![Oracle Drags Its Feet in the JavaScript Trademark Dispute](https://cdn.sanity.io/images/cgdhsj6q/production/919c3b22c24f93884c548d60cbb338e819ff2435-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
|
__| _ _ __ __ _ _
/ | |/ |/ \_/ / \_/ |/ |
\_/|_/|__/|__/ \___/\__/ | |_/
/|
\|
depcon
is a tool designed to simplify the migration of dependency specifications from traditional requirements.txt
, requirements.in
, requirements-dev.txt
, and requirements-dev.in
files into the modern pyproject.toml
format created using the uv
or hatch
tools. This allows for a streamlined, standardized, and more maintainable approach to dependency management in Python projects.
Traditional requirements.txt
files are widely used to manage dependencies in Python projects, but they have limitations:
pip-tools
.By migrating dependencies to pyproject.toml
, you can leverage a unified and declarative format for dependency and project configuration. This format is now the standard for Python packaging and works seamlessly with tools like uv
.
You can install depcon
using either pipx
or uv
:
# Install with pipx
pipx install depcon
# Install with uv
uv tool install depcon
You can also run it directly with uvx
without installing:
uvx depcon
depcon
integrates into a workflow involving uv
for project initialization and management. Here’s how you can use it:
Workflow Overview
Start by creating a pyproject.toml file for your project using uv init:
uv init
This will create a pyproject.toml file with basic metadata for your project.
Run depcon to migrate dependencies from existing requirements files into your pyproject.toml file. For example:
depcon -r requirements.txt
or
depcon -r requirements.in
depcon -d requirements-dev.txt
or
depcon -r requirements.txt -d requirements-dev.txt
By default, depcon
will add dependencies to the [project.dependencies] section for base dependencies, and to [tool.uv.dev-dependencies] for development dependencies.
Once dependencies are migrated, sync and lock them with uv:
uv sync
This will resolve, install, and lock all dependencies into a uv.lock or requirements.lock file.
Additional Options
depcon -r requirements.in
-r
, --requirements
: Path to requirements.txt file-d
, --requirements-dev
: Path to requirements-dev.txt file-p
, --pyproject
: Path to target pyproject.toml file (default: ./pyproject.toml)-a
, --append
: Append to existing dependencies instead of overwriting them# Overwrite existing dependencies (default behavior)
depcon -r requirements.txt -d requirements-dev.txt -p pyproject.toml
# Append to existing dependencies
depcon -r requirements.txt -d requirements-dev.txt -p pyproject.toml --append
# Append only base requirements
depcon -r requirements.in -p pyproject.toml --append
# Append only dev requirements
depcon -d requirements-dev.txt --append
Contributions are welcome! If you’d like to improve depcon or add features, feel free to submit an issue or pull request on the GitHub repository.
depcon is licensed under the MIT License. See the LICENSE file for details.
FAQs
Convert requirements files to pyproject.toml format used in uv
We found that depcon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.