Hacker News Reader

The lack of discussion of lock files is a big omission in any 'best practices' page. "Lock" only appears in a log output of Poetry.

Even if the answer is "Poetry handles it" you certainly want to explain why they're important just like is being done in the rest of the "Why use..." sections.

View on HN

For a generic lockfile, use the pip-compile tool from https://pypi.org/project/pip-tools

Huge +1 for this; pip-compile is so much faster and less surprising than poetry. Poetry's #1 footgun is that it updates the version of unrelated dependencies when you add a new dependency. No thanks.

Yeap I am using pip-compile too because I always managed to mess up my environment when using poetry!

Yes! Lockfiles are basically the only reason to use poetry over pip+venv or am I missing something?

Reply on news.ycombinator.com