Re:Pipfile for Python
by HelloNurse on Tuesday November 22, 2016 @09:17AM
(#13014244)
It's a matter of opaqueness, not of abuse: the install system will be unable to reason about what an arbitrary script does, severely limiting functionality.
For example, pip will be unable to ensure dependencies remain constant (after installing something else, after DST begins or ends, between a dry run and an actual install, after unrelated software alters environment variables, etc.). This is much worse than a 95% correct dependencies manifest that can be easily hacked to 100% correct.
[ Parent
| on HN ]
Re:Pipfile for Python
by lukeschlather on Tuesday November 22, 2016 @11:14AM
(#13015070)
pip will be able to do everything you suggest by using the lockfile.
The whole point is that if you want things to be reproducible you don't even need to look in the Pipfile. requirements.txt already supports conditionals, so the Pipfile.lock is strictly simpler to reason about in that sense.