Environment

• PIP Chill version:
• Python version: all
• Operating System: Linux

Description

CI is currently done in Bionic. The latest LTS is Focal.

What I Did

Description

The current version doesn't list the "pip" and "pip-chill" packages. An --all version should.

Environment

• PIP Chill version: 1.0.1
• Python version: 3.9.6
• Operating System: Windows 10 Pro 21H1

Description

I run pip-chill in a Python virtual environment, but it seems to output the results of the Python global environment.

What I Did

# activate a Python environment
.\venv\Scripts\activate

# install some Python packages
pip install python-docx
pip install docx2python

# run pip-chill in a Python virtual environment
pip-chill
# output:
# pip-autoremove==0.9.1
# pip-chill==1.0.1

# run pip list in a Python virtual environment
pip list
# output:
# Package        Version
# -------------- -------
# docx2python    1.27.1
# lxml           4.6.3
# pip            21.3.1
# pip-autoremove 0.9.1
# pip-chill      1.0.1
# python-docx    0.8.11
# setuptools     57.0.0

# deactivate the Python environment
deactivate

# run pip-chill in the Python global environment
pip-chill
# output:
# pip-autoremove==0.9.1
# pip-chill==1.0.1

# run pip list in the Python global environment
# Package        Version
# -------------- -------
# pip            21.3.1
# pip-autoremove 0.9.1
# pip-chill      1.0.1
# setuptools     57.4.0

Environment

• PIP Chill version:current
• Python version: all
• Operating System: macOS

Description

CI on macOS in TravisCI doesn't seem to be running

Description

It'd be nice to have a --verbose option that would list all packages, dependencies included, but with the dependencies commented out (along with a second comment, for the reason they were commented out).

Environment

• PIP Chill version: 1.0.1
• Python version: 3.9.0
• Operating System: OSX

Description

I'm using pip-chill on a django project to automate requirements.txt generation (without dependencies) and deploy, but pip-chill doesn't recognize django as top-level installed package.

What I Did

Running pip freeze I can see that Django==3.2 is installed correctly, but running pip-chill the django dependency is not included in the output.

• PIP Chill version: 0.1.6
• Python version: 3.6.x
• Operating System: N/A

Description

PyPI doesn't know the package works with Python 3.6

What I Did

Checked the PyPI page at https://pypi.python.org/pypi/pip-chill

Description

While investigating #49 and #58, it became evident an option to list (and, therefore, pin the version) of a package that's not in the minimal set of requirements would be useful. The example in question was Django, but the same applies to many other packages that depend on others where you would want to pin the "main" package as well as the minimal set of requirements.

• PIP Chill version: N/A
• Python version: N/A
• Operating System: N/A

Description

When doing a pip-chill, we output the version of the installed packages that don't depend on other packages. We should also be able to list the hashes, to have further assurance we are getting the same versions.

What I Did

N/A

• PIP Chill version: 0.1.5
• Python version: 2.7
• Operating System: Linux

Description

When running pip-chill after installing pandas and jupyter, pkg-resources is listed as version 0.0.0

• PIP Chill version: 0.1.8
• Python version: 3.7.3
• Operating System: Arch Linux

Description

pip-chill picks up site-packages even if the virtualenv it was installed and executed in specifies --no-site-packages.

What I Did

virtualenv --no-site-packages venv
source venv/bin/activate
pip install -r requirements.txt
pip install pip-chill
pip-chill  # this shows site-packages like youtube-dl etc.

EDIT: Looks like --no-site-packages is the default now, so pip-chill installed in a virtualenv should never pick up packages from outside the virtualenv.

Environment

• PIP Chill version: 1.0.1
• Python version: 3.10.6
• Operating System: WSL

Description

The "Installed as dependency for" is not sorted consistently, resulting in unnecessary diffs like:

-# python-dateutil==2.8.2 # Installed as dependency for matplotlib, pandas
+# python-dateutil==2.8.2 # Installed as dependency for pandas, matplotlib

Ideally these would be sorted (alphabetically?) so that the output is more consistent.

What I Did

pip-chill --verbose

Environment

• PIP Chill version: 1.0.1
• Python version: 3.8.16
• Operating System: Ventura

Description

pip-chill outputs
pip-chill==1.0.1
for example.

Today, I'm then reading the file in and using python to munge the versions into
pip-chill>=1.01,<2
that way I pin the MAJOR (API stays compatible) but get new features and bug fixes (provided the package is property adhering to semver)

What I Did

Something like

                    name, version = re.findall(r"(.*)==(\d.*)", pin)[0]
                    major = version.split(".")[0]
                    package = f"{name}>={version},<{int(major) + 1}"

Just be cool if this was an option in the tool instead of post processing.

• PIP Chill version: 0.1.7
• Python version: 2.7.12
• Operating System: N/A

Description

Great job on the tool, makes pip dependency management make a little more sense.

Since pip-chill is a library built on top of pip, it doesn't make sense for it to be ignored when doing pip-chill. Just like pip-tools, it should be on the environment requirements. At least should be an option if not a default.

Environment

• PIP Chill version: 0.1.8
• Python version: 3.x
• Operating System: any

Description

Pip-chill may mask click as a false dependency if if's installed on top of a previous virtual environment

What I Did

$ python3 -m venv env
$ . env/bin/activate
$ pip install click
...
$ pip freeze
Click==7.0
pkg-resources==0.0.0
$ pip install pip-chill
pip-chill==0.1.8
$ pip-chill -v
pip-chill==0.1.8
# click==7.0 # Installed as dependency for pip-chill

Environment

• PIP Chill version: 1.0.1
• Python version: all
• Operating System: Linux

Description

CircleCI integration is failing

Environment

• PIP Chill version: 1.0.1
• Python version: 3.10, 3.11 (Works in Python 3.9)
• Operating System: Windows 10 (Virtual Python environment and global packages)

Description

Describe what you were trying to get done. Do what the package provides.
Tell us what happened, what went wrong, and what you expected to happen. Installed pip-chill for Python 3.10 and 3.11 but could not get it to work.

What I Did

(virtual env) pip install pip-chill
(virtual env) pip-chill
(output) pip-chill==1.0.1

• PIP Chill version: 0.1.6
• Python version: 2.7.10
• Operating System: macOS High Sierra

Description

I installed a package from its git repo URL, but pip-chill lists only the package name as if it's available on PyPI.

Hi!
I really like what your package does and have linked it as a recommended tool on the README of my own package called pip-date. Please check it out and feel free to link back if you like it!

Environment

• PIP Chill version: Latest
• Python version: Multiple (3.6, 3.7, 3.8)
• Operating System: Linux (or any OS really)

Description

I have some packages installed at the user level in multiple versions of python, with different packages and some of the same installed in each. I want to make sure that when I run pip-chill it is for a particular version of python I have installed. With pip I do this by running it as a module python3.7 -m pip ... . Would it be possible to do this with pip-chill? Effectively doing python3.7 -m pip-chill ... and get the pip-chill output of that package list, guaranteeing its for the packages installed in python3.7.

Yes I know virtual environments are better for managing packages, but these were installed and set up before I got in the habit of virtual environments.

What I Did

N/A

Thanks

It would be nice, if pip-chill could output a list of all packages if they were upgraded to the latest available version.

You can achieve the same by using pip-chill --no-version, upgrading and then outputting the list of installed packages.
But I think having a command that just displays the updated requirements would be cool.

Environment

• PIP Chill version:1.0.0
• Python version: 3.8,6
• Operating System: Windows 10 Pro X64

Description

According to the main line "Make requirements with only the packages you need" pip-chill should not be listed when running pip-chill to not bloat the requirements.txt with this module. It is not needed in the virtual environment except to list the parent modules needed to install.

What I Did

pip-chill > .\requirements.txt

Still shows pip-chill==1.0.0 in the output. I have to install pip-chill in the virtual environment then I get the packages for the virtual environment I'm working in. If I install it globally and activate the virtual environment and run pip-chill I get the packages in the global environment.

Environment

• PIP Chill version: dev
• Python version: 3.12 but does not matter
• Operating System: MacOS

Description

This is a followup from PR #75.

Test fails if a package with pip as a dependency is installed in the test environment.

What I Did

Checkout head of PR #75.

git clone https://github.com/MarcinKonowalczyk/pip-chill
cd pip-chill
git checkout setuptools-req
# This commit does *NOT* have the fix anymore
git reset --hard e5f9e8e5885db617d5b0f23ed026ec9553fca707
# Make a venv and run test in
python -m venv venv
venv/bin/pip install -r requirements_dev.txt
venv/bin/pip install .
venv/bin/pytest # All good

Now let's install a package which depends on pip. I'm not picking on pip-autoremove here. It's just the package that i've noticed this behaviour with first.

venv/bin/pip install pip-autoremove
venv/bin/pytest # Fails

pytest output:

self = <tests.test_pip_chill.TestPip_chill testMethod=test_all>

    def test_all(self):
        packages, _ = pip_chill.chill(show_all=True)
        package_names = {package.name for package in packages}
        for package in ["pip-chill", "pip"]:
>           self.assertIn(package, package_names)
E           AssertionError: 'pip' not found in {'sphinx', 'ssort', 'nose', 'pip-autoremove', 'tox', 'coverage', 'watchdog', 'bumpversion', 'pip-chill', 'flake8', 'twine', 'bandit', 'pytest'}

tests/test_pip_chill.py:38: AssertionError

FAILED tests/test_pip_chill.py::TestPip_chill::test_all - AssertionError: 'pip' not found in {'sphinx', 'ssort', 'nose', 'pip-autoremove', 'tox', 'coverage', 'watchdog', 'bumpversion', 'pip-chill', 'flake8', 'twine', 'ba...

This happens because pip-autoremove depends on pip and so pip is put into dependencies.
The fact that the test asks for pip to be present in dept makes me think it ought to be special and always show up in top level. I think either 1) the test should change, 2) the behaviour of pip-chill should change or 3) this 'sharp corner'(?) should be better documented.

For reference, in #75 i've originally implemented option 2. It can be tried with:

git reset --hard 79705e0662ad625dc1d241a9a1c379d75d1d54a3
rm -rf venv # lets try in a fresh venv, just to be sure
python -m venv venv
venv/bin/pip install -r requirements_dev.txt
venv/bin/pip install .
venv/bin/pip install pip-autoremove
venv/bin/pytest # Now works

Here is the diff.

Environment

• PIP Chill version:
• Python version: 3.6+
• Operating System:

Description

When pip-chill ceases to support 3.5, we can replace the .format calls with f-strings

The sdist on PyPI isnt a proper sdist created by setup.py sdist. It isnt usable for packaging.

Environment

• PIP Chill version: N/A
• Python version: N/A
• Operating System: N/A

Description

Read-the-docs v: latest still has the old repo urls (pip_chill) everywhere that they were fixed in #56 so it looks like a new doc build needs to be triggered...

Thanks for sharing your code!

I've been looking back over the packaging PEPs lately, and came across the REQUESTED file specified in PEP376, which (in theory, and if I'm thinking about it correctly) should only be present as site-packages/*.dist-info/REQUESTED for the package set that pip-chill aims to report.

Might this be a better way to build up the chilled package list than the current dependency-checking approach?

There might even already be an API for this in packaging or importlib or whatever...I haven't looked yet.

Whenever possible I prefer python -m <package> over directly executing <package> on the command line. This ensures that you have the version of the package that corresponds to your Python installation, instead of whatever is on top of the path variable.

Examples include python -m virtualenv, python -m pip, python -m http.server, python -m cProfile, python -m snakeviz, etc.

It would be great if pip-chill also supported this. It's really easy, all that's needed is to add a __main__.py to the package, in a manner similar to this: jiffyclub/snakeviz@2fced2f#diff-5ea63581f9f31b064ad597564a2970012ab32af9fb7b6bf4593265ef9473c391.

• PIP Chill version: 0.1.7
• Python version: 2.7.15
• Operating System: Linux Mint 18.3 Cinnamon 64-bit

Description

pip-chill aborts with the error

File ".../lib/python2.7/site-packages/pip_chill/pip_chill.py", line 20, in chill
    for distribution in pip.get_installed_distributions():
AttributeError: 'module' object has no attribute 'get_installed_distributions'

which is apparently a new issue since pip 10. get_installed_distributions is no longer available.
I found a solution here:
https://stackoverflow.com/questions/49923671/are-there-any-function-replacement-for-pip-get-installed-distributions-in-pip?utm_medium=organic&utm_source=google_rich_qa&utm_campaign=google_rich_qa

and it works on my fork of pip-chill. I will submit it as a pull request.

This will help in finding the differences in the output of pip-chill -v command after installing new packages. Otherwise the diff checker tool finds too many differences. Please see screenshots below.

Environment

• PIP Chill version: 1.0.1
• Python version: 3.6.6
• Operating System: Linux Centos 7

Description

Hi. I've just installed your package and wanted to try in on a package so I tested it on:
https://github.com/gmarull/pyside2-boilerplate

But for reason there is no pyside2 dependency,
instead, it displays: app so that would be added into requirements.txt

I think that's not the right behavior?

My Steps

# Clone the project
$ git clone https://github.com/gmarull/pyside2-boilerplate 
$ cd pyside2-boilerplate

# Create venv and Install packages
$ python3.6 -m venv .venv
$ source .venv/bin/activate
$ pip install -e .
$ pip install -r requirements-dev.txt

# Install pip-chill and display results
$ pip install pip-chill
$ pip-chill -v
app==0.1.0
esbonio==0.9.0
flake8==4.0.1
pip-chill==1.0.1
pyinstaller==4.10
pyqt-distutils==0.7.3
rstcheck==3.3.1
sphinx-rtd-theme==1.0.0

$ pip-chill -v
app==0.1.0
esbonio==0.9.0
flake8==4.0.1
pip-chill==1.0.1
pyinstaller==4.10
pyqt-distutils==0.7.3
rstcheck==3.3.1
sphinx-rtd-theme==1.0.0
# alabaster==0.7.12 # Installed as dependency for sphinx
# altgraph==0.17.2 # Installed as dependency for pyinstaller
# appdirs==1.4.4 # Installed as dependency for esbonio
# babel==2.9.1 # Installed as dependency for sphinx
# certifi==2021.10.8 # Installed as dependency for requests
# charset-normalizer==2.0.12 # Installed as dependency for requests
# dataclasses==0.8 # Installed as dependency for pydantic
# docopt==0.6.2 # Installed as dependency for pyqt-distutils
# docutils==0.17.1 # Installed as dependency for rstcheck, sphinx, sphinx-rtd-theme
# idna==3.3 # Installed as dependency for requests
# imagesize==1.3.0 # Installed as dependency for sphinx
# importlib-metadata==4.8.3 # Installed as dependency for sphinx, pyinstaller, flake8
# jinja2==3.0.3 # Installed as dependency for sphinx
# markupsafe==2.0.1 # Installed as dependency for jinja2
# mccabe==0.6.1 # Installed as dependency for flake8
# packaging==21.3 # Installed as dependency for sphinx
# pycodestyle==2.8.0 # Installed as dependency for flake8
# pydantic==1.8.2 # Installed as dependency for pygls
# pyflakes==2.4.0 # Installed as dependency for flake8
# pygls==0.11.3 # Installed as dependency for esbonio
# pygments==2.11.2 # Installed as dependency for sphinx
# pyinstaller-hooks-contrib==2022.0 # Installed as dependency for pyinstaller
# pyparsing==3.0.7 # Installed as dependency for packaging
# pyside2==5.15.2.1 # Installed as dependency for app
# pyspellchecker==0.6.3 # Installed as dependency for esbonio
# pytz==2021.3 # Installed as dependency for babel
# requests==2.27.1 # Installed as dependency for sphinx
# shiboken2==5.15.2.1 # Installed as dependency for pyside2
# snowballstemmer==2.2.0 # Installed as dependency for sphinx
# sphinx==4.4.0 # Installed as dependency for esbonio, sphinx-rtd-theme
# sphinxcontrib-applehelp==1.0.2 # Installed as dependency for sphinx
# sphinxcontrib-devhelp==1.0.2 # Installed as dependency for sphinx
# sphinxcontrib-htmlhelp==2.0.0 # Installed as dependency for sphinx
# sphinxcontrib-jsmath==1.0.1 # Installed as dependency for sphinx
# sphinxcontrib-qthelp==1.0.3 # Installed as dependency for sphinx
# sphinxcontrib-serializinghtml==1.1.5 # Installed as dependency for sphinx
# typeguard==2.13.3 # Installed as dependency for pygls
# typing-extensions==4.1.1 # Installed as dependency for importlib-metadata, pydantic
# urllib3==1.26.8 # Installed as dependency for requests
# zipp==3.6.0 # Installed as dependency for importlib-metadata

In my REQUIREMENTS.txt file, one of the lines looks like this:

-e git+https://github.com/user/repo.git@commit_hash#egg=package_name

It is a package downloaded from a specific commit in a repo. pip freeze leaves this line intact, however pip-chill replaces it with:

package_name=dev

Could we perhaps have pip-chill ignore this line as well?

Thanks for this cool library!

• PIP Chill version: 0.1.7
• Python version: 3.6.2
• Operating System: Mac OSX

Description

Traceback:

Traceback (most recent call last):
  File "/usr/local/var/pyenv/versions/3.6.2/bin/pip-chill", line 7, in <module>
    from pip_chill.cli import main
  File "/usr/local/var/pyenv/versions/3.6.2/lib/python3.6/site-packages/pip_chill/__init__.py", line 3, in <module>
    from .pip_chill import chill
  File "/usr/local/var/pyenv/versions/3.6.2/lib/python3.6/site-packages/pip_chill/pip_chill.py", line 7, in <module>
    from utils import Distribution
ModuleNotFoundError: No module named 'utils'

What I Did

I get the above error when I install pip-chill and run it via the command line. I believe the issue is that I'm running Python 3 and the line from utils import Distribution is a relative import. I believe it should be from .utils import Distribution.

I think the reason it's passing the test suite is that the tox.ini file overrides the PYTHONPATH via setenv = PYTHONPATH = {toxinidir}:{toxinidir}/pip_chill. This makes utils.py available as a module, but that isn't done when you install pip-chill via pip in Python3. I'm not aware of any reason to override the PYTHONPATH - please let me know if I'm missing something!

I'll create a quick PR that I believe should fix the issue.

Environment

• PIP Chill version: ALL
• Python version: ALL
• Operating System: ALL (but mostly Unix-like)

Description

The Makefile comes with too many PHONY targets that don't need to be phony, and a couple that are completely obsolete. It's due for an overhaul.

Environment

• PIP Chill version: 1.0.3
• Python version: 3.12.0
• Operating System: macos

Description

Installing pip-chill in a fresh venv companies about the lack of pkg_resources. Works after pip install setuptools. I believe that its because setuptools is no longer added to a virtual environment by default...?

Traceback (most recent call last):
  File "~/.pyenv/versions/my-venv/bin/pip-chill", line 5, in <module>
    from pip_chill.cli import main
  File "~/.pyenv/versions/3.12.0/envs/my-venv/lib/python3.12/site-packages/pip_chill/__init__.py", line 3, in <module>
    from .pip_chill import chill
  File "~/.pyenv/versions/3.12.0/envs/my-venv/lib/python3.12/site-packages/pip_chill/pip_chill.py", line 4, in <module>
    import pkg_resources
ModuleNotFoundError: No module named 'pkg_resources'

Short-term solution would be to add setuptools as a dependency(?), but longer-term maybe worth switching to importllib.resources (and importlib_resources backport) just like setuptools reccomends?

Hi 👊

This is my first visit to this fine repo, but it seems you have been working hard to keep all dependencies updated so far.

Once you have closed this issue, I'll create seperate pull requests for every update as soon as I find one.

That's it for now!

Happy merging! 🤖

Environment

• PIP Chill version: 1.0.1
• Python version: 3.8.10
• Operating System: Ubuntu 20.04.4 LTS on WSL

Description

what happened: does not list a manually installed package if said package is a dependency of another manually installed package. e.g., mutagen is a dependency of r128gain. pip install r128gain mutagen && pip-chill --no-chill only shows r128gain. (i guess according to the project readme this is correct but it would be nice to get a list of all manually installed packages, whether they are dependencies of other manually installed packages or not)

what i expected: should also show mutagen

• PIP Chill version: N/A
• Python version: N/A
• Operating System: N/A

Description

Pip can verify package hashes. It'd be useful to be able to output hashes of installed packages so we can download precise versions of the packages we care about.

Environment

• PIP Chill version: ALL
• Python version: ALL
• Operating System: ALL

Description

While applying fixes, I accidentally broke version 1.0.2 even after running all included tests - the tests don't cover the --verbose methods.