python-poetry / python-poetry/poetry

Poetry ignores no-binary options and downloads .whl files

Open
#8,573 11 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

area/installer area/sources kind/bug status/triage
Dominant language
Python
Stars
34.3k
Forks
2.5k
Avg merge
2d 19h
Merged PRs (30d)
30

Description

  • I am on the latest stable Poetry version, installed using a recommended method.
  • I have searched the issues of this repo and believe that this is not a duplicate.
  • I have consulted the FAQ and blog for any relevant entries or release notes.
  • If an exception occurs when executing a command, I executed it again in debug mode (-vvv option) and have included the output below.

Issue

I am running poetry installation with no-binary option.
Due to company security policies only source code dependencies are allowed, meaning no .whl files.
However I have tried using both:

  • poetry config --local installer.no-binary :all: (local and global)
  • export POETRY_INSTALLER_NO_BINARY=:all:
    In both cases poetry installation still downloads .whl files, this is the log:
Source (PyPI): Downloading: https://files.pythonhosted.org/packages/7b/9b/d4f61d21bf2c9a653d02bf5ef8910c03e0cbc876db5eebae358421261b4c/responses-0.14.0-py2.py3-none-any.whl
Creating new session for files.pythonhosted.org
[urllib3.connectionpool] Starting new HTTPS connection (1): files.pythonhosted.org:443
[urllib3.connectionpool] https://files.pythonhosted.org:443 "GET /packages/7b/9b/d4f61d21bf2c9a653d02bf5ef8910c03e0cbc876db5eebae358421261b4c/responses-0.14.0-py2.py3-none-any.whl HTTP/1.1" 200 27408
   1: fact: responses (0.14.0) depends on requests (>=2.0)
   1: fact: responses (0.14.0) depends on urllib3 (>=1.25.10)
   1: fact: responses (0.14.0) depends on six (*)
   1: selecting responses (0.14.0)
   1: derived: six

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce with Poetry 1.6.1 and Python 3.8 using the linked pyproject.toml, checking both installer.no-binary :all: and POETRY_INSTALLER_NO_BINARY. Trace installation of the responses dependency and verify whether a source archive is selected instead of a .whl file. Done means both configuration forms enforce source-only installation.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
tooling
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.