They also don't let you blacklist bad dependencies or force certain versions of transitive dependencies. Poetry is much better than Pipenv and... text files wi

They also don't let you blacklist bad dependencies or force certain versions of transitive dependencies. Poetry is much better than Pipenv and... text files with lists of packages to install. I introduced it at my workplace because of that, but I'm terrified that we'll at some point need some poorly maintained 3rd party dep and end up with a hack that was worse than anything we had before (like, a poetry wrapper that modifies the lock file after every operation).