Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

poetry-stickywheel-plugin

Package Overview
Dependencies
Maintainers
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

poetry-stickywheel-plugin

  • 0.2.0
  • PyPI
  • Socket score

Maintainers
1

Poetry StickyWheel Plugin

A poetry plugin to pin version dependencies when building packages with local folder dependencies.

🛠 Installing

poetry self add poetry-stickywheel-plugin

📚 Help

This plugin will rewrite folder dependencies in your poetry projects dependencies with version dependencies.

The version will be extracted from the dependencies pyproject.toml and applied as a semver match.

Assuming a pyproject.toml such as:

[tool.poetry]
name = "a"
version = "0.1.0"
description = ""
authors = []
readme = "README.md"

[tool.poetry.dependencies]
b = {path = "../b", develop = true}

and the dependency pyproject.toml

[tool.poetry]
name = "b"
version = "1.2.3"
description = ""
authors = []
readme = "README.md"

the dependency will be rewritten as if it had been defined as:

b = "^1.2.3"

Configuration

You can define a section in your pyproject.toml file named tool.stickywheel, to configure various options.

Dependency constraint strategy

The default strategy is semver (described in the "Help" section above), but there are other choices:

strategyversionresult
semver1.2.3^1.2.3
minimum1.2.3>=1.2.3
exact1.2.31.2.3

To override the default, add strategy to the configuration. For example:

[tool.stickywheel]
strategy = "exact"

⚖️ Licence

This project is licensed under the MIT licence.

All documentation and images are licenced under the Creative Commons Attribution-ShareAlike 4.0 International License.

📝 Meta

This project uses Semantic Versioning.

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc