nvie/pip-tools
Pip Tools
pip-tools is a set of command line utilities for compiling high-level Python dependency lists into pinned requirements files. It functions as a dependency lock tool and requirements compiler that resolves transitive dependencies to produce a deterministic list of packages.
The project enables the maintenance of separate production and development dependency layers through layered requirement constraints. It supports targeted package upgrades and the generation of content hashes to verify package integrity during installation.
The toolset covers dependency locking, version updates, and virtual environment synchronization to ensure a project installs consistently across different machines. It aligns installed packages with a pinned requirements file by adding, removing, or upgrading versions as needed.
Features
- Lockfile Generators - Generates deterministic lockfiles that record exact versions of all dependencies to ensure reproducible installations.
- Dependency Lock Managers - Generates and maintains locked requirements files to ensure consistent dependency versions across environments.
- Python Package Managers - Provides tools for managing Python dependencies, including updating and syncing virtual environments.
- Requirements Compilers - Resolves transitive dependencies and produces a locked list of pinned packages with content hashes.
- Environment Synchronizers - Aligns the current virtual environment with a lock file by adding, removing, or upgrading packages.
- Python Environment Managers - Aligns installed Python packages in a virtual environment with a pinned requirements file.
- Deterministic Dependency Locking - Creates deterministic requirements files from general dependency lists to guarantee reproducible installations.
- Dependency Resolution Engines - Implements a resolution engine that analyzes package dependency trees to find compatible versions satisfying all constraints.
- Dependency Constraints - Provides the ability to use a high-level requirements file as a filter to lock specific versions of sub-dependencies.
- Layered Dependency Constraints - Supports using one pinned requirements file as a constraint for another to maintain compatibility between environment layers.
- Layered Requirements Workflows - Enables managing separate but compatible dependency lists for development, testing, and production environments.
- Package Upgraders - Allows for targeted upgrades of specific packages or all dependencies while maintaining a deterministic lock file.
- Reproducible Build Environments - Guarantees consistent and secure Python installations across environments using locked requirements files and hashes.
- Dependency Version Updates - Refreshes pinned package versions to the latest compatible releases based on defined version constraints.
- Cryptographic Hash Verifiers - Adds content hashes to requirements files to verify package integrity during the installation process.
- Integrity Verifications - Computes and stores cryptographic hashes of packages to verify their integrity during installation.
- Package Management - Manage and update Python package dependencies.
