Future of GpgME python bindings on PyPi

Paul Schwabauer pschwabauer at intevation.de
Thu Mar 13 14:13:26 CET 2025


The current PyPi entry for the GpgMe bindings 
(https://pypi.org/project/gpg/) is unmaintained. Unfortunately, some 
projects, like Roundup for GPG support, still rely on this entry. The 
outdated version of the bindings contains an invalid code sequence that 
causes compatibility issues with newer Python versions (for more 
details, see the issue: https://issues.roundup-tracker.org/issue2551368).

There are two potential courses of action:

 1.

    *Declare the entry as unmaintained*: Notify all users that this
    package should no longer be used and recommend alternative, actively
    maintained bindings.

 2.

    *Assign a maintainer to the PyPi entry*: Upload a new version and
    fix the build issues to ensure proper functionality.

Currently, the existing Python bindings cannot correctly build a source 
distribution due to missing files in the package. I had to use 
workarounds to build the distribution. For reference, here are the steps 
I followed to successfully build the package: 
https://issues.roundup-tracker.org/msg8362.

For testing purposes, I uploaded a version of the bindings to the PyPi 
testing index: https://test.pypi.org/project/gpg/.

At present, Bernhard Reiter has access to the GPG entry. I would like to 
extend access to someone with write access to the |gpgmepy| repository 
who is interested in maintaining and uploading new versions of the 
bindings. Ideally, I hope this entry continues to be updated, as doing 
so could help identify issues that might affect users who do not 
directly use the bindings via PyPi.




More information about the Gnupg-devel mailing list