Automatically mirroring all dependencies

[qomhmd]

Is there a way to automatically mirror dependencies (and dependencies of dependencies and so on) of allowlisted packages?

[cooperlees]

No. But I am open to someone including a resolver library into a plugin, it's just a LOT ot work.

Today for that I recommend you use a venv + pip. Something like:

python3 -m venv --upgrade-deps /tmp/p
/tmp/p/bin/pip install $PACKAGE
/tmp/p/bin/pip freeze

Then use the output of pip freeze to see all the packages you need (minus pip and probably setuptools) in your allow list.