and safety is dependent on the pip's packaging version (for now).

pipenv/environment.py

@@ -657,7 +657,7 @@ def get_package_requirements(self, pkg=None):
             nodes = [p for p in tree if p.project_name not in branch_keys]
         else:
             nodes = [p for p in tree if p.project_name == pkg]
-        key_tree = {k.name: v for k, v in tree.items()}
+        key_tree = {k.project_name: v for k, v in tree.items()}
 
         return [self._get_requirements_for_package(p, key_tree) for p in nodes]
 

pipenv/patched/safety/alerts/requirements.py

@@ -1,7 +1,7 @@
 from __future__ import unicode_literals
 
-from pipenv.vendor.packaging.version import parse as parse_version
-from pipenv.vendor.packaging.specifiers import SpecifierSet
+from pipenv.patched.pip._vendor.packaging.version import parse as parse_version
+from pipenv.patched.pip._vendor.packaging.specifiers import SpecifierSet
 import pipenv.patched.pip._vendor.requests as requests
 
 from datetime import datetime

pipenv/patched/safety/alerts/utils.py

@@ -3,7 +3,7 @@
 import sys
 
 from functools import wraps
-from pipenv.vendor.packaging.version import parse as parse_version
+from pipenv.patched.pip._vendor.packaging.version import parse as parse_version
 from pathlib import Path
 
 import pipenv.vendor.click as click

pipenv/patched/safety/safety.py

@@ -9,9 +9,9 @@
 from datetime import datetime
 
 import pipenv.patched.pip._vendor.requests as requests
-from pipenv.vendor.packaging.specifiers import SpecifierSet
-from pipenv.vendor.packaging.utils import canonicalize_name
-from pipenv.vendor.packaging.version import parse as parse_version, Version, LegacyVersion, parse
+from pipenv.patched.pip._vendor.packaging.specifiers import SpecifierSet
+from pipenv.patched.pip._vendor.packaging.utils import canonicalize_name
+from pipenv.patched.pip._vendor.packaging.version import parse as parse_version, Version, LegacyVersion, parse
 
 from .constants import (API_MIRRORS, CACHE_FILE, OPEN_MIRRORS, REQUEST_TIMEOUT, API_BASE_URL)
 from .errors import (DatabaseFetchError, DatabaseFileNotFoundError,

pipenv/patched/safety/util.py

@@ -12,8 +12,8 @@
 import pipenv.vendor.click as click
 from pipenv.vendor.click import BadParameter
 from pipenv.vendor.dparse import parse, filetypes
-from pipenv.vendor.packaging.utils import canonicalize_name
-from pipenv.vendor.packaging.version import parse as parse_version
+from pipenv.patched.pip._vendor.packaging.utils import canonicalize_name
+from pipenv.patched.pip._vendor.packaging.version import parse as parse_version
 from pipenv.vendor.ruamel.yaml import YAML
 from pipenv.vendor.ruamel.yaml.error import MarkedYAMLError