poetry-audit-plugin icon indicating copy to clipboard operation
poetry-audit-plugin copied to clipboard

Ignore dev group dependencies

Open picogeyer opened this issue 1 year ago • 1 comments

Currently dependencies from dev and other optional poetry groups are included in poetry audit output and there does not seem to be a way to remove them.

I discovered this when I added pytest as an optional dev dependency to my project. I think poetry-audit should either ignore extra dependency groups by default or provide an option to do so like poetry show does: --without=dev

picogeyer avatar Dec 19 '23 13:12 picogeyer

+1 I have the same feelings about it. We have a dev dependency moto which has its sub-dependency outdated. And it's causing our pipelines to fail, but the dev environment shouldn't block us. I would be happy to see the ignore-group option to prevent certain groups from being audited.

iam-sayco avatar Jun 10 '24 07:06 iam-sayco