Re: API for SHA-256 fingerprints

Also note that the simple API only includes a single hash for each file,
and may use md5 hashes instead of sha256 (technically it may use any of the
hash algorithms guaranteed by hashlib, but I've only seen those two). The
JSON API will give you *all* the hashes warehouse has for the file, which
may be more useful.

Most likely (someone more familiar with Warehouse could answer this)
Warehouse will select sha256 whenever it is available, so the simple API
may be just as good for you. But it's something to consider.

Best,

Alex Becker

On Tue, Feb 12, 2019 at 9:58 AM Paul Moore <[email protected]> wrote:

> On Tue, 12 Feb 2019 at 16:28, Eric Peterson
> <[email protected]> wrote:
> >
> > Brilliant, that's exactly what I was looking for—both the simple API and
> json API look very useful. Thanks!
>
> Just a quick note, the simple API is required for every index server
> to support, whereas the JSON API is not (yet?) standardised and may
> not be supported anywhere other than PyPI (I don't know about devpi,
> for example). This may not matter for your use case, but is useful to
> know more generally.
>
> Paul
> --
> Distutils-SIG mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> https://mail.python.org/mailman3/lists/distutils-sig.python.org/
> Message archived at
> https://mail.python.org/archives/list/[email protected]/message/ZOU33JCVN32DWHRU5MJYGOV52BE5JIR3/
>

--
Distutils-SIG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at https://mail.python.org/archives/list/[email protected]/message/TIRBR5XLTDEFJTS4YTDXG7H7OWSJ6JAX/