search

aboutcode-org / dependency-inspector

A general purpose, mostly universal software package dependency resolver.
Apache License 2.0
2 stars 2 forks source link

Create Python frozen requirements file #8

Closed pombredanne closed 4 months ago

pombredanne commented 5 months ago

We need to create Python frozen requirements file: this may need a specific convention as a requirements file is not your typical lockfile-only format. We likely want to use using pip freeze.

pombredanne commented 4 months ago

For info, the lockfile is named requirements.deplock

keshav-space commented 4 months ago

As suggested by @pombredanne, use pip inspect instead of pip freeze. https://github.com/nexB/dependency-inspector/pull/25

pip freeze does not include the relationship between dependencies. Instead, use pip inspect to get the JSON report of the Python environment, which includes the dependency relationships, and store it in the pip-inspect.deplock file.