-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Open
Labels
Description
Separate dependencies for dev/docs/test into their own extras.
Right now, they are all in the main dependencies group in pyproject.toml: https://github.com/Gallopsled/pwntools/blob/dev/pyproject.toml#L35-L56
dependencies = [
"paramiko>=1.15.2",
"mako>=1.0.0",
"pyelftools>=0.32",
"capstone>=4.0.0",
"ropgadget>=5.3",
"pyserial>=2.7",
"requests>=2.0",
"pip>=6.0.8",
"pygments>=2.0",
"pysocks",
"python-dateutil",
"packaging",
"psutil>=3.3.0",
"intervaltree>=3.0",
"sortedcontainers",
"unicorn>=2.0.1, !=2.1.3, !=2.1.4", # see https://github.com/unicorn-engine/unicorn/issues/2134
"rpyc",
"colored_traceback",
"unix-ar",
"zstandard",
]Reason for request
We use pwntools as a direct dependency in our project. We use poetry to lock our dependencies. Having pip in there means we are forever locked into using whatever version of pip was available when the dependencies were locked. Installing our package(s) forces upgrade/downgrade of pip. This causes issues when running our code in some restricted environments.