Source
danielkza•

Jason is the only member of the @pypa/setuptools-developers team, so while I have the technical capability of merging a PR due to being an admin of the PyPA org on Github, I was not explicitly made a committer of the repository and I don't feel comfortable merging that change. 

Having a bus factor of 1 for a project being used by pretty much every piece of Python software seems problematic. Has setuptools become completely inscrutable over the years, or has the community failed in helping maintain tools that they rely upon?

84
timmyotc•

I think pip has a similar number of maintainers.

35
bspymaster•

Noooo not my beautiful, beautiful pip!

7
coderanger•

Pretty much all major FOSS lives on the knifes edge these days, you just usually don't know it.

18
waterproofpatch•

I mean... Is this a surprise to anyone? I am continuously surprised most FOSS tools I use ever even get updates. Who does that? People with free time?

5
Zomunieo•

I add features to my FOSS tool that I need to do my job, and since it makes us money the effort is justified. My FOSS users justify the extra testing effort because they find bugs before my client does and improve the quality.

4
coderanger•

This math works well on smaller tools, less so when you get to the point of "infrastructure" like setuptools or Python itself.

1
ameoba•

Accidentally clicked on the wrong link - I thought this was the story about the terrorist attack in the Philippines & got worried.

Fortunately, this time, it looks more like he just had to get some sleep before he could finish fixing the busted release.

2
ballagarba•

The broken release (36.0.0) has been removed from PyPi. If you have any mirrors, remove it from there as well.

21
kitkatkingsize•

Thanks a ton. I fixed this in our CI before the start of the work day.

10
Acyt3k•

Me too! It was so frustrating as it broke almost all of our builds 😰

1
r1chardj0n3s•

... or you could try building from a local cache of pinned, known-working dependencies ...

2