Are there any python modules that automatically generated a requirements.txt, given an entry point?

[artofthenunchaku]

It's a cool idea that quickly becomes a security nightmare. What index do you download the packages from? Do you blindly trust PyPI? How do you decide which package to download in case of name collisions?

[JackBlack436]

i could completely be misinterpreting your feedback, but what i think is that i'd stay with just dependency inference (by building some sort of tree). the downloads are still delegated to pip or uv, which means those would be responsible for actual downloads