Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

dparse2

Package Overview
Dependencies
Maintainers
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

dparse2

A parser for Python dependency files

  • 0.7.0
  • PyPI
  • Socket score

Maintainers
3

================= Dependency Parser

A parser for Python manifests and dependency files now at https://github.com/nexB/dparse2

Originally at https://github.com/pyupio/dparse

This is a maintained fork by some of the contributors since upstream stopped updating this.

Supported Files

+------------------+------------+ | File | parse | +==================+============+ | conda.yml | yes | +------------------+------------+ | tox.ini | yes | +------------------+------------+ | Pipfile | yes | +------------------+------------+ | Pipfile.lock | yes | +------------------+------------+


Installation


To install dparse2, run:

.. code-block:: console

$ pip install dparse2

If you want to update Pipfiles, install the pipenv extra:

.. code-block:: console

$ pip install dparse2[pipenv]

Usage


To use dparse2 in a Python project::

from dparse2 import parse
from dparse2 import filetypes

content = """
South==1.0.1 --hash=sha256:abcdefghijklmno
pycrypto>=2.6
"""

df = parse(content, file_type=filetypes.requirements_txt)

print(df.json())


{
  "file_type": "requirements.txt",
  "content": "\nSouth==1.0.1 --hash=sha256:abcdefghijklmno\npycrypto>=2.6\n",
  "path": null,
  "sha": null,
  "dependencies": [
    {
      "name": "South",
      "specs": [
        [
          "==",
          "1.0.1"
        ]
      ],
      "line": "South==1.0.1 --hash=sha256:abcdefghijklmno",
      "source": "pypi",
      "meta": {},
      "line_numbers": null,
      "index_server": null,
      "hashes": [
        "--hash=sha256:abcdefghijklmno"
      ],
      "dependency_type": "requirements.txt",
      "extras": []
    },
    {
      "name": "pycrypto",
      "specs": [
        [
          ">=",
          "2.6"
        ]
      ],
      "line": "pycrypto>=2.6",
      "source": "pypi",
      "meta": {},
      "line_numbers": null,
      "index_server": null,
      "hashes": [],
      "dependency_type": "requirements.txt",
      "extras": []
    }
  ]
}

This tool supports Python 3.6 and up. Older version support older Python versions

========== Changelog

0.7.0

  • Use packvers instead of packaging

0.6.1

  • Use non-deprecated ConfigParser method

0.6.0

  • Fork from upstream dparse that is unresponsive
  • Rename package to dparse2
  • Fix security issue for GHSL-2021-111https://github.com/pyupio/dparse/issues/50
  • Drop support for Python < 3.6 and add support for up to 3.10
  • Drop support for updating requirements files
  • format code with black, sort imports

0.5.1 (2020-04-26)

  • Fixed package metadata removing 2.7 support
  • Install pipenv only when asked for with extras

0.5.0 (2020-03-14)

A bug with this package allows it to be installed on Python 2.7 environments, even though it should not work on such version. You should stick with version 0.4.1 version instead for Python 2.7 support.

  • Dropped Python 2.7, 3.3, 3.4 support
  • Removed six package
  • Removed pinned dependencies of tests
  • Dropped setup.py tests support in favor of tox

0.4.1 (2018-04-06)

  • Fixed a packaging error.

0.4.0 (2018-04-06)

  • pipenv is now an optional dependency that's only used when updating a Pipfile. Install it with dparse[pipenv]
  • Added support for invalid toml Pipfiles (thanks @pombredanne)

0.3.0 (2018-03-01)

  • Added support for setup.cfg files (thanks @kexepal)
  • Dependencies from Pipfiles now include the section (thanks @paulortman)
  • Multiline requirements are now ignored if they are marked
  • Added experimental support for Pipfiles

0.2.1 (2017-07-19)

  • Internal refactoring

0.2.0 (2017-07-19)

  • Removed setuptools dependency

0.1.1 (2017-07-14)

  • Fixed a bug that was causing the parser to throw errors on invalid requirements.

0.1.0 (2017-07-11)

  • Initial, not much to see here.

Keywords

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc