pipgrip 0.10.4__tar.gz → 0.10.6__tar.gz

{pipgrip-0.10.4/src/pipgrip.egg-info → pipgrip-0.10.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pipgrip
-Version: 0.10.4
+Version: 0.10.6
 Summary: Lightweight pip dependency resolver with deptree preview functionality based on the PubGrub algorithm
 Home-page: https://github.com/ddelange/pipgrip
 Author: ddelange
@@ -43,6 +43,18 @@ License-File: LICENSE
 
 [pipgrip](https://github.com/ddelange/pipgrip) is a lightweight pip dependency resolver with deptree preview functionality based on the [PubGrub algorithm](https://medium.com/@nex3/pubgrub-2fb6470504f), which is also used by [poetry](https://github.com/python-poetry/poetry). For one or more [PEP 508](https://www.python.org/dev/peps/pep-0508/) dependency specifications, pipgrip recursively fetches/builds the Python wheels necessary for version solving, and optionally renders the full resulting dependency tree.
 
+```
+$ pipgrip --tree fastapi~=0.94
+
+fastapi~=0.94 (0.95.1)
+├── pydantic!=1.7,!=1.7.1,!=1.7.2,!=1.7.3,!=1.8,!=1.8.1,<2.0.0,>=1.6.2 (1.10.7)
+│   └── typing-extensions>=4.2.0 (4.5.0)
+└── starlette<0.27.0,>=0.26.1 (0.26.1)
+    └── anyio<5,>=3.4.0 (3.6.2)
+        ├── idna>=2.8 (3.4)
+        └── sniffio>=1.1 (1.3.0)
+```
+
 #### pipgrip vs. poetry
 
 [poetry](https://github.com/python-poetry/poetry) offers package management with dependency resolution, essentially replacing pip/setuptools. This means that poetry packages don't contain `setup.py`, and hence are not compatible with `pip install -e`: poetry projects would have to be converted to setuptools-based projects with e.g. [dephell](https://github.com/dephell/dephell). To avoid such hassle, pipgrip only requires the selected package(s) + dependencies to be available to pip in the usual way.
@@ -144,15 +156,14 @@ Exhaustive dependency trees without the need to install any packages ([at most b
 ```
 $ pipgrip --tree pipgrip
 
-pipgrip (0.10.0)
-├── anytree>=2.4.1 (2.8.0)
-│   └── six>=1.9.0 (1.16.0)
-├── click>=7 (8.1.3)
-├── packaging>=17 (22.0)
-├── pip>=7.1.0 (22.3.1)
-├── pkginfo<1.8,>=1.4.2 (1.7.1)
-├── setuptools>=38.3 (65.6.3)
-└── wheel (0.38.4)
+pipgrip (0.10.6)
+├── anytree>=2.4.1 (2.9.0)
+│   └── six (1.16.0)
+├── click>=7 (8.1.6)
+├── packaging>=17 (23.1)
+├── pip>=22.2 (23.2.1)
+├── setuptools>=38.3 (68.0.0)
+└── wheel (0.41.1)
 ```
 
 For more details/further processing, combine `--tree` with `--json` for a detailed nested JSON dependency tree. See also `--tree-ascii` (no unicode tree markers), and `--tree-json` & `--tree-json-exact` (simplified JSON dependency trees).

{pipgrip-0.10.4 → pipgrip-0.10.6}/README.md

@@ -9,6 +9,18 @@
 
 [pipgrip](https://github.com/ddelange/pipgrip) is a lightweight pip dependency resolver with deptree preview functionality based on the [PubGrub algorithm](https://medium.com/@nex3/pubgrub-2fb6470504f), which is also used by [poetry](https://github.com/python-poetry/poetry). For one or more [PEP 508](https://www.python.org/dev/peps/pep-0508/) dependency specifications, pipgrip recursively fetches/builds the Python wheels necessary for version solving, and optionally renders the full resulting dependency tree.
 
+```
+$ pipgrip --tree fastapi~=0.94
+
+fastapi~=0.94 (0.95.1)
+├── pydantic!=1.7,!=1.7.1,!=1.7.2,!=1.7.3,!=1.8,!=1.8.1,<2.0.0,>=1.6.2 (1.10.7)
+│   └── typing-extensions>=4.2.0 (4.5.0)
+└── starlette<0.27.0,>=0.26.1 (0.26.1)
+    └── anyio<5,>=3.4.0 (3.6.2)
+        ├── idna>=2.8 (3.4)
+        └── sniffio>=1.1 (1.3.0)
+```
+
 #### pipgrip vs. poetry
 
 [poetry](https://github.com/python-poetry/poetry) offers package management with dependency resolution, essentially replacing pip/setuptools. This means that poetry packages don't contain `setup.py`, and hence are not compatible with `pip install -e`: poetry projects would have to be converted to setuptools-based projects with e.g. [dephell](https://github.com/dephell/dephell). To avoid such hassle, pipgrip only requires the selected package(s) + dependencies to be available to pip in the usual way.
@@ -110,15 +122,14 @@ Exhaustive dependency trees without the need to install any packages ([at most b
 ```
 $ pipgrip --tree pipgrip
 
-pipgrip (0.10.0)
-├── anytree>=2.4.1 (2.8.0)
-│   └── six>=1.9.0 (1.16.0)
-├── click>=7 (8.1.3)
-├── packaging>=17 (22.0)
-├── pip>=7.1.0 (22.3.1)
-├── pkginfo<1.8,>=1.4.2 (1.7.1)
-├── setuptools>=38.3 (65.6.3)
-└── wheel (0.38.4)
+pipgrip (0.10.6)
+├── anytree>=2.4.1 (2.9.0)
+│   └── six (1.16.0)
+├── click>=7 (8.1.6)
+├── packaging>=17 (23.1)
+├── pip>=22.2 (23.2.1)
+├── setuptools>=38.3 (68.0.0)
+└── wheel (0.41.1)
 ```
 
 For more details/further processing, combine `--tree` with `--json` for a detailed nested JSON dependency tree. See also `--tree-ascii` (no unicode tree markers), and `--tree-json` & `--tree-json-exact` (simplified JSON dependency trees).

pipgrip-0.10.6/requirements/prod.txt

@@ -0,0 +1,10 @@
+anytree>=2.4.1
+click>=7
+packaging>=17
+setuptools>=38.3  # for pkg_resources
+wheel
+pip>=22.2; python_version>'3.6'  # >=22.2 for --dry-run --report ref ddelange/pipgrip#114
+pip>=7.1.0; python_version<='3.6'  # >=7.1.0 for --constraint
+pkginfo>=1.4.2,<1.8; python_version<='3.6'  # ref ddelange/pipgrip#68 and ddelange/pipgrip#114
+enum34; python_version=='2.7'
+typing; python_version=='2.7'

pipgrip-0.10.6/src/pipgrip/_repo_version.py

@@ -0,0 +1 @@
+version = "0.10.6"

{pipgrip-0.10.4 → pipgrip-0.10.6}/src/pipgrip/pipper.py

@@ -1,4 +1,5 @@
 import io
+import json
 import logging
 import os
 import re
@@ -10,7 +11,6 @@ import pkg_resources
 from click import echo as _echo
 from packaging.markers import default_environment
 from packaging.utils import canonicalize_name
-from pkginfo import get_metadata
 
 from pipgrip.compat import PIP_VERSION, urlparse
 
@@ -254,6 +254,59 @@ def _get_available_versions(package, index_url, extra_index_url, pre):
     raise RuntimeError("Failed to get available versions for {}".format(package))
 
 
+def _get_package_report(package, index_url, extra_index_url, pre, cache_dir):
+    """Get metadata (install report) using pip's --dry-run --report functionality."""
+    logger.debug(
+        "Getting report for {} (with fallback cache_dir {})".format(package, cache_dir)
+    )
+    args = [
+        sys.executable,
+        "-m",
+        "pip",
+        "install",
+        "-qq",
+        "--no-deps",
+        "--ignore-installed",
+        "--disable-pip-version-check",
+        "--dry-run",
+        "--no-deps",
+    ]
+    if pre:
+        args += ["--pre"]
+    if cache_dir is not None:
+        args += [
+            "--cache-dir",
+            cache_dir,
+        ]
+    if index_url is not None:
+        args += [
+            "--index-url",
+            index_url,
+            "--trusted-host",
+            urlparse(index_url).hostname,
+        ]
+    if extra_index_url is not None:
+        args += [
+            "--extra-index-url",
+            extra_index_url,
+            "--trusted-host",
+            urlparse(extra_index_url).hostname,
+        ]
+    args += ["--report", "-", package]
+    try:
+        out = stream_bash_command(args)
+    except subprocess.CalledProcessError as err:
+        output = getattr(err, "output") or ""
+        logger.error(
+            "Getting report for {} failed with output:\n{}".format(
+                package, output.strip()
+            )
+        )
+        raise RuntimeError("Failed to get report for {}".format(package))
+    report = json.loads(out)
+    return report
+
+
 def _download_wheel(package, index_url, extra_index_url, pre, cache_dir):
     """Download/build wheel for package and return its filename."""
     logger.debug(
@@ -352,6 +405,8 @@ def _download_wheel(package, index_url, extra_index_url, pre, cache_dir):
 
 
 def _extract_metadata(wheel_fname):
+    from pkginfo import get_metadata  # not required on python 3.7+
+
     wheel_fname = os.path.abspath(wheel_fname)
     logger.debug("Searching metadata in %s", wheel_fname)
     if not os.path.exists(wheel_fname):
@@ -419,10 +474,16 @@ def discover_dependencies_and_versions(
     extras_requested = sorted(req.extras)
 
     logger.info("discovering %s", req)
-    wheel_fname = _download_wheel(
-        req.__str__(), index_url, extra_index_url, pre, cache_dir
-    )
-    wheel_metadata = _extract_metadata(wheel_fname)
+    if PIP_VERSION >= [22, 2]:
+        report = _get_package_report(
+            req.__str__(), index_url, extra_index_url, pre, cache_dir
+        )
+        wheel_metadata = report["install"][0]["metadata"]
+    else:  # old python (<3.7) fallback
+        wheel_fname = _download_wheel(
+            req.__str__(), index_url, extra_index_url, pre, cache_dir
+        )
+        wheel_metadata = _extract_metadata(wheel_fname)
     wheel_requirements = _get_wheel_requirements(wheel_metadata, extras_requested)
     wheel_version = req.url or wheel_metadata["version"]
     available_versions = (

{pipgrip-0.10.4 → pipgrip-0.10.6/src/pipgrip.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pipgrip
-Version: 0.10.4
+Version: 0.10.6
 Summary: Lightweight pip dependency resolver with deptree preview functionality based on the PubGrub algorithm
 Home-page: https://github.com/ddelange/pipgrip
 Author: ddelange
@@ -43,6 +43,18 @@ License-File: LICENSE
 
 [pipgrip](https://github.com/ddelange/pipgrip) is a lightweight pip dependency resolver with deptree preview functionality based on the [PubGrub algorithm](https://medium.com/@nex3/pubgrub-2fb6470504f), which is also used by [poetry](https://github.com/python-poetry/poetry). For one or more [PEP 508](https://www.python.org/dev/peps/pep-0508/) dependency specifications, pipgrip recursively fetches/builds the Python wheels necessary for version solving, and optionally renders the full resulting dependency tree.
 
+```
+$ pipgrip --tree fastapi~=0.94
+
+fastapi~=0.94 (0.95.1)
+├── pydantic!=1.7,!=1.7.1,!=1.7.2,!=1.7.3,!=1.8,!=1.8.1,<2.0.0,>=1.6.2 (1.10.7)
+│   └── typing-extensions>=4.2.0 (4.5.0)
+└── starlette<0.27.0,>=0.26.1 (0.26.1)
+    └── anyio<5,>=3.4.0 (3.6.2)
+        ├── idna>=2.8 (3.4)
+        └── sniffio>=1.1 (1.3.0)
+```
+
 #### pipgrip vs. poetry
 
 [poetry](https://github.com/python-poetry/poetry) offers package management with dependency resolution, essentially replacing pip/setuptools. This means that poetry packages don't contain `setup.py`, and hence are not compatible with `pip install -e`: poetry projects would have to be converted to setuptools-based projects with e.g. [dephell](https://github.com/dephell/dephell). To avoid such hassle, pipgrip only requires the selected package(s) + dependencies to be available to pip in the usual way.
@@ -144,15 +156,14 @@ Exhaustive dependency trees without the need to install any packages ([at most b
 ```
 $ pipgrip --tree pipgrip
 
-pipgrip (0.10.0)
-├── anytree>=2.4.1 (2.8.0)
-│   └── six>=1.9.0 (1.16.0)
-├── click>=7 (8.1.3)
-├── packaging>=17 (22.0)
-├── pip>=7.1.0 (22.3.1)
-├── pkginfo<1.8,>=1.4.2 (1.7.1)
-├── setuptools>=38.3 (65.6.3)
-└── wheel (0.38.4)
+pipgrip (0.10.6)
+├── anytree>=2.4.1 (2.9.0)
+│   └── six (1.16.0)
+├── click>=7 (8.1.6)
+├── packaging>=17 (23.1)
+├── pip>=22.2 (23.2.1)
+├── setuptools>=38.3 (68.0.0)
+└── wheel (0.41.1)
 ```
 
 For more details/further processing, combine `--tree` with `--json` for a detailed nested JSON dependency tree. See also `--tree-ascii` (no unicode tree markers), and `--tree-json` & `--tree-json-exact` (simplified JSON dependency trees).

{pipgrip-0.10.4 → pipgrip-0.10.6}/src/pipgrip.egg-info/requires.txt

@@ -1,11 +1,16 @@
 anytree>=2.4.1
 click>=7
 packaging>=17
-pkginfo<1.8,>=1.4.2
 setuptools>=38.3
 wheel
+
+[:python_version <= "3.6"]
 pip>=7.1.0
+pkginfo<1.8,>=1.4.2
 
 [:python_version == "2.7"]
 enum34
 typing
+
+[:python_version > "3.6"]
+pip>=22.2

pipgrip-0.10.4/requirements/prod.txt

@@ -1,9 +0,0 @@
-anytree>=2.4.1
-click>=7
-packaging>=17
-pkginfo>=1.4.2,<1.8  # ref ddelange/pipgrip#68
-setuptools>=38.3  # for pkg_resources
-wheel
-pip>=7.1.0  # >=7.1.0 for --constraint
-enum34; python_version=='2.7'
-typing; python_version=='2.7'

pipgrip-0.10.4/src/pipgrip/_repo_version.py

@@ -1 +0,0 @@
-version = "0.10.4"