Python Starter

Steps to set up

Create a new repository in GitHub using this repository as a template
Generate Docker Hub PAT (Personal Access Token)
Create an Environment in GitHub with the following secrets
- DOCKER_USERNAME (Docker Hub username)
- DOCKER_PASSWORD (Docker Hub PAT)
Create a Docker Hub repository with the same name as the GitHub repository
Update assignees in renovate.json with your GitHub username
Set up code-cove and make sure it has access to this repository
- https://docs.codecov.com/docs/quick-start
Setup branch protection rules
- Set Enrforcment Status to Enabled
- Make sure Target branches set to main or default branch
- Ensure these Branch rules are selected
  - Restrict deletions
  - Require status checks to pass with these checks
    - Lint
    - Test
  - Block force pushes
Create a PyPi Trusted Publisher
- https://pypi.org/manage/account/publishing/
Ensure the name in pyproject.toml matches the name of the package on PyPi
Make sure the following linters are installed externally of the project
- yamllint
- shellcheck
- shfmt
- node (npx/dclint)

TODO

Handle GitHub pre-release
Update PYTHONPATH with src folder
Add custom user to Dockerfile
Fix Dockerfile
Fix health check
Fix version number

Metadata

Release files for js-python-starter 20261013153423.dev0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for js-python-starter 20261013153423.dev0
File	Size	Uploaded	Provenance
js_python_starter-20261013153423.dev0.tar.gz	15.4 kB	Oct 13, 2026	With provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for js-python-starter 20261013153423.dev0
File	Interpreter	ABI	Platform	Reset
js_python_starter-20261013153423.dev0-py3-none-any.whl 15.9 kB Oct 13, 2026 With provenance	Python 3	none	any	Details

Total release size: 31.2 kB

Release files / js_python_starter-20261013153423.dev0.tar.gz

Download URL	js_python_starter-20261013153423.dev0.tar.gz
Size	15.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`ba32c1bda483831a273add80f24d69585a33cc51fbc581326a2884f749e3da13`
BLAKE2b-256 checksum How to use checksums	`4ce0b0bfba9a64e3fc7c2636e3c794fdf4144723e64d55ccfcc22ddfbe38f852`
Upload date	Oct 13, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/jnstockley/python-starter
Publishing commit: github.com/jnstockley/python-starter/tree/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4

Workflow

Publishing configuration: github.com/jnstockley/python-starter/blob/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4/.github/workflows/ci-cd.yml
Publishing logs: github.com/jnstockley/python-starter/actions/runs/38423107506/attempts/1

Artifact

Subject: js_python_starter-20261013153423.dev0.tar.gz
SHA-256 checksum: ba32c1bda483831a273add80f24d69585a33cc51fbc581326a2884f749e3da13 Verifying attestations

Release files / js_python_starter-20261013153423.dev0-py3-none-any.whl

Download URL	js_python_starter-20261013153423.dev0-py3-none-any.whl
Size	15.9 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`c7eae3800c6af5c164a9e671d92c02fa4501818b6bc51af2c32eb3bbec10111b`
BLAKE2b-256 checksum How to use checksums	`f947d1d288f8fab3f49df0eccaf0b1d5179ee6e73c4bfa227d38dbec9934b9a1`
Upload date	Oct 13, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/jnstockley/python-starter
Publishing commit: github.com/jnstockley/python-starter/tree/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4

Workflow

Publishing configuration: github.com/jnstockley/python-starter/blob/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4/.github/workflows/ci-cd.yml
Publishing logs: github.com/jnstockley/python-starter/actions/runs/38423107506/attempts/1

Artifact

Subject: js_python_starter-20261013153423.dev0-py3-none-any.whl
SHA-256 checksum: c7eae3800c6af5c164a9e671d92c02fa4501818b6bc51af2c32eb3bbec10111b Verifying attestations

Security for js-python-starter 20261013153423.dev0

Report project as malware

Provenance

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Attestation for js_python_starter-20261013153423.dev0.tar.gz

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/jnstockley/python-starter
Publishing commit: github.com/jnstockley/python-starter/tree/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4

Workflow

Publishing configuration: github.com/jnstockley/python-starter/blob/8653f1ea9fd60b15b7beae74a2a88e3cec9fa0e4/.github/workflows/ci-cd.yml
Publishing logs: github.com/jnstockley/python-starter/actions/runs/38423107506/attempts/1

Artifact

Subject: js_python_starter-20261013153423.dev0.tar.gz
SHA-256 checksum: ba32c1bda483831a273add80f24d69585a33cc51fbc581326a2884f749e3da13 Verifying attestations

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.