c2pa-python 0.38.1 on PyPI has no Windows wheels or sdist (upload hit the 10 GB project limit) #346

Activity

1. rokclimb15 commented on Oct 28, 2026

   

   rokclimb15

   on Oct 28, 2026

   Contributor

   More actions

   0.38.2 is incomplete as well and 0.38.3 (security release) isn't available on pypi due to this issue.
2. fwittreverce commented on Nov 3, 2026

   

   fwittreverce

   on Nov 3, 2026

   Contributor

   More actions

   Some measurements, in case they help prioritise this:

   • The project is out of space. It uses 10,736,723,921 bytes across 77 releases, which leaves about 694 KB. As a result every release after 0.38.0 is only partly uploaded:

     • 0.38.1 has no Windows wheels and no sdist;
     • 0.38.2 has only macOS wheels;
     • 0.38.3, the security release, failed on its first file with 400 Project size too large.

     The build and test jobs passed in all three tag runs (39695647078, 40400851024, 40578640449); only the Release job failed.

   • Windows wheels account for about 60 % of the total: win_amd64 4.94 GB, win_arm64 1.53 GB.

   • Most of each Windows wheel is never loaded. About 88 % of it is c2pa_c.lib, the static library (~83 MB compressed), plus c2pa_c.pdb. lib.py only loads c2pa_c.dll through ctypes. Leaving the .lib/.pdb out of the wheel should bring win_amd64 from ~95 MB down to roughly 10 MB (estimate).

   Two steps would unblock releases and keep future ones well inside the limit:

   • a project size increase (https://docs.pypi.org/project-management/storage-limits#requesting-a-project-size-limit-increase);
   • dropping the static library from the Windows wheels.

   For context: we sign TIFFs and need the new TIFF writer from c2pa-rs ≥ 0.91.2 on both Windows (development) and Linux (production). Until full wheels are on PyPI we are pinned to 0.37.10.
3. DigiLev commented on Nov 4, 2026

   

   DigiLev

   on Nov 4, 2026

   Author

   More actions

   Thank you for the measurements, Fabian, that is exactly what the maintainers need. Tellmark is affected too: our Python SDK depends on c2pa-python, and we have had to keep Windows on 0.37.12 since 0.38.1 landed without Windows wheels, so Windows users cannot get the 0.38.3 security release from PyPI. Dropping c2pa_c.lib and the .pdb from the Windows wheels plus a size limit increase sounds like the right pair of fixes.
4. tmathern

   closed this as completedon Nov 13, 2026
5. tmathern commented on Nov 13, 2026

   

   tmathern

   on Nov 13, 2026

   Collaborator

   More actions

   Hello,

   Thanks for the report. This should be resolving for newer releases.

   cc @ok-nick
6. github-actions

   added

   status: done

   on Nov 13, 2026