KOLANICH-tools / unpin.py

A tool and a lib to unpin dependencies within wheels !!! Migrated to Codeberg!!!

unpin.py

wheel (GitLab) wheel (GHA via nightly.link)

We have moved to https://codeberg.org/KOLANICH-tools/unpin.py, grab new versions there.

Under the disguise of "better security" Micro$oft-owned GitHub has discriminated users of 1FA passwords while having commercial interest in success of FIDO 1FA specifications and Windows Hello implementation which it promotes as a replacement for passwords. It will result in dire consequencies and is competely inacceptable, read why.

If you don't want to participate in harming yourself, it is recommended to follow the lead and migrate somewhere away of GitHub and Micro$oft. Here is the list of alternatives and rationales to do it. If they delete the discussion, there are certain well-known places where you can get a copy of it. Read why you should also leave GitHub.

A tool to remove harmful versions pinnings from prebuilt wheels.

ToDo: Currently libzip is used for updating files witin the archive. It doesn't allow rewriting files in archives without creating a copy of the archive. It is considered contradicting libzip goals by its authors.. We need a lib allowing to do that.

How to use

unpin ./tf_nightly-2.10.0.dev20220617-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

will output the report, for which the harmful constraints have been altered. - means "removed".

gast (>=0.2.1)
	- <=0.4.0
grpcio (>=1.24.3)
	- <2.0
keras-nightly
	- ~=2.10.0.dev
protobuf (>=3.9.2)
	- <3.20
tb-nightly
	- ~=2.10.0.a
tf-estimator-nightly
	- ~=2.10.0.dev

unpin ./requests-2.28.1.dev0+gda9996fe-py3-none-any.whl

charset-normalizer 
	- ~=2.0.0
idna (>=2.5) 
	- <4
urllib3 (>=1.21.1) 
	- <1.27
PySocks (>=1.5.6) ; extra == 'socks'
	- !=1.5.7
chardet (>=3.0.2) ; extra == 'use_chardet_on_py3'
	- <5