mentorship-backend
mentorship-backend copied to clipboard
Improve way of managing python dependencies
Description
As a developer, I need a more flexible and easy to manage way of managing python dependencies, so that I can update in a more reliable way the packages that are being flagged as security risks and ease development to coder contributors.
A few options are:
- https://github.com/jazzband/pip-tools
- https://python-poetry.org/
- feel free to suggest more...
Since the beginning of the project I have been installing and just do pip freeze > requirements.txt this can make me install unrequired packages because of something I might install into the environment which is not necessary. It feels clumsy, I know we can have a better way to do this.
Acceptance Criteria
Update [Required]
- [ ] Adopt a way of managing python dependencies
- [ ] Discuss with the community the tooling selected
- [ ] Document the selected way on README
Definition of Done
- [ ] All of the required items are completed.
- [x] Approval by 1 mentor.
Estimation
5 hours
I very much agree with this @isabelcosta. I've been thinking about creating a PR about integrating Poetry since like...april?, but looks like my laziness won in the end. Nevertheless, I'd like to work on this issue.
I see you are really eager to work on this 😅 I can assign this to you. The solution should be the simplest and easy for newcomers to start working on.
Currently I'm blocked because of #711