Skip to content

PyPI sdist doesn't include the LICENSE file #3

@killua156

Description

@killua156

The fastembed-vectorstore sdist on PyPI declares License-Expression: Apache-2.0 but doesn't package the LICENSE file. Contents of fastembed_vectorstore-0.5.3.tar.gz:

fastembed_vectorstore-0.5.3/PKG-INFO
fastembed_vectorstore-0.5.3/README.md
fastembed_vectorstore-0.5.3/fastembed_vectorstore/__init__.py
fastembed_vectorstore-0.5.3/fastembed_vectorstore/py.typed
fastembed_vectorstore-0.5.3/pyproject.toml

Apache-2.0 §4 requires redistributions to carry the license text, and downstream packagers (we're packaging this for conda-forge in conda-forge/staged-recipes#33192) currently have to fetch the LICENSE separately from GitHub.

Fix: add license-files = ["LICENSE", "NOTICE"] under [project] and republish. Side note: the repo's pyproject.toml is still at 0.5.2 with a setuptools backend while the 0.5.3 release on PyPI was built with uv_build — the released state doesn't seem to be pushed to GitHub.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions