Vu-Brugier

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Peter Korsgaard]

>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:

 > Hi Christophe,
 > On Tue, Sep 01, 2015 at 10:10:27AM +0200, Christophe Vu-Brugier wrote:
 >> Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
 >> ---
 >> package/python-urwid/python-urwid.hash | 3 +++
 >> package/python-urwid/python-urwid.mk   | 2 +-
 >> 2 files changed, 4 insertions(+), 1 deletion(-)
 >> create mode 100644 package/python-urwid/python-urwid.hash
 >> 
 >> diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
 >> new file mode 100644
 >> index 0000000..2b18082
 >> --- /dev/null
 >> +++ b/package/python-urwid/python-urwid.hash
 >> @@ -0,0 +1,3 @@
 >> +# md from
 >> https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175,
 >> sha256 locally computed

 > This is weird. You put the MD5 in the URL to retrieve the same MD5? Is there a 
 > way to lookup the MD5 using the package name? If not, I guess that 
 > https://pypi.python.org/pypi/urwid/1.3.0 would be good enough.

Yeah, the upstream pypi hash URLs are kind of odd. These are the
official links though.

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Baruch Siach]

Hi Peter,

On Sun, Sep 13, 2015 at 10:52:36PM +0200, Peter Korsgaard wrote:
> >>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:
> 
>  > On Tue, Sep 01, 2015 at 10:10:27AM +0200, Christophe Vu-Brugier wrote:
>  >> Signed-off-by: Christophe Vu-Brugier <cvubrugier@fastmail.fm>
>  >> ---
>  >> package/python-urwid/python-urwid.hash | 3 +++
>  >> package/python-urwid/python-urwid.mk   | 2 +-
>  >> 2 files changed, 4 insertions(+), 1 deletion(-)
>  >> create mode 100644 package/python-urwid/python-urwid.hash
>  >> 
>  >> diff --git a/package/python-urwid/python-urwid.hash b/package/python-urwid/python-urwid.hash
>  >> new file mode 100644
>  >> index 0000000..2b18082
>  >> --- /dev/null
>  >> +++ b/package/python-urwid/python-urwid.hash
>  >> @@ -0,0 +1,3 @@
>  >> +# md from
>  >> https://pypi.python.org/pypi?:action=show_md5&digest=a989acd54f4ff1a554add464803a9175,
>  >> sha256 locally computed
> 
>  > This is weird. You put the MD5 in the URL to retrieve the same MD5? Is there a 
>  > way to lookup the MD5 using the package name? If not, I guess that 
>  > https://pypi.python.org/pypi/urwid/1.3.0 would be good enough.
> 
> Yeah, the upstream pypi hash URLs are kind of odd. These are the
> official links though.

The .hash file is all about trust, IMO. Seeing md5 that is an identity 
function of the URL just makes me feel uneasy. The package URL at 
https://pypi.python.org/pypi/urwid/1.3.0 contains the same link (next to the 
file name), but it looks less easy to trick.

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

[Buildroot] [PATCH 1/6] python-urwid: bump version and add checksums

[Peter Korsgaard]

>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:

Hi,

 >> Yeah, the upstream pypi hash URLs are kind of odd. These are the
 >> official links though.

 > The .hash file is all about trust, IMO. Seeing md5 that is an identity 
 > function of the URL just makes me feel uneasy. The package URL at 
 > https://pypi.python.org/pypi/urwid/1.3.0 contains the same link (next to the 
 > file name), but it looks less easy to trick.

Yes, I agree. As long as we have a stronger hash locally computed it
isn't a big deal, but it would be good if the pypi guys could do
something more sensible. I'm not sure who to contact about that though.

-- 
Venlig hilsen,
Peter Korsgaard