pipgrip 0.10.4__py2.py3-none-any.whl → 0.10.6__py2.py3-none-any.whl

pipgrip/_repo_version.py

@@ -1 +1 @@
-version = "0.10.4"
+version = "0.10.6"

pipgrip/pipper.py

@@ -1,4 +1,5 @@
 import io
+import json
 import logging
 import os
 import re
@@ -10,7 +11,6 @@ import pkg_resources
 from click import echo as _echo
 from packaging.markers import default_environment
 from packaging.utils import canonicalize_name
-from pkginfo import get_metadata
 
 from pipgrip.compat import PIP_VERSION, urlparse
 
@@ -254,6 +254,59 @@ def _get_available_versions(package, index_url, extra_index_url, pre):
     raise RuntimeError("Failed to get available versions for {}".format(package))
 
 
+def _get_package_report(package, index_url, extra_index_url, pre, cache_dir):
+    """Get metadata (install report) using pip's --dry-run --report functionality."""
+    logger.debug(
+        "Getting report for {} (with fallback cache_dir {})".format(package, cache_dir)
+    )
+    args = [
+        sys.executable,
+        "-m",
+        "pip",
+        "install",
+        "-qq",
+        "--no-deps",
+        "--ignore-installed",
+        "--disable-pip-version-check",
+        "--dry-run",
+        "--no-deps",
+    ]
+    if pre:
+        args += ["--pre"]
+    if cache_dir is not None:
+        args += [
+            "--cache-dir",
+            cache_dir,
+        ]
+    if index_url is not None:
+        args += [
+            "--index-url",
+            index_url,
+            "--trusted-host",
+            urlparse(index_url).hostname,
+        ]
+    if extra_index_url is not None:
+        args += [
+            "--extra-index-url",
+            extra_index_url,
+            "--trusted-host",
+            urlparse(extra_index_url).hostname,
+        ]
+    args += ["--report", "-", package]
+    try:
+        out = stream_bash_command(args)
+    except subprocess.CalledProcessError as err:
+        output = getattr(err, "output") or ""
+        logger.error(
+            "Getting report for {} failed with output:\n{}".format(
+                package, output.strip()
+            )
+        )
+        raise RuntimeError("Failed to get report for {}".format(package))
+    report = json.loads(out)
+    return report
+
+
 def _download_wheel(package, index_url, extra_index_url, pre, cache_dir):
     """Download/build wheel for package and return its filename."""
     logger.debug(
@@ -352,6 +405,8 @@ def _download_wheel(package, index_url, extra_index_url, pre, cache_dir):
 
 
 def _extract_metadata(wheel_fname):
+    from pkginfo import get_metadata  # not required on python 3.7+
+
     wheel_fname = os.path.abspath(wheel_fname)
     logger.debug("Searching metadata in %s", wheel_fname)
     if not os.path.exists(wheel_fname):
@@ -419,10 +474,16 @@ def discover_dependencies_and_versions(
     extras_requested = sorted(req.extras)
 
     logger.info("discovering %s", req)
-    wheel_fname = _download_wheel(
-        req.__str__(), index_url, extra_index_url, pre, cache_dir
-    )
-    wheel_metadata = _extract_metadata(wheel_fname)
+    if PIP_VERSION >= [22, 2]:
+        report = _get_package_report(
+            req.__str__(), index_url, extra_index_url, pre, cache_dir
+        )
+        wheel_metadata = report["install"][0]["metadata"]
+    else:  # old python (<3.7) fallback
+        wheel_fname = _download_wheel(
+            req.__str__(), index_url, extra_index_url, pre, cache_dir
+        )
+        wheel_metadata = _extract_metadata(wheel_fname)
     wheel_requirements = _get_wheel_requirements(wheel_metadata, extras_requested)
     wheel_version = req.url or wheel_metadata["version"]
     available_versions = (

{pipgrip-0.10.4.dist-info → pipgrip-0.10.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pipgrip
-Version: 0.10.4
+Version: 0.10.6
 Summary: Lightweight pip dependency resolver with deptree preview functionality based on the PubGrub algorithm
 Home-page: https://github.com/ddelange/pipgrip
 Author: ddelange
@@ -31,15 +31,16 @@ Classifier: Topic :: Utilities
 Requires-Python: >=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: anytree (>=2.4.1)
-Requires-Dist: click (>=7)
-Requires-Dist: packaging (>=17)
-Requires-Dist: pkginfo (<1.8,>=1.4.2)
-Requires-Dist: setuptools (>=38.3)
+Requires-Dist: anytree >=2.4.1
+Requires-Dist: click >=7
+Requires-Dist: packaging >=17
+Requires-Dist: setuptools >=38.3
 Requires-Dist: wheel
-Requires-Dist: pip (>=7.1.0)
+Requires-Dist: pip >=7.1.0 ; python_version <= "3.6"
+Requires-Dist: pkginfo <1.8,>=1.4.2 ; python_version <= "3.6"
 Requires-Dist: enum34 ; python_version == "2.7"
 Requires-Dist: typing ; python_version == "2.7"
+Requires-Dist: pip >=22.2 ; python_version > "3.6"
 
 # pipgrip
 
@@ -52,6 +53,18 @@ Requires-Dist: typing ; python_version == "2.7"
 
 [pipgrip](https://github.com/ddelange/pipgrip) is a lightweight pip dependency resolver with deptree preview functionality based on the [PubGrub algorithm](https://medium.com/@nex3/pubgrub-2fb6470504f), which is also used by [poetry](https://github.com/python-poetry/poetry). For one or more [PEP 508](https://www.python.org/dev/peps/pep-0508/) dependency specifications, pipgrip recursively fetches/builds the Python wheels necessary for version solving, and optionally renders the full resulting dependency tree.
 
+```
+$ pipgrip --tree fastapi~=0.94
+
+fastapi~=0.94 (0.95.1)
+├── pydantic!=1.7,!=1.7.1,!=1.7.2,!=1.7.3,!=1.8,!=1.8.1,<2.0.0,>=1.6.2 (1.10.7)
+│   └── typing-extensions>=4.2.0 (4.5.0)
+└── starlette<0.27.0,>=0.26.1 (0.26.1)
+    └── anyio<5,>=3.4.0 (3.6.2)
+        ├── idna>=2.8 (3.4)
+        └── sniffio>=1.1 (1.3.0)
+```
+
 #### pipgrip vs. poetry
 
 [poetry](https://github.com/python-poetry/poetry) offers package management with dependency resolution, essentially replacing pip/setuptools. This means that poetry packages don't contain `setup.py`, and hence are not compatible with `pip install -e`: poetry projects would have to be converted to setuptools-based projects with e.g. [dephell](https://github.com/dephell/dephell). To avoid such hassle, pipgrip only requires the selected package(s) + dependencies to be available to pip in the usual way.
@@ -153,15 +166,14 @@ Exhaustive dependency trees without the need to install any packages ([at most b
 ```
 $ pipgrip --tree pipgrip
 
-pipgrip (0.10.0)
-├── anytree>=2.4.1 (2.8.0)
-│   └── six>=1.9.0 (1.16.0)
-├── click>=7 (8.1.3)
-├── packaging>=17 (22.0)
-├── pip>=7.1.0 (22.3.1)
-├── pkginfo<1.8,>=1.4.2 (1.7.1)
-├── setuptools>=38.3 (65.6.3)
-└── wheel (0.38.4)
+pipgrip (0.10.6)
+├── anytree>=2.4.1 (2.9.0)
+│   └── six (1.16.0)
+├── click>=7 (8.1.6)
+├── packaging>=17 (23.1)
+├── pip>=22.2 (23.2.1)
+├── setuptools>=38.3 (68.0.0)
+└── wheel (0.41.1)
 ```
 
 For more details/further processing, combine `--tree` with `--json` for a detailed nested JSON dependency tree. See also `--tree-ascii` (no unicode tree markers), and `--tree-json` & `--tree-json-exact` (simplified JSON dependency trees).

{pipgrip-0.10.4.dist-info → pipgrip-0.10.6.dist-info}/RECORD

@@ -1,9 +1,9 @@
 pipgrip/__init__.py,sha256=mLaibXlzSl5M71C0-9eimUNlbB0DzF3nO6YdEZcn5MA,158
-pipgrip/_repo_version.py,sha256=Fo28le_VA17IHTnUzUwXRV_1xW1h8maFouDD6c_z9Tc,19
+pipgrip/_repo_version.py,sha256=Ok7_5S8MHF9pymQb5JACvZ6o4pQt5Mj3oHVLRCPiDm8,19
 pipgrip/cli.py,sha256=3NN6YNDdb4oIAQc7Ol-oaRUrYMIO4RKw0vvlUm6kBBQ,18196
 pipgrip/compat.py,sha256=e6uOHh84H2pRMNtD5Rp-PLSk-MSbmvHa_12Ov6q7-yo,389
 pipgrip/package_source.py,sha256=MBC1_ERk-r8sRZpwXPpYn8uwx1ntR7OXjQyT3eQuTXY,8188
-pipgrip/pipper.py,sha256=2GUwsVR3mlr3ELQsmQljYbmJLXfOwN6nX9lRN8nBEB0,14411
+pipgrip/pipper.py,sha256=8dQMWVvetbKoQ8SaU8Gd5B63HsRaPmqdPgH9WVAPbe8,16226
 pipgrip/libs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pipgrip/libs/mixology/__init__.py,sha256=HfjVOrpTnmZ-xVFCYSVmX50EXaBQeJteUHG-PD6iQs8,22
 pipgrip/libs/mixology/_compat.py,sha256=hPGj-zSfCbwJTN1NlH_i93m-2Dinq7VIMnr2vycx2Ls,129
@@ -29,9 +29,9 @@ pipgrip/libs/semver/version.py,sha256=-l9btQIkRsYDjpBjjd2OSNxJxCg4WPVybFaigeIJs3
 pipgrip/libs/semver/version_constraint.py,sha256=r2L4U6mqfjsKYro46duqaeroNcEWrBxpZq5oArzrCmQ,896
 pipgrip/libs/semver/version_range.py,sha256=w1V54cLQjmAUFXr5MsJCVdo5DjNpwl-TEnmfOvHbaGs,13707
 pipgrip/libs/semver/version_union.py,sha256=I86jcnXylR5RlqRpAvGxsMeUA5_j3fC3LaOubBavEpI,8158
-pipgrip-0.10.4.dist-info/LICENSE,sha256=0VQx-FY5ohi5oryC-9Xm8b5aacF-dDDuv8TRevRsRqc,1516
-pipgrip-0.10.4.dist-info/METADATA,sha256=-weaWWzBo2a0vc-BQPKb6TMS76ymq7a4tzkp9kDxA74,16117
-pipgrip-0.10.4.dist-info/WHEEL,sha256=bb2Ot9scclHKMOLDEHY6B2sicWOgugjFKaJsT7vwMQo,110
-pipgrip-0.10.4.dist-info/entry_points.txt,sha256=VGqby8sWTjfkK20Vj_FqBZ_UxBlgmAOzq4rcJLYlRq0,45
-pipgrip-0.10.4.dist-info/top_level.txt,sha256=upoyu3ujOmKRvBUtTrwzk58e-r6zJahuT_8-RDsd2p0,8
-pipgrip-0.10.4.dist-info/RECORD,,
+pipgrip-0.10.6.dist-info/LICENSE,sha256=0VQx-FY5ohi5oryC-9Xm8b5aacF-dDDuv8TRevRsRqc,1516
+pipgrip-0.10.6.dist-info/METADATA,sha256=CQq5BfZ5jwMmIuL31oA_h3FEoLZE9JkO2S0TloKLjnA,16517
+pipgrip-0.10.6.dist-info/WHEEL,sha256=m9WAupmBd2JGDsXWQGJgMGXIWbQY3F5c2xBJbBhq0nY,110
+pipgrip-0.10.6.dist-info/entry_points.txt,sha256=VGqby8sWTjfkK20Vj_FqBZ_UxBlgmAOzq4rcJLYlRq0,45
+pipgrip-0.10.6.dist-info/top_level.txt,sha256=upoyu3ujOmKRvBUtTrwzk58e-r6zJahuT_8-RDsd2p0,8
+pipgrip-0.10.6.dist-info/RECORD,,

{pipgrip-0.10.4.dist-info → pipgrip-0.10.6.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: bdist_wheel (0.38.4)
+Generator: bdist_wheel (0.41.1)
 Root-Is-Purelib: true
 Tag: py2-none-any
 Tag: py3-none-any