Package hosted on a custom repository: dependencies are not installed

• I am on the latest Poetry version.

• I have searched the issues of this repo and believe that this is not a duplicate.

• If an exception occurs when executing a command, I executed it again in debug mode (-vvv option).

• OS version and name: Ubuntu 20.04 LTS

• Poetry version: Poetry version 1.0.8

Issue

Setup:

• I have built a mydependency package with poetry, in which I specify a requirement numba = "0.48.0". I publish this package on my own pypi server with poetry publish -r mypypi.
• I then specify this package as a dependency for my new project, myproject.

Issue:
Running poetry update (or poetry add), only installs the mydependency package but not its requirement numba==0.48.0. Whereas running pip install mydependency installs both the package and the dependencies.

Reproducible example

In my case I am using a custom pypi server on localhost, using pypi-server. I have set it up in poetry with: poetry config repositories.mypypi http://localhost:8080/

Steps to reproduce:

1. poetry new mydependency && cd mydependency
2. Change pyproject.toml to include:

[tool.poetry.dependencies]
python = "^3.8"
numba = "0.48.0"

3. poetry update && poetry publish --build -r mypypi --username=' ' --password=' '
4. cd .. && poetry new myproject && cd myproject
5. Change pyproject.toml to include:

[[tool.poetry.source]]
name = "mypypi"
url = "http://localhost:8080"

6. poetry update && poetry add mydependency

The last command only results in:

Package operations: 1 install, 0 updates, 0 removals

  - Installing mydependency (0.1.0)
    Installing from unsecure host: localhost

Whereas pip install --extra-index-url http://localhost:8080 mydependency installs all dependencies correctly, meaning it is not a fault with poetry build.

Maybe worth mentioning: using a relative import with mydependency = { path = '../mydependency', develop=false } in the pyproject.toml for myproject does not have the same issue.

Reproduce the issue using the listed Poetry commands, the custom pypi-server setup, and the two pyproject.toml files. Compare poetry update/add dependency resolution with pip's extra-index-url behavior; done means mydependency and its pinned numba==0.48.0 dependency are both installed from the custom repository.