Dependency Parser
A parser for Python manifests and dependency files now at https://github.com/nexB/dparse2
Originally at https://github.com/pyupio/dparse
This is a maintained fork by some of the contributors since upstream stopped updating this.
Supported Files
File |
parse |
|---|---|
conda.yml |
yes |
tox.ini |
yes |
Pipfile |
yes |
Pipfile.lock |
yes |
Installation
To install dparse2, run:
$ pip install dparse2
If you want to update Pipfiles, install the pipenv extra:
$ pip install dparse2[pipenv]
Usage
To use dparse2 in a Python project:
from dparse2 import parse
from dparse2 import filetypes
content = """
South==1.0.1 --hash=sha256:abcdefghijklmno
pycrypto>=2.6
"""
df = parse(content, file_type=filetypes.requirements_txt)
print(df.json())
{
"file_type": "requirements.txt",
"content": "\nSouth==1.0.1 --hash=sha256:abcdefghijklmno\npycrypto>=2.6\n",
"path": null,
"sha": null,
"dependencies": [
{
"name": "South",
"specs": [
[
"==",
"1.0.1"
]
],
"line": "South==1.0.1 --hash=sha256:abcdefghijklmno",
"source": "pypi",
"meta": {},
"line_numbers": null,
"index_server": null,
"hashes": [
"--hash=sha256:abcdefghijklmno"
],
"dependency_type": "requirements.txt",
"extras": []
},
{
"name": "pycrypto",
"specs": [
[
">=",
"2.6"
]
],
"line": "pycrypto>=2.6",
"source": "pypi",
"meta": {},
"line_numbers": null,
"index_server": null,
"hashes": [],
"dependency_type": "requirements.txt",
"extras": []
}
]
}
This tool supports Python 3.6 and up. Older version support older Python versions
Changelog
0.7.0
Use packvers instead of packaging
0.6.1
Use non-deprecated ConfigParser method
0.6.0
Fork from upstream dparse that is unresponsive
Rename package to dparse2
Fix security issue for GHSL-2021-111https://github.com/pyupio/dparse/issues/50
Drop support for Python < 3.6 and add support for up to 3.10
Drop support for updating requirements files
format code with black, sort imports
0.5.1 (2020-04-26)
Fixed package metadata removing 2.7 support
Install pipenv only when asked for with extras
0.5.0 (2020-03-14)
A bug with this package allows it to be installed on Python 2.7 environments, even though it should not work on such version. You should stick with version 0.4.1 version instead for Python 2.7 support.
Dropped Python 2.7, 3.3, 3.4 support
Removed six package
Removed pinned dependencies of tests
Dropped setup.py tests support in favor of tox
0.4.1 (2018-04-06)
Fixed a packaging error.
0.4.0 (2018-04-06)
pipenv is now an optional dependency that’s only used when updating a Pipfile. Install it with dparse[pipenv]
Added support for invalid toml Pipfiles (thanks @pombredanne)
0.3.0 (2018-03-01)
Added support for setup.cfg files (thanks @kexepal)
Dependencies from Pipfiles now include the section (thanks @paulortman)
Multiline requirements are now ignored if they are marked
Added experimental support for Pipfiles
0.2.1 (2017-07-19)
Internal refactoring
0.2.0 (2017-07-19)
Removed setuptools dependency
0.1.1 (2017-07-14)
Fixed a bug that was causing the parser to throw errors on invalid requirements.
0.1.0 (2017-07-11)
Initial, not much to see here.
Metadata
Release files for dparse2 0.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| dparse2-0.7.0.tar.gz | 9.9 kB | Without provenance | Details for dparse2-0.7.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| dparse2-0.7.0-py3-none-any.whl | Python 3 | none | any | Details for dparse2-0.7.0-py3-none-any.whl |
Total release size: 20.8 kB
Release files / dparse2-0.7.0.tar.gz
| Download URL | dparse2-0.7.0.tar.gz |
|---|---|
| Size | 9.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6bf6872aeaffedcac67ad0abb516630bad045dbdb58505b58d8f796ee91f0a73
|
|
BLAKE2b-256 checksum How to use checksums |
dcd259a42c7b40c1075d49aa6b5ea32a5baa87f8022d252ccb4762ca9d5a30f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.8.12
|
Release files / dparse2-0.7.0-py3-none-any.whl
| Download URL | dparse2-0.7.0-py3-none-any.whl |
|---|---|
| Size | 10.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
2b935161700cdad4f27fa7ada85900756739be65ba3ef614ac4436e7ba929102
|
|
BLAKE2b-256 checksum How to use checksums |
22e9a370e566f84807cff908e71a4824ae00ea8196319f4e2956e82509a5f1c6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.8.12
|
Security for dparse2 0.7.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.