requirements.txt and pyproject.toml dependencies may diverge #17

New issue

Closed

opened 2026-05-09 13:18:30 +00:00 by Mark · 0 comments

Mark commented

2026-05-09 13:18:30 +00:00

Owner

The project maintains dependencies in two places:

pyproject.toml (dependencies section) — uses loose version pins (>=1.12.1, >=1.16.5)
requirements.txt — uses exact version pins (==1.12.1, ==1.16.5)

The CI installs from requirements.txt but pip install -e . (or pip install .) uses pyproject.toml. Over time these will drift.

Suggestion: Pick one source of truth. Either:

Use pyproject.toml as the single source and generate requirements.txt from it with pip freeze, or
Remove pyproject.toml dependencies and keep only requirements.txt

Found during batch project audit (2026-05-09).

The project maintains dependencies in two places: 1. **pyproject.toml** (dependencies section) — uses loose version pins (`>=1.12.1`, `>=1.16.5`) 2. **requirements.txt** — uses exact version pins (`==1.12.1`, `==1.16.5`) The CI installs from `requirements.txt` but `pip install -e .` (or `pip install .`) uses pyproject.toml. Over time these will drift. **Suggestion:** Pick one source of truth. Either: - Use `pyproject.toml` as the single source and generate `requirements.txt` from it with `pip freeze`, or - Remove `pyproject.toml` dependencies and keep only `requirements.txt` Found during batch project audit (2026-05-09).