This project has been quarantined by PyPI admins. It cannot be installed or modified until a security review is complete.
my-hello-world-sample
A minimal, publishable Python package. It does two things:
- Says hello.
- Ships a bundled
.ziparchive inside the wheel, so you can see how to include binary/package data in a distribution.
Install
pip install my-hello-world-sample
Usage
from my_hello_world_sample import hello
print(hello()) # Hello, World!
print(hello("PyPI")) # Hello, PyPI!
As a module:
python -m my_hello_world_sample
Reading the bundled zip
The archive lives at my_hello_world_sample/data/psmain.zip inside the
installed package:
from my_hello_world_sample import list_entries, read_entry
list_entries() # 869 entries
Most entries in the bundled archive are password-protected, so read_entry()
needs the archive password to decrypt them:
read_entry("main/circular_backend-main/README.md", pwd="your-password")
Without pwd, read_entry() raises a RuntimeError explaining that the
entry is encrypted — it never silently returns garbage.
Point them at a different archive by name — any .zip in the data/
directory works:
list_entries("my-other.zip")
Project layout
.
├── pyproject.toml # metadata + build configuration
├── README.md
├── LICENSE
├── .gitignore
└── src/
└── my_hello_world_sample/
├── __init__.py # public API + __version__
├── __main__.py # python -m my_hello_world_sample
├── core.py # hello()
├── assets.py # zip accessors
└── data/
└── psmain.zip # bundled archive
Development
python3 -m venv .venv
.venv/bin/python -m pip install build twine
.venv/bin/python -m build # writes to dist/
Build artifacts land in dist/:
my_hello_world_sample-0.1.0-py3-none-any.whl— the wheelmy_hello_world_sample-0.1.0.tar.gz— the source distribution
Verify the wheel really contains the archive before publishing:
.venv/bin/python -m zipfile -l dist/*.whl | grep data
Smoke-test the built wheel in a throwaway environment:
python3 -m venv /tmp/check
/tmp/check/bin/python -m pip install dist/*.whl
/tmp/check/bin/python -c "import my_hello_world_sample as m; print(m.hello()); print(m.list_entries())"
Publishing to PyPI
Before your first upload, edit these two placeholders:
authorsinpyproject.toml— PyPI rejects uploads without an author name and email.__version__insrc/my_hello_world_sample/__init__.py— the version is read from there, so this is the only place to bump it. It cannot be reused once published; bump it for every release.
Then:
.venv/bin/python -m build
.venv/bin/python -m twine check dist/*
Try TestPyPI first — it accepts uploads of the same name you plan to use on real PyPI:
.venv/bin/python -m twine upload --repository testpypi dist/*
Upload to real PyPI:
.venv/bin/python -m twine upload dist/*
twine will prompt for your PyPI username and an API token. Create one at
https://pypi.org/manage/account/token/ — scope it to this project only.
License
MIT — see LICENSE.
Metadata
Release files for my-hello-world-sample 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| my_hello_world_sample-0.1.0.tar.gz | 6.5 MB | Without provenance | Details for my_hello_world_sample-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| my_hello_world_sample-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for my_hello_world_sample-0.1.0-py3-none-any.whl |
Total release size: 13.0 MB
Release files / my_hello_world_sample-0.1.0.tar.gz
| Download URL | my_hello_world_sample-0.1.0.tar.gz |
|---|---|
| Size | 6.5 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
857e1feb3defa282f33d0d5eb28924475a68b550aa8c3f3df691e97afddc8d1a
|
|
BLAKE2b-256 checksum How to use checksums |
ef44b42b4df4e22b549c82ee2c3944a3be56e4dc582d7d4028eb82cb651c5a98
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.9.25
|
Release files / my_hello_world_sample-0.1.0-py3-none-any.whl
| Download URL | my_hello_world_sample-0.1.0-py3-none-any.whl |
|---|---|
| Size | 6.5 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
99aa4d250e644a2a58cf05d7309ae84a0ee9730be12b7c9c99f0e60a2f46c5cf
|
|
BLAKE2b-256 checksum How to use checksums |
dcd7d160aec49c25d3cd0c77d2bc712dae240ba1a585d629253a784455b03d89
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.9.25
|
Security for my-hello-world-sample 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.