Discussion about dependency management

[nifadyev]

Let's discuss improvements and changes related to dependency management.
If you have any tool, package, config, or script to share, feel free to suggest it into this discussion.

[nifadyev]

Poetry is a good tool compared to pip but it has some major disadvantages:

• Not PEP compatible pyproject.toml
• Difficulties with Docker installation. There are multiple installation options but none of them is canonical
• 600+ issues in Github. Package is widely used, sure, but issues number is big enough
• Devs previously pushed breaking changes as patch version. It changed the format of critical files and broke CI pipelines. Also, they randomly raised exception in CI to force an upgrade from v1 to v2. Such situation could happen again and lead to downtime

Maybe some alternatives (pipenv, pdm, uv) should be considered as a replacement.

[batazor]

I prefer to use uv because it replicates the pip syntax: pip <command> -> uv pip <command> while being noticeably faster and actively developing, e.g. support for workspaces, running a package without installation, python version control

my proof:

• https://github.com/astral-sh/uv/blob/main/BENCHMARKS.md
• https://astral.sh/blog/uv-unified-python-packaging

[nifadyev]

@batazor , uv looks promising but don't you think it is not production ready? Have you used it on production? ruff became stable after some years of "beta" but linter/formatter is not so critical as dependency manager and command executor. We should be extra cautious with such crucial project component

[batazor]

@nifadyev You can read about compatibility with pip here

In the first versions, some flags were missing, but currently, all major flags and parameters are supported

[nifadyev]

Thanks, @batazor , uv is evolving very fast. I've read the article about compatibility, LGTM
I would suggest trying uv on some low/middle priority internal projects and then expand its usage to more complex internal projects. And only after successful migration to uv on our project, we may start using it on client projects.

[grigoryvp]

uv seems to be the most promising dependency management tool of them all right now

[nifadyev]

Above is PR with ability to choose package manager on project initialization. Probably it is a suitable option. Please review and share your opinions.