What is the plan of implementation for lock file?

[AdamJel]

Hello @ofek & all,

I understand that PEP-665 has been rejected and that it is the main reason for hatch for not implementing it just yet. But I would like to ask, what is the plan here? Wait until some other PEP will be accepted - wait for official lock file format? Or will you make a guess and implement your own solution with a possibility of deprecating it in the future in favor of a PEP-xxx format?

Because waiting for PEP, as it seems, may take a long time. And having dependency manager without lock file does not make much sense for many use-cases.

[ofek]

Or will you make a guess and implement your own solution with a possibility of deprecating it in the future in favor of a PEP-xxx format?

That, when this is released pypa/pip#10748

[AdamJel]

Thanks @ofek. Can you give any time estimate on when could these two dependent things happen?

[maresb]

It's probably not possible to give a time estimate, but in the meantime there are some temporary solutions being discussed in #360.

[AdamJel]

Thanks for pointing that one out. In the meantime, I decided we will use pdm in our team as lockfile is a hard requirement for us.

It's a real pity that such a nice language as Python doesn't support production features, which are these days considered a standard language features.

[stonebig]

so, there is no hope and we have to move to poetry ?

it seems:
- pip install my_package --dry-run --report toto.txt does work

• I see a 10 days old https://discuss.python.org/t/pep-658-is-now-live-on-pypi/26693 ..
• ... with a oups! pip parses dist-info-metadata key from JSON indexes incorrectly pip#12042

[stonebig]

doing a test pip install --pre --no-index --trusted-host=None --find-links=my_locals\packages.srcreq --progress-bar on matplotlib --dry-run --report totor.txt , I notice that the "Description" is included in the output,..

• isn't it a bit heavy ?
• isn't it hack surface exposure ?

but the needed info seems there, I presume

[ofek]

Locking API is coming, if you would like to make it go faster feel free to write a proposal & PR, or donate