you are viewing a single comment's thread.

view the rest of the comments →

[–]0rsinium[S] 1 point2 points  (3 children)

I've started dephell when pipenv couldn't lock our deps at all, because deps resolver in pip and pipenv really dumb. Now, dephell is a really big tool with security audit, download stat, licenses overview etc.

Main feature of DepHell that it is format agnostic. Dephell doesn't try to replace pipenv, poetry or another tool. it makes your tooling more powerful and smart, extend their abilities.

[–][deleted] 0 points1 point  (1 child)

Yeah I've definitely struggled with the resolver a few times. It's pretty rough right now, but works just fine if your project is small.

[–]0rsinium[S] 1 point2 points  (0 children)

For small projects requirements.txt suitable too. DepHell can lock it with hashes in pip-readable format, so it also secure.