NabuCasa / pycognito

Python library for using AWS Cognito. With support for SRP.
Apache License 2.0
129 stars 39 forks source link

Timeout resolving pycognito dependency with poetry #212

Open hardbyte opened 1 year ago

hardbyte commented 1 year ago

Using poetry I'm seeing poetry fail to resolve (taking hours on Github Actions) when pycognito is in the dependency list.

It appears to be because the dependency specifier boto3>=1.10.49 includes many hundreds of released versions of boto3, poetry has to download the individual packages to inspect them to work out the transitive dependencies. This isn't an issue with your dependency specification as there shouldn't be any requirement to only support the most recent 10's of releases. But on the off chance this helps other users, I'm going to restrict my own project to require a more recent version of boto3 to work around poetry.