Questions about third-party package distribution

[Robert Dodier]

Hi, presumably people other than the Sympy developers can create packages which use Sympy to do interesting things. I am curious to know if there is any mechanism for distributing such packages.

Is there any way to install a third-party package in an existing installation of Sympy? Is there a centralized or decentralized repository of packages? Are Sympy packages mainly distributed via PyPI? What mechanism is used to install a package?

How much effort goes into reviewing and vetting packages? Is there any process for approving Sympy packages before publication? Have any security problems ever been encountered in Sympy packages? Does the package distributor make any statements as to guarantees about security or the lack of them?

The reason I ask all these goofy questions is that we are debating package distribution over in the Maxima project, and I would just like to check in and see what you have encountered and how it has been resolved. Thanks for any light you can shed on this topic.

best,

Robert Dodier

[Björn Dahlgren]

Hello Robert,

On Thursday, 14 September 2017 07:10:25 UTC+2, Robert Dodier wrote:

Are Sympy packages mainly distributed via PyPI?

It is my understanding that packages which use SymPy (or are even meant to be used directly with SymPy expressions)
are usually distributed over PyPI (and conda-forge). There is no vetting of these packages.

There is a list of packages which use SymPy on the webpage:
http://www.sympy.org/en/index.html

Best regards,
Björn