python-poetry / python-poetry/poetry-plugin-export
Why does export plugin didn't export md5 hashes?
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 335
- Forks
- 57
- Avg merge
- 1h 23m
- Merged PRs (30d)
- 3
Description
Pip does not support installation from a requirements.txt file with hashes not for all packages. Why does poetry export simple skip hashes insted of raise an error? If the lock file contains hashes that are not listed in ALLOWED_HASH_ALGORITHMS, then the resulting requirements.txt file is not suitable for installation. Is it better to raise the error or export all the hashes?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing how hashes from the lock file are handled against ALLOWED_HASH_ALGORITHMS during requirements.txt export. Compare raising an error with exporting all hashes, and verify which result is suitable for pip installation. Done when the behavior is decided and the relevant export checks reflect that decision.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100