Install from the repository, not from PyPI - #14
Merged
Conversation
IcebergSCA is released from its GitHub repo and there is no icebergsca package on PyPI, so every install line now points at a tagged git ref: uv tool install git+https://github.com/IcebergAI/IcebergSCA@v0.1.0 uvx --from git+https://github.com/IcebergAI/IcebergSCA@v0.1.0 icebergsca ... Says so explicitly rather than just omitting PyPI. A reader who assumes `pip install icebergsca` works is one squatted name away from installing someone else's code on the strength of our documentation. The tag is pinned everywhere, CI snippets included. Covers the README, the docs site (home page and CI page) and the bundled agent skill, which carried the same instructions. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Every install line pointed at PyPI, where
icebergscadoes not exist and is not going to. They now point at a tagged git ref:The docs say so explicitly rather than just dropping the PyPI lines. A reader who assumes
pip install icebergscaworks is one squatted name away from installing someone else's code on the strength of our documentation.The tag is pinned in every example, CI snippets included — without it you get whatever
mainis at that moment.Files
README.md— Install section and the GitHub Actions snippetwebsite/docs/index.md— install block, plus a short "released from the repository, not from PyPI" notewebsite/docs/output.md— both CI snippetssrc/icebergsca/.agents/skills/icebergsca/SKILL.mdandreferences/ci-integration.md— the bundled skill carried the same instructionswebsite/zensical.toml— the comment where the PyPI social link used to be said "restore it with the first release", which is no longer the planAssumes
v0.1.0is tagged. Note the CHANGELOG still reads## [Unreleased], andpyproject.tomlis at0.1.0— worth cutting the tag and release before this merges, or the commands are accurate but not yet runnable.Checked:
zensical build --cleanclean, ruff, mypy and 384 tests pass.🤖 Generated with Claude Code