Python wheel filenames have no canonical form

In this blog post, the author explores the lack of a canonicalization rule for wheel filenames in Python packaging, despite extensive rules for package names and versions. The post delves into the differences between parsing and canonicalizing wheel filenames for comparison, highlighting the complexity of the wheel filename format compared to source distributions. Surprisingly, the post uncovers a lack of canonical form for compressed tag sets in wheel filenames, leading to potential challenges in verifying signatures in a cryptographic setting. Overall, while the lack of canonicalization may not impact most users, the author suggests simple fixes to address this issue in Python packaging standards.

https://blog.yossarian.net/2024/06/12/Python-wheel-filenames-have-no-canonical-form

To top