Abhängigkeiten mit pip verwalten

Einführung

Grundlagen von pip install

# pip install requests
# pip install requests==2.31.0
# pip install 'requests>=2.25,<3'
print('install demo')

pip freeze

# pip freeze > requirements.txt
# Contents like:
# requests==2.31.0
# urllib3==2.0.4
print('freeze demo')

pip install -r

# pip install -r requirements.txt
# Installs exactly what freeze captured
print('install -r demo')

Abhängigkeiten für Entwicklung und Produktion

# requirements.txt:
# requests==2.31.0
# requirements-dev.txt:
# pytest==7.4.0
# black==23.7.0
print('separate deps demo')

pip show

# pip show requests
# Output:
# Name: requests
# Version: 2.31.0
# Requires: certifi, charset-normalizer, idna, urllib3
print('show demo')

pip list --outdated

# pip list --outdated
# Package  Version  Latest  Type
# requests 2.28.0   2.31.0  wheel
print('outdated demo')

Strategien zum Festschreiben von Versionen

# Production: pin exact
# requests==2.31.0
# Development: allow compatible
# requests~=2.31
print('pinning strategy')

pip check

# pip check
# No broken requirements found.
print('check demo')

Editable-Installationen

# In your project root with pyproject.toml:
# pip install -e .
# Now changes to src/ are live
print('editable demo')

pip-audit für Sicherheit

# pip install pip-audit
# pip-audit
# No known vulnerabilities found.
print('audit demo')

Kurztest

Zusammenfassung

Weiter geht's