Cursor Agent 971e955c35 wheelhouse: don't build sdists; fail fast and direct to --find-links pre-built wheels ... Building sdists runs dependency build code on the host (RCE surface, no sandbox), is non-hermetic/non-reproducible, needs a toolchain, and is host-arch-only for compiled packages -- all at odds with pymage's guarantees. Remove the builder and --build-sdists opt-in; keep sdist parsing only so the error can explain the package is sdist-only and point at the --find-links pre-build workflow. Co-authored-by: Jason Hall <imjasonh@users.noreply.github.com>		2026-06-11 01:50:41 +00:00
..
cli.go	wheelhouse: don't build sdists; fail fast and direct to --find-links pre-built wheels	2026-06-11 01:50:41 +00:00
cli_test.go	cache: make caching opt-out (default on) with --no-cache	2026-06-11 00:42:36 +00:00
defaults.go	wheelhouse: don't build sdists; fail fast and direct to --find-links pre-built wheels	2026-06-11 01:50:41 +00:00