News for hackers. Stuff that matters.
Re:If this project is dead, just tell us by guggle on Friday December 13, 2019 @10:03AM (#21782158)
If I had such need, I guess I could have two versions of the requirements.txt:

- One with direct dependencies (versions pinned) - One with direct dependencies + subdependencies (pip freeze output)

Am I being too naive ? (obviously yes if such tool as pipenv exists, but I'm trying to figure why people need *.lock files).

Re:If this project is dead, just tell us by Scarblac on Friday December 13, 2019 @10:54AM (#21782638)
This is close to what pipenv does.

It also adds dependency management. If one subdependency is library_a > 1.0, and another is library_b < 2.0 while also e.g. 2.1 exists, then it will try to find a version between 1.0 and 2.0. Pip doesn't do that.

So in my mind, that's what pipenv is -- pip, virtualenv, those two files, plus dependency management.

Re:If this project is dead, just tell us by icebraining on Friday December 13, 2019 @10:57AM (#21782659)
> One with direct dependencies + subdependencies (pip freeze output)

That's a lock file...

Re:If this project is dead, just tell us by guggle on Friday December 13, 2019 @01:28PM (#21784038)
Ok ! That's what I'd do then.
Re:If this project is dead, just tell us by oblio on Friday December 13, 2019 @10:51AM (#21782602)
Are you only working on small projects? For reference, if your project is under 100k lines of code, it's small.
Re:If this project is dead, just tell us by guggle on Friday December 13, 2019 @01:30PM (#21784058)
By your arbitrary metric, I work on both small and big projects. Not sure how the loc metric relates to the matter though.