4 ms·

> pipenv allows you to create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, depende

> pipenv allows you to create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more. Why on earth would anyone need all this to manage packages for their projects? Are there any other programming languages whose package-management comes close to this level of intricacy and complexity? “This project needs package X” I mean how hard can that be to get right in a self-contained environment? This whole story is just madness coupled deep denial and Stockholm-syndrome.

ryukafalz 7y ago
>“This project needs package X” >I mean how hard can that be to get right in a self-contained environment? Okay, I’ll bite. What version of package X does it need? Is there a specific version that’s been tested with this project and is known working? Are there specific versions of its dependencies that have been tested and are known working? Is it needed at runtime or only at build-time? What repository can it be found in? PyPI is not the only Python repository; private repos are common. And as a bonus cherry on top: how easy is it to make sure you have all the project’s dependencies installed in the venv for that project, and that you don’t have packages you’re not keeping track of? This is a UX thing, but developers are human and it matters.
vageli 7y ago
> > pipenv allows you to create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more. > Why on earth would anyone need all this to manage packages for their projects? > Are there any other programming languages whose package-management comes close to this level of intricacy and complexity? > “This project needs package X” > I mean how hard can that be to get right in a self-contained environment? Packages often have subdependencies and their requirements at times may conflict. If you are very specific in the versions you want, it is more likely to cause issues in dependency resolution. I would hardly call a dev's machine a "self-contained environment". Most developers I know work in a number of repos with varying requirements, and polluting their system libraries and packages with each project's requirements quickly pollutes the system and can lead to issues.
- josteink 7y ago
  > I would hardly call a dev's machine a "self-contained environment" But a software project is. Only that software project needs those packages.
myalphabet 7y ago
> Are there any other programming languages whose package-management comes close to this level of intricacy and complexity? I think many do. Ruby, Node, Erlang/Elixir, Java, Go, Rust, dotnet, C... I’m having trouble thinking of a modern language that doesn’t have such package management mechanisms. For many people doing anything more than writing one-off scripts, and especially for anyone who collaborates with others or shares their code, package management is so much more than just “this project needs package X”.
- josteink 7y ago
  But all your examples are simple and reliable tools with a minimum of intricacy. My criticism isn’t about having a package-management story. It’s about having a terrible and complex one.
  - myalphabet 7y ago
    Your original comment was responding to “create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more.” and saying that this is overly complicated. Yet every single one of the listed languages has package management tools that do all of these things. If you think any of the listed examples have “simple” package management tools, I question how deeply you have used any of them. NPM has ~60 commands and hundreds of subcommands each with multiple option flags, and probably hundreds more config options. Gem/Bundle is similar, etc. If anything, Python is trying to catch up in how complex it’s package managers can be.
    - josteink 7y ago
      Python only has venvs because it needs venvs. For most other language-provided package-managers the software project you’re working on is the env, so you don’t need to construct or manage a venv at all. So my point still stands.
      - deleted 7y ago
        [deleted]

ryukafalz 7y ago

>“This project needs package X” >I mean how hard can that be to get right in a self-contained environment? Okay, I’ll bite. What version of package X does it need? Is there a specific version that’s been tested with this project and is known working? Are there specific versions of its dependencies that have been tested and are known working? Is it needed at runtime or only at build-time? What repository can it be found in? PyPI is not the only Python repository; private repos are common. And as a bonus cherry on top: how easy is it to make sure you have all the project’s dependencies installed in the venv for that project, and that you don’t have packages you’re not keeping track of? This is a UX thing, but developers are human and it matters.

vageli 7y ago

> > pipenv allows you to create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more. > Why on earth would anyone need all this to manage packages for their projects? > Are there any other programming languages whose package-management comes close to this level of intricacy and complexity? > “This project needs package X” > I mean how hard can that be to get right in a self-contained environment? Packages often have subdependencies and their requirements at times may conflict. If you are very specific in the versions you want, it is more likely to cause issues in dependency resolution. I would hardly call a dev's machine a "self-contained environment". Most developers I know work in a number of repos with varying requirements, and polluting their system libraries and packages with each project's requirements quickly pollutes the system and can lead to issues.

josteink 7y ago
> I would hardly call a dev's machine a "self-contained environment" But a software project is. Only that software project needs those packages.

myalphabet 7y ago

> Are there any other programming languages whose package-management comes close to this level of intricacy and complexity? I think many do. Ruby, Node, Erlang/Elixir, Java, Go, Rust, dotnet, C... I’m having trouble thinking of a modern language that doesn’t have such package management mechanisms. For many people doing anything more than writing one-off scripts, and especially for anyone who collaborates with others or shares their code, package management is so much more than just “this project needs package X”.

josteink 7y ago
But all your examples are simple and reliable tools with a minimum of intricacy. My criticism isn’t about having a package-management story. It’s about having a terrible and complex one.
- myalphabet 7y ago
  Your original comment was responding to “create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more.” and saying that this is overly complicated. Yet every single one of the listed languages has package management tools that do all of these things. If you think any of the listed examples have “simple” package management tools, I question how deeply you have used any of them. NPM has ~60 commands and hundreds of subcommands each with multiple option flags, and probably hundreds more config options. Gem/Bundle is similar, etc. If anything, Python is trying to catch up in how complex it’s package managers can be.
  - josteink 7y ago
    Python only has venvs because it needs venvs. For most other language-provided package-managers the software project you’re working on is the env, so you don’t need to construct or manage a venv at all. So my point still stands.
    - deleted 7y ago
      [deleted]