this post was submitted on 08 Jul 2024
73 points (92.9% liked)

Python

6207 readers
12 users here now

Welcome to the Python community on the programming.dev Lemmy instance!

πŸ“… Events

October 2023

November 2023

PastJuly 2023

August 2023

September 2023

🐍 Python project:
πŸ’“ Python Community:
✨ Python Ecosystem:
🌌 Fediverse
Communities
Projects
Feeds

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] ZephyrXero@lemmy.world 43 points 2 months ago (1 children)

Having more than one obvious way is unpythonic

[–] sugar_in_your_tea@sh.itjust.works 14 points 2 months ago (3 children)

Unfortunately, pip, the obvious way, kind of sucks. So I use poetry, which seems to work nicely.

[–] proton_lynx@lemmy.world 8 points 2 months ago (1 children)

I'm using Poetry as well. But I really hope Rye works out so we can finally end this madness.

[–] chaospatterns@lemmy.world 4 points 2 months ago (3 children)

Interesting. I just learned about Rye today. Has anybody tried it? Does it live up to the promise?

[–] FizzyOrange@programming.dev 4 points 2 months ago

Haven't tried Rye but I have used uv (which Rye uses to replace pip). Pip install time went down from 58s to 7s. Yes really. Python is fucking slow!

[–] NostraDavid@programming.dev 2 points 2 months ago

I tried it a little - being able to run rye sync and not even having to worry about Python versioning is sooooo nice.

[–] anzo@programming.dev 1 points 2 months ago

Check "uv". Builds on top, is coming good.

[–] richieadler@lemmy.myserv.one 6 points 2 months ago (1 children)

... except for the part where the dependency definition doesn't follow the latest approved PEP, and the default constraint with ^ add an upper limit that causes problems.

I moved to PDM.

[–] sugar_in_your_tea@sh.itjust.works 5 points 2 months ago (1 children)

Eh, by the time I get everyone on board and convert all of our repos, poetry will probably have support for the latest PEP.

[–] richieadler@lemmy.myserv.one 2 points 2 months ago (1 children)

Given the glacial pace I've been seeing, I would't be so sure... But understandable if you have many repos and need to reach consensus.

You can reduce some impacts adding explicit >= constraints instead of ^.

The thing is, things are working reasonably well right now, so updating to be in sync with the latest PEP isn't super impactful, whereas switching from requirements.txt -> poetry and pyproject.toml was a big change. So we'll probably switch eventually, but since we have over a dozen repos and several teams across timezones, it isn't a priority.

I'll certainly take a look though.

[–] SandbagTiara2816@lemmy.dbzer0.com 4 points 2 months ago* (last edited 2 months ago) (1 children)

Wait, what’s wrong with pip?

(Disclaimer: I grade my Python proficiency slightly above beginner. I used it for some research in college and grad school, and I’ve made a few helpful scripts at work, but I am not anything approaching an expert)

[–] sugar_in_your_tea@sh.itjust.works 13 points 2 months ago (1 children)

It does its job well, but it doesn't do much more than that.

The main workflow w/ Pip is:

  1. install whatever you need to get your app working
  2. pip freeze > requirements.txt so the next person can just pip install -r requirements.txt instead of figuring out the requirements
  3. either edit requirements.txt manually to do updates, or pip freeze again later

There are some issues with this:

  • dependencies that are no longer needed tend to stick around since they're in the requirements.txt
  • updating dependencies is a manual process and pretty annoying, especially when different packages have different dependencies
  • requirements.txt doesn't have any structure, so to do something like separating dev vs prod dependencies, you need two (or more) requirements.txt files

It's totally fine for one-off scripts and whatnot, but it gets pretty annoying when working across multiple repositories on a larger project (i.e. what I do at work with microservices).

Poetry improves this in a few ways:

  • poetry.lock - similar to requirements.txt, in that it locks all dependencies to specific versions
  • pyproject.toml - lists only your direct dependencies and certain exceptions (i.e. if you want to force a specific dependency version)
  • package groups - we tend to have local (linters and whatnot), test (deps for unit tests), and the default group (prod deps), so you can install only what you need (e.g. our CI uses test, prod uses no groups, and local uses everything)

There's a simple command to update all dependencies, and another command to try to add a dependency with minimal impact. It makes doing package updates a lot nicer, and I can easily compare direct dependencies between repositories since there's minimal noise in the pyproject.toml (great when doing bulk updates of some critical dependency).

TL;DR - pip is fine for small projects, alternatives are nice when dealing with large, complex projects because it gives you nicer control over dependencies.

Good to know, thank you for educating me!