Skip to main content
Quarantined

This project has been quarantined by PyPI admins. It cannot be installed or modified until a security review is complete.

my-hello-world-sample

A minimal, publishable Python package. It does two things:

  1. Says hello.
  2. Ships a bundled .zip archive inside the wheel, so you can see how to include binary/package data in a distribution.

Install

pip install my-hello-world-sample

Usage

from my_hello_world_sample import hello

print(hello())          # Hello, World!
print(hello("PyPI"))    # Hello, PyPI!

As a module:

python -m my_hello_world_sample

Reading the bundled zip

The archive lives at my_hello_world_sample/data/psmain.zip inside the installed package:

from my_hello_world_sample import list_entries, read_entry

list_entries()                      # 869 entries

Most entries in the bundled archive are password-protected, so read_entry() needs the archive password to decrypt them:

read_entry("main/circular_backend-main/README.md", pwd="your-password")

Without pwd, read_entry() raises a RuntimeError explaining that the entry is encrypted — it never silently returns garbage.

Point them at a different archive by name — any .zip in the data/ directory works:

list_entries("my-other.zip")

Project layout

.
├── pyproject.toml          # metadata + build configuration
├── README.md
├── LICENSE
├── .gitignore
└── src/
    └── my_hello_world_sample/
        ├── __init__.py     # public API + __version__
        ├── __main__.py     # python -m my_hello_world_sample
        ├── core.py         # hello()
        ├── assets.py       # zip accessors
        └── data/
            └── psmain.zip # bundled archive

Development

python3 -m venv .venv
.venv/bin/python -m pip install build twine
.venv/bin/python -m build          # writes to dist/

Build artifacts land in dist/:

  • my_hello_world_sample-0.1.0-py3-none-any.whl — the wheel
  • my_hello_world_sample-0.1.0.tar.gz — the source distribution

Verify the wheel really contains the archive before publishing:

.venv/bin/python -m zipfile -l dist/*.whl | grep data

Smoke-test the built wheel in a throwaway environment:

python3 -m venv /tmp/check
/tmp/check/bin/python -m pip install dist/*.whl
/tmp/check/bin/python -c "import my_hello_world_sample as m; print(m.hello()); print(m.list_entries())"

Publishing to PyPI

Before your first upload, edit these two placeholders:

  • authors in pyproject.toml — PyPI rejects uploads without an author name and email.
  • __version__ in src/my_hello_world_sample/__init__.py — the version is read from there, so this is the only place to bump it. It cannot be reused once published; bump it for every release.

Then:

.venv/bin/python -m build
.venv/bin/python -m twine check dist/*

Try TestPyPI first — it accepts uploads of the same name you plan to use on real PyPI:

.venv/bin/python -m twine upload --repository testpypi dist/*

Upload to real PyPI:

.venv/bin/python -m twine upload dist/*

twine will prompt for your PyPI username and an API token. Create one at https://pypi.org/manage/account/token/ — scope it to this project only.

License

MIT — see LICENSE.

Metadata

Release files for my-hello-world-sample 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for my-hello-world-sample 0.1.0
File Size Uploaded Provenance Actions
my_hello_world_sample-0.1.0.tar.gz 6.5 MB Without provenance Details for my_hello_world_sample-0.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for my-hello-world-sample 0.1.0
File Interpreter ABI Platform Actions
my_hello_world_sample-0.1.0-py3-none-any.whl Python 3 none any Details for my_hello_world_sample-0.1.0-py3-none-any.whl

Total release size: 13.0 MB

Release files / my_hello_world_sample-0.1.0.tar.gz

Download URL my_hello_world_sample-0.1.0.tar.gz
Size 6.5 MB
Tags Source
SHA-256 checksum
How to use checksums
857e1feb3defa282f33d0d5eb28924475a68b550aa8c3f3df691e97afddc8d1a
BLAKE2b-256 checksum
How to use checksums
ef44b42b4df4e22b549c82ee2c3944a3be56e4dc582d7d4028eb82cb651c5a98
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.9.25

Release files / my_hello_world_sample-0.1.0-py3-none-any.whl

Download URL my_hello_world_sample-0.1.0-py3-none-any.whl
Size 6.5 MB
Tags Python 3
SHA-256 checksum
How to use checksums
99aa4d250e644a2a58cf05d7309ae84a0ee9730be12b7c9c99f0e60a2f46c5cf
BLAKE2b-256 checksum
How to use checksums
dcd7d160aec49c25d3cd0c77d2bc712dae240ba1a585d629253a784455b03d89
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.9.25

Security for my-hello-world-sample 0.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release
Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page