Comments (2)
Hello, thanks for getting in touch.
The additional padding is indeed intentional, although it's not quite ideal. As you've probably noticed the Python versioning specification does have quite a few rules for normalising versions, but it still doesn't quite produce a single canonical form for all equivalent versions: 1.0a1 and 1.0.0a1 are both equivalent in terms of how versions are matched (see here) and are both in their normalised forms.
Padding out to at least three digits is something we do internally so that we have a consistent key by which to refer to a version. This is handy for things like the BigQuery dataset and for our internal databases, but it is certainly confusing. We do have some work in progress to preserve the upstream spellings of the version and present in the BigQuery dataset (potentially the other surfaces too if there's interest). It's complicated slightly by the fact that, for Python, there's not necessarily a single spelling because a single version might have multiple release artifacts (wheels for various platforms, sdists and so on), all of which might have a different way of representing the same version.
With all that in mind, I'm curious to know how exactly his is causing trouble for your tool (because we are looking to improve the situation). For now though if you're using the API, it should normalise the requested versions, so
curl https://api.deps.dev/v3alpha/systems/pypi/packages/verlib/versions/0.1
returns exactly the same response as
curl https://api.deps.dev/v3alpha/systems/pypi/packages/verlib/versions/0.1.0
but both responses will list the versionKey.version as 0.1.0.
from deps.dev.
Thanks for the detailed explanation. I was testing a big batch query using https://api.deps.dev/v3alpha/versionbatch
and failed to check the response to see if the Python packages in question were there but with the added ".0" in the version. It should be fine.
from deps.dev.
Related Issues (20)
- Details for non-standard licenses HOT 7
- Add input examples / OpenAPI spec HOT 2
- Support `GetDependencies` to consider "context" information
- Latest version is not available fot nuget/Grpc.Core
- how to get the checksum information or some type of hash value of the package through the API HOT 1
- Unresolved dependency tree in go HOT 1
- The maven component query return data is missing the publishedAt field. HOT 1
- license ids do not always correspond to the official SPDX list HOT 2
- Commercial use of deps.dev HOT 1
- Compatibility v3 - v3alpha HOT 2
- Missing version for Go package github.com/cncf/xds/go
- Missing Go package github.com/docker/cli
- Missing version for Go package github.com/opencontainers/image-spec
- Support Go standard library package
- Missing version for Go package github.com/asaskevich/govalidator
- Frequent missing publishedAt element for versions where default = true HOT 1
- REST API similarlyNamedPackages returns no results HOT 1
- How to choose the default version of a package HOT 1
- Surface deprecation warnings that appear in the UI
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from deps.dev.