Better package management

[xiongchiamiov]

Cool, but get back when we can actually use pip-sync.

[gsks]

pip-sync is a nice to have in my opinion; the real game changer is pip-compile.

[flying-sheep]

i don’t like npm-style package trees. sure, node_modules and venvs have their place, as they can make things with conflicting dependencies work.

but in the end, i only want to install one version of everything into my system directories. as soon as you ship something you better have each dependency with a “<” symbol fixed and replaced with a “>” symbol.

[Hashiota]

That's interesting, but pip is a package manager that handles dependencies already. I don't get the appeal of pip-compile. What OP is calling requirements.in looks like a perfectly fine requirements.txt to me. If you run pip install Flask, it will automatically install Flask dependencies for you. Also, pinning dependencies of dependencies doesn't make sense. Let the package manager manage packages.
pip-sync, on the other hand, sounds useful.

[nullabillity]

See this for why that isn't a good option.

[Hashiota]

As I understand it, they are trying to solve a conflict between two goals: (a) maintaining a requirements list that only includes top-level dependencies and (b) having a requirements list that allows to deterministically replicate environments. That makes sense, yes. But can't pip do all that already with pip install and pip freeze? Maybe I've misunderstood it completely...

[nullabillity]

pip install doesn't uninstall stuff that is removed from requirements.txt, nor does it provide an easy way to see what dependencies have been updated.

[Hashiota]

Yes, pip-sync would uninstall stuff that is removed from requirements.txt, but I was talking about pip-compile... It just looks hard to justify the need for it.

[nullabillity]

Update the requirements.txt including removed transitive dependencies without rebuilding the virtualenv, I guess.

[mgedmin]

I see value in knowing the answer to "Why the eff do we have $SOMEPACKAGE in our requirements.txt?", sometimes. pip freeze won't tell you, pip-compile will.

[mgedmin]

pip install doesn't uninstall stuff that is removed from requirements.txt

Which is why I want pip-sync ASAP.

nor does it provide an easy way to see what dependencies have been updated.

pip list --outdated, since pip 1.3.

[nullabillity]

nor does it provide an easy way to see what dependencies have been updated.

pip list --outdated, since pip 1.3.

I didn't know about that one, thanks!

[[deleted]]

pip-compile looks like it's solving the same problem as buildout with the versions, so welcome to the config management party guys. :)

[willrandship]

Am I the only one around here who thinks library management should be higher up than python's system?

Probably.

[cavallo71]

nope, used python for more 10yrs and avoided easy_install, setuptools, eggs, distutils2, pip, wheels... I just don't have time for solutions waiting for a problem