
Product
Secure Your AI-Generated Code with Socket MCP
Socket MCP brings real-time security checks to AI-generated code, helping developers catch risky dependencies before they enter the codebase.
Having all packages in the same repository make it much easier to develop, share, reuse, and refactor code. Building and publishing the packages should not be done manually because it is time-consuming and may be frustrated if the projects are depending on each other. pbt is a tool designed to help make the process easier and faster. It supports building, installing, and updating versions of your packages and their dependencies consistently. It also provides utility commands to help you work with your packages in multi-repositories as if you are working with a monorepo.
pip install -U pbt
Note: currently, pbt supports Python packages configured with Poetry (an awesome dependency management that you should consider using).
Assuming that you organized your packages to different sub-folders, each has their own project configuration file (e.g., pyproject.toml
). You can run the following commands in the root directory (containing your projects). Note: pbt will discover the project based on the project name in its configuration file not the folder name.
You can also discover the list of commands by running pbt --help
. Many commands have an option --cwd
to override the current working directory.
pbt list [-d]
-d
, --dev
: Whether to print to the local (inter-) dependenciespbt install [-d] [-v] [-p <package>]
-d
: also install dev-dependencies of the package-v
: verbose-p
: specify the package we want to build, if empty build all packages.If you have encounter some errors during the installation, you can checkout the pyproject.failed.toml
file that is generated by pbt in ./cache/<package>
folder (relative to your current working directory). For example, on M1 chip, if your python version is ^3.8
, you can't use the newer scipy (e.g., >1.8 as it requires python <3.11
), poetry lock chooses to use an old version 1.6.0
, which typically can't build on M1 due to no pre-built numpy for it.
pbt update
pbt clean [-p <package>]
-p
: specify the package we want to build, if empty build all packages.pbt git clone --repo <repo_url>
Clone a repository and check out all of its submodules to their correct branches that we were using last time.
pbt git update
Pull latest changes from the repository, and check out all of its submodules to their correct branches.
FAQs
A build tool for multiple Python projects in a single repository
We found that pbt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket MCP brings real-time security checks to AI-generated code, helping developers catch risky dependencies before they enter the codebase.
Security News
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
Research
Security News
Socket’s Threat Research Team has uncovered 60 npm packages using post-install scripts to silently exfiltrate hostnames, IP addresses, DNS servers, and user directories to a Discord-controlled endpoint.