{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/2"}],"enrichment":{"capability":"Creosote scans your Python project's source code and dependency specifications to identify which declared dependencies are actually unused, helping you clean up bloated virtual environments.","skillfed_tags":["dependency-audit","ci-integration","venv-cleanup"],"use_cases":["Run in CI to catch developers forgetting to remove unused dependencies during refactorings","Audit a legacy project to identify and remove accumulated unused packages before deployment","Integrate with pre-commit hooks to prevent unused dependencies from being committed","Scan Django projects to verify all INSTALLED_APPS and MIDDLEWARE entries are actually used","Reduce noise from dependency update bots by removing packages that won't actually break anything if dropped"],"what_it_does":"Creosote is a command-line tool that identifies unused dependencies in your Python project by scanning source code for imports and comparing them against your declared dependencies. It works by parsing Python files for import statements, reading your dependency specification (pyproject.toml, requirements.txt, Poetry, Pipenv, or PDM formats), and determining which declared packages are never actually imported. The tool can also scan Django settings files for INSTALLED_APPS and MIDDLEWARE references.\n\nYou run it as a standalone tool (typically via `uv tool install creosote` to avoid polluting your project's venv) and configure it with command-line arguments or a `[tool.creosote]` section in pyproject.toml. It supports multiple venv paths, source directories, and dependency sections, and can optionally scan for deferred imports inside functions and conditional blocks. The output identifies which dependencies are unused so you can remove them, reducing virtual environment bloat and dependency maintenance burden.","worth_installing":"Yes. Creosote solves a real problem\u2014unused dependencies create security and maintenance burden\u2014with low friction (pure Python, six lightweight deps) and active maintenance. It supports multiple dependency formats and integrates well into CI/pre-commit workflows. No known vulnerabilities and permissive MIT license. Install as a standalone tool to keep your project venv clean."},"id":"creosote","links":{"html":"https://skillfed.io/packages/creosote","md":"https://skillfed.io/packages/creosote.md","pypi":"https://pypi.org/project/creosote/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-03-28","license_spdx":null,"license_treatment":"permissive","name":"creosote","python_support":"supports_current","summary":"Identify unused dependencies and avoid a bloated virtual environment."},"popularity":{"monthly_downloads":860726,"position":4874,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"5.2.0"}