Who is the author and maintainer of the `mldesigner` python package

Question

Who is the author and maintainer of the mldesigner python package (listed here on PyPi: https://pypi.org/project/mldesigner/)?
The package is recommended by the Azure ML documentation for defining AML components via Python functions, however it is not clear on the PyPi page who is the author/maintainer or where the source files are maintained, and the package does not appear on the Microsoft anaconda channel or follow the naming convention of other AML packages. The maintainer on PyPo is listed as amlpypi but its not clear who this is a pseudo-name for.

I am asking from a software security point of view in order to verify the owners/maintainers of any 3rd party software I use.

Many thanks :)

Answer 1

Hi @Cameron Booker

Thank you for your question.

Based on the below FAQ information available on the PyPI page for the mldesigner package, the author is listed as "Microsoft Corporation." The package is maintained by "amlpypi," which is a username on PyPI. It is not clear who this username belongs to, but it is likely a pseudonym used by Microsoft to maintain the package.

How do I become an owner/maintainer of a project on PyPI? Only the current owners of a project have the ability to add new owners or maintainers. If you need to request ownership, you should contact the current owner(s) of the project directly. Many project owners provide their contact details in the 'Author' field of the 'Meta' details on the project page. If the owner is unresponsive, see How do I claim an abandoned or previously registered project name?

The source files for the package are not explicitly mentioned on the PyPI page, but it is recommended by the Azure ML documentation for defining AML components via Python functions. Therefore, it is safe to assume that the package is maintained by Microsoft and the source files are maintained by them as well.

GitHub Actions:

Azure/azureml-examples: Official community-driven Azure Machine Learning examples, tested with GitHub Actions.

I hope you understand. Thank you.

---

Please don't forget to click Accept Answer and Yes for was this answer helpful.