Skip to content

Modernize python package setup#331

Open
Alicipy wants to merge 8 commits into
OWASP:masterfrom
Alicipy:modernize-python-package-setup
Open

Modernize python package setup#331
Alicipy wants to merge 8 commits into
OWASP:masterfrom
Alicipy:modernize-python-package-setup

Conversation

@Alicipy
Copy link
Copy Markdown

@Alicipy Alicipy commented May 17, 2026

While starting with pytm, I saw a few things regarding package management that could use improvement, especially as the Python folks use pure pip or uv currently, and maybe wondering why the commands don't work.

This PR includes migration to the default pyproject.toml keys which poetry in version 2 also understands, so nothing breaks. As pip can handle these as well, we can remove a few other files which existed for compatibility reasons (?) as well.

Alicipy added 8 commits May 17, 2026 17:15
Lets any packaging tool read the metadata, not just Poetry.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
[dependency-groups] is the standard table for these now

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
Brings the remaining setup.py fields (readme, classifiers,
urls, author email) into [project] so it can be deleted.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
hatchling is the PyPA-maintained build backend; building a wheel
no longer needs Poetry installed. Poetry can stay for the workflow.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
All fields were moved to [project], so we
can safely remove it.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
Its entries referenced top-level dirs that don't exist; the
actual files live under pytm/ and hatchling now picks them up.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
pyproject.toml should be only source for requirements, so they
don't get out of sync.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
Probably missed from a previous migration, most used
repo lives at OWASP/pytm now.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
@Alicipy Alicipy requested a review from izar as a code owner May 17, 2026 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant