This package contains utility functions used by devpi-server and devpi-client.
See http://doc.devpi.net for more information.
Changelog
4.1.2 (2026-10-26)
Bug Fixes
Fix check for relative paths when extracting archives. Reported by ffasterss and shirabe0x05 https://github.com/devpi/devpi/security/advisories/GHSA-5qcc-697r-rj64
Avoid packaging prerelease deprecation warnings when parsing requirements while retaining prerelease matching.
4.1.1 (2026-02-09)
Bug Fixes
Implement missing __hash__ for Version and CompareMixin classes.
Fix py.typed to properly export type information.
4.1.0 (2025-05-18)
Other Changes
Use __slots__ to reduce memory usage of Version.
4.0.4 (2024-04-20)
Bug Fixes
Use filter='data' for extractall call on supported Python versions as additional guard to the existing out of path checks against malicious tar files.
Remove custom LegacyVersion and use packaging-legacy instead, which is also used by pypi.org.
4.0.3 (2023-11-23)
Bug Fixes
Add is_prerelease and other methods to LegacyVersion to fix get_sorted_versions with stable=True and some other cases.
1 maintainer
Metadata
1 maintainer
Release files for devpi-common 4.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| devpi_common-4.1.2.tar.gz | 862.4 kB | Without provenance | Details for devpi_common-4.1.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| devpi_common-4.1.2-py3-none-any.whl | Python 3 | none | any | Details for devpi_common-4.1.2-py3-none-any.whl |
Total release size: 879.3 kB
Release files / devpi_common-4.1.2.tar.gz
| Download URL | devpi_common-4.1.2.tar.gz |
|---|---|
| Size | 862.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b51cb838c7ed60e4d5f81225cf62b917a47034aeb2525502a79414886a53637a
|
|
BLAKE2b-256 checksum How to use checksums |
93d29b78a7b9ac64a92513994ecd32faafae30608ec41e911096d3d57308671c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
devpi-server/7.0.0b14 (py3.11.11; darwin)
|
Release files / devpi_common-4.1.2-py3-none-any.whl
| Download URL | devpi_common-4.1.2-py3-none-any.whl |
|---|---|
| Size | 16.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
73d639065930505227fd003dd525a27cfcf5044e7d48d25ba4873b6e3e659987
|
|
BLAKE2b-256 checksum How to use checksums |
8333d1e76601f730e015c9aa648e97f914eb7cbbc3ed20763ad8763303fcabb2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
devpi-server/7.0.0b14 (py3.11.11; darwin)
|
Security for devpi-common 4.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
