From a4891a9b4b0ea1074e0cdde70d0668636e939c4f Mon Sep 17 00:00:00 2001 From: Fridolin Pokorny Date: Tue, 30 Jul 2024 20:14:01 +0200 Subject: [PATCH] PEP 710: state download_info structure used in pip Signed-off-by: Fridolin Pokorny --- peps/pep-0710.rst | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/peps/pep-0710.rst b/peps/pep-0710.rst index 438484b9778..8560a3f1008 100644 --- a/peps/pep-0710.rst +++ b/peps/pep-0710.rst @@ -170,9 +170,14 @@ limitations of these hash algorithms. Conversely, hash ``sha256`` SHOULD be included. Installers that cache distribution packages from an index SHOULD keep -information related to the cached distribution artifact, so that -the ``provenance_url.json`` file can be created even when installing distribution packages -from the installer's cache. +information related to the cached distribution artifact, so that the +``provenance_url.json`` file can be created even when installing distribution +packages from the installer's cache. In the case of pip, pip MAY use the +``download_info`` structure to track the download information of the original +artifact—either a source distribution used to build a wheel or the installed +wheel directly. Information about the ``download_info`` structure is available +in the `Installation Report documentation +`__. Backwards Compatibility =======================