Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing Source Distribution (.tar.gz) in Latest PyPI Releases #10766

Open
1 task done
gladon opened this issue Mar 8, 2025 · 2 comments
Open
1 task done

Missing Source Distribution (.tar.gz) in Latest PyPI Releases #10766

gladon opened this issue Mar 8, 2025 · 2 comments

Comments

@gladon
Copy link

gladon commented Mar 8, 2025

  • I have searched to see if a similar issue already exists.

Is your feature request related to a problem? Please describe.

Hi Gradio team,

I noticed that recent (Since 5.3.0) Gradio releases on PyPI do not include the source distribution (.tar.gz) files. This makes it difficult for users who rely on source distributions for installation, customization, or building in specific environments. (Eg: Enterprise users who have security guidelines to only install from source distribution.)

For example, when checking the latest versions on Gradio’s PyPI page, only the wheel (.whl) files are available, while older releases had both wheel and source distribution files.

Describe the solution you'd like
Would it be possible to reinstate the source distributions in future releases?

Alternatively, if this is an intentional change, could you clarify the reasoning behind it?

Thanks for all the great work on Gradio!

Additional context
N/A

@abidlabs
Copy link
Member

abidlabs commented Mar 9, 2025

Hi @gladon we made this change because Pypi limits the total size of Gradio packages that we upload to Pypi. Is this actively blocking you from using Gradio?

cc @freddyaboulton for visibility

@gladon
Copy link
Author

gladon commented Mar 9, 2025

Hi @gladon we made this change because Pypi limits the total size of Gradio packages that we upload to Pypi. Is this actively blocking you from using Gradio?

cc @freddyaboulton for visibility

Yes. This is essentially blocking me and rest of the company from using latest version of Gradio. I work at LinkedIn and the infosec team adds a layer of friction whenever a package needs to be imported that cannot be installed from source distribution. We need multiple approvals and business justification before using such a package. Which no one usually goes through unless super critical. And we have been stuck using old version of gradio.

As a tradeoff, we you can publish a source distribution, every few releases, that would be ok too. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants