-
Notifications
You must be signed in to change notification settings - Fork 3.1k
Description
Currently pip does not validate that a wheel filename version matches the metadata version. This is in part because pip has used a looser regex than the now standard for wheel filenames, but that is due to be removed in pip 25.3.
I propose that pip add a validation that the wheel filename version match the wheel metadata version, with a deprecation period of at least 2 releases, we can see based on feedback how ready the ecosystem is to accept this validation.
As well as improving data consistency this will allow pip to use the version in the wheel filename without having to read the metadata to quickly discard wheels that don't meet the requirements, such as when using local paths or URLs (although the URL will need to be checked for redirects).