Skip to content

fix: work around PyPI's zipbomb mitigation measures#18

Merged
moriyoshi merged 1 commit intomainfrom
fix/workaround-pypi-zip-compression-ratio-restrictions
Mar 11, 2026
Merged

fix: work around PyPI's zipbomb mitigation measures#18
moriyoshi merged 1 commit intomainfrom
fix/workaround-pypi-zip-compression-ratio-restrictions

Conversation

@moriyoshi
Copy link
Copy Markdown
Member

Summary

As the conversion tables may contain too much redundancy, the compression ratios for some wheel builds exceed 98%, where PyPI rejects wheels whose contents expand over 50x.

The fix is to deliberately lower the compression ratio by tuning the compression window (chunk) size.

@moriyoshi moriyoshi merged commit 49eed1e into main Mar 11, 2026
5 checks passed
@moriyoshi moriyoshi deleted the fix/workaround-pypi-zip-compression-ratio-restrictions branch March 11, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant