mentorship-backend icon indicating copy to clipboard operation
mentorship-backend copied to clipboard

Improve way of managing python dependencies

Open isabelcosta opened this issue 5 years ago • 3 comments
trafficstars

Description

As a developer, I need a more flexible and easy to manage way of managing python dependencies, so that I can update in a more reliable way the packages that are being flagged as security risks and ease development to coder contributors.

A few options are:

  • https://github.com/jazzband/pip-tools
  • https://python-poetry.org/
  • feel free to suggest more...

Since the beginning of the project I have been installing and just do pip freeze > requirements.txt this can make me install unrequired packages because of something I might install into the environment which is not necessary. It feels clumsy, I know we can have a better way to do this.

Acceptance Criteria

Update [Required]

  • [ ] Adopt a way of managing python dependencies
  • [ ] Discuss with the community the tooling selected
  • [ ] Document the selected way on README

Definition of Done

  • [ ] All of the required items are completed.
  • [x] Approval by 1 mentor.

Estimation

5 hours

isabelcosta avatar Jul 20 '20 19:07 isabelcosta

I very much agree with this @isabelcosta. I've been thinking about creating a PR about integrating Poetry since like...april?, but looks like my laziness won in the end. Nevertheless, I'd like to work on this issue.

bartekpacia avatar Aug 04 '20 18:08 bartekpacia

I see you are really eager to work on this 😅 I can assign this to you. The solution should be the simplest and easy for newcomers to start working on.

isabelcosta avatar Aug 04 '20 18:08 isabelcosta

Currently I'm blocked because of #711

bartekpacia avatar Aug 05 '20 15:08 bartekpacia