Discrepancy between pypi.io and pypi.org for `dask=2022.7.1`

[jrbourbeau]

Describe the bug

When attempting to download the latest sdist of dask on PyPI from pypi.io using

curl -LO https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz

I get an empty file. However, when I go directly to PyPI to download dask-2022.7.1.tar.gz I get a non-empty file. My understanding is pypi.io is suppose to be a redirect for pypi.org (though my understanding may be wrong).

Expected behavior

I expected https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz to return the same sdist which was uploaded to pypi.org

To Reproduce

https://pypi.io/packages/source/d/dask/dask-2022.7.1.tar.gz is empty while https://files.pythonhosted.org/packages/68/e1/1edb5eeb15f88267075c37ee8c83c4527e462bdea328566c5b1e88db705c/dask-2022.7.1.tar.gz (i.e. the link I get from pypi.org when I attempt to download the dask=2022.7.1 sdist) is returning the sdist I would expect

My Platform

N/A I think, but happy to provide more details if needed

Additional context

This came up over in conda-forge/dask-core-feedstock#134 where we're attempting to create a conda package release on conda-forge for dask=2022.7.1

Possibly similar to pypi/warehouse#7070

[jakirkham]

Seeing the same issue with distributed=2022.7.1

• Empty file: https://pypi.io/packages/source/d/distributed/distributed-2022.7.1.tar.gz
• Non-empty file: https://files.pythonhosted.org/packages/57/f6/bb2532524de2bad548d5a0d731659389dc9fb3483b18715fa3c359c4111c/distributed-2022.7.1.tar.gz

[di]

This is likely due to pypi/warehouse#11949, but an empty file is likely not the intended failure method here, so we might need to do some additional fixes to have this fail in a better way in the future.

[jrbourbeau]

Thanks for the response @di. I just tried the curl command in the original post and I now am getting the expected file. Would you prefer we close this issue or keep open for tracking?

[di]

Let's leave this open, I don't think you should be getting an empty file here.

[jakirkham]

Thanks for all of your help with these issues @di! 🙏

Unfortunately we just ran into this another snag. This one with Cython. It also appears to be doing the empty file thing as well

# archive is 0B
curl -LO https://pypi.io/packages/source/C/Cython/Cython-0.29.31.tar.gz

# archive works as expected
curl -LO https://files.pythonhosted.org/packages/e3/96/ff430960a664e571285365009bf526fa8ec67267a9632b758914adf9206c/Cython-0.29.31.tar.gz

Edit: Fixed the command above as there was a typo there. Though the original run didn't have this typo.

cc @h-vetinari (for awareness)

[jakirkham]

Appears the Cython package can now be downloaded. Thanks for the help here! 🙏