Skip to main content

PyPI PyPI - Python Version License

py.lockfile

Install

pip install py.lockfile2

py.lockfile is a tool for downloading of python packages for various OS, CPU and python versions.

Motivation

Python projects managed by pipenv, poetry or pdm use lock files for freeze packages in specific version. It is very useful for stability of whole project. However, for installing these freeze packages, we have to use mentioned package managers, which bring many unwanted dependencies. It is uncomfortable especially for building of docker containers.

This tool takes Pipfile.lock/poetry.lock/pdm.lock file and downloads all required packages (for specific OS, CPU and python version) to target directory. After that we can install them by simple pip.

The simple example of usage

> py.lockfile -s tests/poetry.lock -t wheels/
📦 cffi 1.15.1  cffi-1.15.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

> pip install wheels/*
cffi-1.15.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Advance options

The tool accepts many arguments, the most useable are --python-version and --platform. They can help us to download packages for different python version or OS platform. Get the correct value of --platform attribute for your system, can be complicated. This command can help py_lockfile --help | grep 'Your current platform'

> py.lockfile --help
usage: py_lockfile [-h] [-s SOURCEFILE] [-t TARGET] [-g GROUP] [-p PYTHON_VERSION] [--platform PLATFORM] [--python-implementation {cp,ip,pp,jy}] [--ignore-missing] [--ignore-hash] [--no-binary] [--dryrun] [--no-color]

Python package downloader.
---------------------------------

This is a simple tool for download python packages managed by lock file.
Repository credentials can be set by environment variables
(PYLF_<NAME>_USERNAME, PYLF_<NAME>_PASSWORD and PYLF_<NAME>_URL).

Supported:
    * Pipfile.lock - Pipenv.
    * poetry.lock - Poetry, the repository credentials are automatically loaded
                    from ~/.config/pypoetry/auth.toml.
    * pdm.lock - PDM, the repository credentials are automatically loaded from
                 pyproject.toml

optional arguments:
  -h, --help            show this help message and exit
  -s SOURCEFILE, --sourcefile SOURCEFILE
                        source file (e.g. Pipfile.lock, poetry.lock or pdm.lock)
  -t TARGET, --target TARGET
                        Download folder (default: ./wheels)
  -g GROUP, --group GROUP
                        Append optional group of packages (e.g. dev)
  -p PYTHON_VERSION, --python-version PYTHON_VERSION
                        Download packages for python version (default: 3.9.5).
  --platform PLATFORM   Download packages for platform (default: manylinux_2_28_x86_64).
  --python-implementation {cp,ip,pp,jy}
                        Download packages for python implementation (default: cp).
  --ignore-missing      Skip missing packages.
  --ignore-hash         Ignore package hash checking.
  --no-binary           Download only source packages.
  --dryrun              Dry run. No download will be performed.
  --no-color            Disable color output.

SOURCEFILE:
    Automatically try to find supported files in current folder.

PLATFORM:
    Your current platform is 'manylinux_2_28_x86_64'
    See more https://peps.python.org/pep-0491/#file-name-convention
    e.g.:
        * macosx_10_9_x86_64
        * win_amd64
        * manylinux_2_17_x86_64    # glib linux systems (RHEL based system) https://peps.python.org/pep-0600/
        * musllinux_1_1_x86_64     # musl linux systems (AlpineLinux) https://peps.python.org/pep-0656/

PYTHON_IMPLEMENTATION:
   * 'cp' - CPython
   * 'pp' - Pypy
   * 'ip' - IronPython
   * 'jy' - Jython

As default values of --python-version, --platform and --python-implementation are set your current python configuration. However, you can download packages for different configuration as well.

> py.lockfile -s tests/poetry.lock -t wheels/ --python-version 2.7 --platform win_amd64
📦 cffi 1.15.1  cffi-1.15.1-cp27-cp27m-win_amd64.whl

Download packages from a private repository

Credentials are automatically loaded from pypoetry/auth.toml, pyproject.toml or we can overwrite them by environment variables.

PYLF_<REPO_NAME>_USERNAME=user PYLF_<REPO_NAME>_PASSWORD=password  py.lockfile ...

Optionally, we can set PYLF_<REPO_NAME>_URL as well, for appending custom pypi entry point.

Metadata

Release files for py.lockfile2 0.6.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for py.lockfile2 0.6.0
File Size Uploaded Provenance Actions
py_lockfile2-0.6.0.tar.gz 11.1 kB Without provenance Details for py_lockfile2-0.6.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for py.lockfile2 0.6.0
File Interpreter ABI Platform Actions
py_lockfile2-0.6.0-py3-none-any.whl Python 3 none any Details for py_lockfile2-0.6.0-py3-none-any.whl

Total release size: 22.4 kB

Release files / py_lockfile2-0.6.0.tar.gz

Download URL py_lockfile2-0.6.0.tar.gz
Size 11.1 kB
Tags Source
SHA-256 checksum
How to use checksums
d632fd4d0b69727e52eba02b1b81306069ce45819c626239070f3678f39f7eae
BLAKE2b-256 checksum
How to use checksums
2e6af520eb04afe374e4b27b9bff1c5dca536dd6f50043e58005830183484170
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via poetry/2.0.1 CPython/3.9.21 Linux/6.8.0-1021-azure

Release files / py_lockfile2-0.6.0-py3-none-any.whl

Download URL py_lockfile2-0.6.0-py3-none-any.whl
Size 11.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
90f01190d3c277a42fd808baf54764d5d2ccfdd7a7e0a711831d5ac6ec34a008
BLAKE2b-256 checksum
How to use checksums
9402ebe3a7fc9095102b595dccdd5f3990234a5f2d51ed975f39edc9e0aeab0d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via poetry/2.0.1 CPython/3.9.21 Linux/6.8.0-1021-azure

Security for py.lockfile2 0.6.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page