pypa/pipenv
Pipenv
Pipenv is a Python dependency manager and virtual environment manager that ensures reproducible environments across different systems. It functions as a lockfile resolver, generating deterministic lockfiles from high-level dependency constraints to prevent version drift.
The tool integrates project workflow automation by loading environment variables and executing custom project scripts. It also includes security auditing capabilities to scan installed packages for known vulnerabilities.
The system covers a broad range of capabilities including dependency version locking, package installation from remote repositories, and the creation of isolated runtimes. It further provides utilities for dependency graph visualization, requirements export, and the building of standardized container images.
Features
- Python Package Managers - Manages Python project dependencies and virtual environments to ensure reproducible installations across machines.
- Dependency Lockfiles - Uses a structured JSON lockfile to capture the exact state of dependency trees for reproducible builds.
- Dependency Installers - Adds dependencies to a project and installs them into an isolated virtual environment using versions or URLs.
- Dependency Tracking - Tracks installed packages in a configuration file and removes unneeded dependencies to maintain consistency.
- Dependency Freezing - Generates a lockfile that records exact versions of all installed dependencies for environment reproducibility.
- Package Installers - Leverages an underlying package installer to handle the downloading and installation of libraries from remote indexes.
- TOML Configuration Support - Utilizes the TOML format for defining high-level dependency constraints and project metadata.
- Python Environment Managers - Creates and activates isolated Python environments to prevent package version conflicts between projects.
- Deterministic Dependency Locking - Generates lockfiles that record exact dependency versions for identical execution in development and production.
- Version Constraints - Supports the specification of required package versions and platform constraints to ensure reproducible builds.
- Virtual Environment Managers - Provides isolated runtime environments with automatic shell detection and prompt integration.
- Environment Isolation - Creates isolated Python runtime environments to prevent dependency conflicts between different projects.
- Dependency Auditing - Scans installed packages for known security vulnerabilities and allows managing CVE exclusions.
- Dependency Exporters - Generates standard requirements files from a lockfile for compatibility with other package managers.
- Automated Dependency Updaters - Provides capabilities to re-resolve and upgrade specific packages or all dependencies to the latest allowed versions.
- Direct URL Installations - Allows fetching and installing packages directly from Git URLs, tags, or specific branches.
- Project Workflow Automation - Defines custom shell scripts and loads environment variables to streamline repetitive development tasks.
- Project Workflow Tools - Provides a CLI for loading environment variables, running custom project scripts, and auditing dependencies.
- Shell Command Execution - Enables the execution of arbitrary shell commands within the active project virtual environment.
- Shell Environment Launchers - Launches an interactive shell session that is pre-activated within the project virtual environment.
- Shell Script Execution Engines - Maps custom command names to shell scripts or executables for streamlined project task execution.
- Configuration-Defined Scripts - Allows the definition of custom command shortcuts for complex shell tasks within the project configuration.
- Dependency Graph Visualizers - Generates visual representations of the project dependency structure to detect conflicts and hierarchy.
- Environment Variable Configurations - Reads and injects key-value pairs from local files into the session environment.
- Dependency Visualizers - Generates a hierarchical map of installed packages and their dependencies in text or JSON format.
- Runtime Execution Wrappers - Spawns subprocesses with a modified environment to execute commands within the context of a specific virtual environment.
- Dependency Vulnerability Scanning - Scans installed Python packages for known security vulnerabilities to identify risky dependencies.
- Outils de développement - Development workflow for dependency management.
- Package Management - Official tool for dependency and environment management.
- Package Managers - Holistic workflow tool for Python dependency management.
- Virtual Environments - Manages dependencies and virtual environments for development workflows.
