funcd-bundle

Bundles a Python funcd function for deployment: the handler, the exact versions of its runtime dependencies from uv.lock installed for the funcd runtime's Linux platform, and its funcdctl.yaml. funcdctl push turns the bundle into one OCI artifact.

uv add --dev funcd-bundle
uv run funcd-bundle                          # dist/<name>/ for linux/<host arch>
uv run funcd-bundle --platform linux/amd64   # from any host
funcdctl push dist/<name> <ref> --entry handler.py

Functions: every <name>.funcdctl.yaml in the project is a function <name>; with none, funcdctl.yaml is one named after the project directory. The handler is the manifest's main, else <name>.py (or handler.py for funcdctl.yaml) beside the manifest, as funcdctl dev reads it. A handler in a subdirectory is copied with its directory.
Dependencies: uv export --frozen --no-dev of the project, without funcd-shim and the packages only it needs (the runtime ships them). Registry packages install as wheels only (--only-binary :all:) for CPython 3.14 and manylinux glibc 2.36, with their locked hashes. Workspace members are built as pure-Python wheels.
Check: the vendored modules the handler imports are imported in python:3.14-slim-bookworm for the target platform (--no-check skips it). A foreign platform needs QEMU on the Docker host.
Hermetic: --hermetic, or hermetic = true in [tool.funcd-bundle], installs with pip inside that image and then runs post-install, with FUNCD_BUNDLE_DIR and PYTHONPATH set to the bundle:

[tool.funcd-bundle]
hermetic = true
post-install = ["python", "scripts/install_extensions.py"]

Docker steps copy files in and out with docker cp and bind no host path.

Metadata

Release files for funcd-bundle 0.4.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for funcd-bundle 0.4.0
File	Size	Uploaded	Provenance
funcd_bundle-0.4.0.tar.gz	40.2 kB	Oct 5, 2026	With provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for funcd-bundle 0.4.0
File	Interpreter	ABI	Platform	Reset
funcd_bundle-0.4.0-py3-none-any.whl 9.4 kB Oct 5, 2026 With provenance	Python 3	none	any	Details

Total release size: 49.5 kB

Release files / funcd_bundle-0.4.0.tar.gz

Download URL	funcd_bundle-0.4.0.tar.gz
Size	40.2 kB
Tags	Source
SHA-256 checksum How to use checksums	`1d0f50dba0d5e33f8d6c79f6b7c19533837f48e16d5da253f5b8f6329ff82458`
BLAKE2b-256 checksum How to use checksums	`e48015e0bba3fa1186562709ec66cc9c6c5a4e70513edd13a1c4c3d25e3bc5e8`
Upload date	Oct 5, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/pyvvo/funcd-python
Publishing commit: github.com/pyvvo/funcd-python/tree/f14c7053dc2c60f48fcf7da36b7f971243ccedf2

Workflow

Publishing configuration: github.com/pyvvo/funcd-python/blob/f14c7053dc2c60f48fcf7da36b7f971243ccedf2/.github/workflows/release-please.yml
Publishing logs: github.com/pyvvo/funcd-python/actions/runs/37275686189/attempts/1

Artifact

Subject: funcd_bundle-0.4.0.tar.gz
SHA-256 checksum: 1d0f50dba0d5e33f8d6c79f6b7c19533837f48e16d5da253f5b8f6329ff82458 Verifying attestations

Release files / funcd_bundle-0.4.0-py3-none-any.whl

Download URL	funcd_bundle-0.4.0-py3-none-any.whl
Size	9.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`823aa88d8bf60ea378d5d0d10e1e8061b106166874a70a94309b8d6356b8f165`
BLAKE2b-256 checksum How to use checksums	`e334520d46e8b366b222616ca8792ad30e9065b2848c262f4dfce33c69b7d125`
Upload date	Oct 5, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/pyvvo/funcd-python
Publishing commit: github.com/pyvvo/funcd-python/tree/f14c7053dc2c60f48fcf7da36b7f971243ccedf2

Workflow

Publishing configuration: github.com/pyvvo/funcd-python/blob/f14c7053dc2c60f48fcf7da36b7f971243ccedf2/.github/workflows/release-please.yml
Publishing logs: github.com/pyvvo/funcd-python/actions/runs/37275686189/attempts/1

Artifact

Subject: funcd_bundle-0.4.0-py3-none-any.whl
SHA-256 checksum: 823aa88d8bf60ea378d5d0d10e1e8061b106166874a70a94309b8d6356b8f165 Verifying attestations

Security for funcd-bundle 0.4.0

Report project as malware

Provenance

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Attestation for funcd_bundle-0.4.0.tar.gz

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/pyvvo/funcd-python
Publishing commit: github.com/pyvvo/funcd-python/tree/f14c7053dc2c60f48fcf7da36b7f971243ccedf2

Workflow

Publishing configuration: github.com/pyvvo/funcd-python/blob/f14c7053dc2c60f48fcf7da36b7f971243ccedf2/.github/workflows/release-please.yml
Publishing logs: github.com/pyvvo/funcd-python/actions/runs/37275686189/attempts/1

Artifact

Subject: funcd_bundle-0.4.0.tar.gz
SHA-256 checksum: 1d0f50dba0d5e33f8d6c79f6b7c19533837f48e16d5da253f5b8f6329ff82458 Verifying attestations

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.