Skip to content

Commit

Permalink
add link to poetry as another package manager option
Browse files Browse the repository at this point in the history
  • Loading branch information
voidlily committed Apr 25, 2024
1 parent a50b820 commit 666a756
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions content/engineering/languages-runtimes/python.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ When using [Django], we **default** to starting with the most recent [Long Term
Otherwise, our **standard** practice is to use the latest release of our libraries when first installing. Security updates (as indicated by GitHub or Snyk) should be applied ASAP, but all libs should be updated at some routine interval (e.g. quarterly).

Finally, in an effort to ensure our deployments are repeatable, our code **standards** require all dependencies (including dependencies' dependencies) be pinned to specific versions. This should also apply to the development environment (e.g. linters, testing tools, etc.) **Suggestions** for implementing that include
* [poetry](https://python-poetry.org/)
* [pip-tools](https://github.com/jazzband/pip-tools)'s `pip-sync`
* [pipenv](https://github.com/pypa/pipenv)'s `Pipfile.lock`
* [vendoring dependencies](https://docs.cloudfoundry.org/buildpacks/python/index.html#vendoring)
Expand Down

0 comments on commit 666a756

Please sign in to comment.