JuliaPy / JuliaPy/PythonCall.jl
Locking julia dependencies
- Dominant language
- Julia
- Stars
- 1.1k
- Forks
- 86
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 3
Description
It would be nice to have an automatic way of locking Julia dependencies when releasing Python wheels, partly to minimize supply chain risks for users, and partly so that I can be confident there won't be bugs showing up. There are various tradeoffs, of course, but it might be nice to have a mechanism for this, similar to `uv.lock`.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files or tests are named. Start by mapping how Python wheels are released and how Julia dependencies are currently represented, then compare the desired behavior with the referenced uv.lock approach; done means releases automatically produce a dependable dependency lock that addresses reproducibility and supply-chain concerns.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- julia, python
- Domain
- build-system, release, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100