David

@danhunsaker I guess we'll wait and see :crossed_fingers: I haven't been able to figure out what App Sail refers to, do you have a link?

@andreas-vester One option might be to: * Define mirrors in pyproject.toml with paths like `https://source.private` * Modify your `/etc/hosts` to map the fake domain `source.private` to the appropriate IP address...

> I don't want to put any internal (or fake) server names in `pyproject.toml`. If I commit this to GitHub and somebody clones the repo, those server names wouldn't be...

Personally, I would prefer the options to be in a dropdown menu and the buttons to be hidden.

https://pypi.python.org/pypi/ruamel.yaml is an alternate implementation that specifically covers this use-case

@prikhi Thanks so much for all your maintenance effort, it really makes a difference. Based on your feedback on this ticket, I downloaded `Pencil-2.0.21-win32.installer.exe` from the releases page and it...

Having the same issue on Windows 7 SP1 / Firefox 46.0.1 / Pencil 2.0.18.20160314

It appears that this user story (Python developer wanting to hash their dependencies) is addressed by [pipenv](https://github.com/pypa/pipenv), a distinct PyPA project. See https://docs.pipenv.org/basics/#pipfile-lock-security-features for details. So I'm closing this issue...

See the proposal for a `pip freeze -p pipfile` command at https://github.com/pypa/pipfile#pip-integration-eventual , which directly solves this user story for pip. I've reopened this ticket because it is clearly on...

I've updated the ticket description with the proposed solution (as I understand it). Note that Pipfile-based dependencies are usable today if you use pipenv.