{"categories":[{"label":"Build Tools","url":"https://skillfed.io/packages/category/software-development-build-tools/5"}],"enrichment":{"capability":"Parses Python dependency manifests (requirements.txt, Pipfile, conda.yml, tox.ini, setup.cfg) and extracts structured dependency information including version specs and hashes.","skillfed_tags":["dependency-analysis","manifest-parsing"],"use_cases":["Analyze dependencies in a Python project to detect version conflicts or outdated packages","Extract and validate hashes from requirements files for supply-chain security checks","Convert between different dependency file formats by parsing one and regenerating another","Build a dependency graph or audit trail from conda.yml or Pipfile.lock for compliance reporting","Integrate dependency parsing into a CI/CD pipeline to validate manifest syntax before deployment"],"what_it_does":"dparse2 is a maintained fork of the original dparse library that parses Python dependency manifests and extracts structured information about each dependency. It reads requirements.txt, Pipfile, Pipfile.lock, conda.yml, tox.ini, and setup.cfg files, then returns parsed data as JSON-serializable objects containing package names, version specifications, hashes, and other metadata.\n\nThe package is designed for tools that need to analyze or process Python project dependencies programmatically. It depends on packvers, pyyaml, and toml for parsing different file formats. The fork was created because the original upstream project became unresponsive; this version supports Python 3.6 through 3.11 and has been marked Production/Stable, though active maintenance has stalled.","worth_installing":"Yes, if you need to parse Python dependency files programmatically and can accept dormant maintenance. The package is stable, has no known vulnerabilities, and low install friction. However, the last release was in 2022\u2014if you encounter bugs or need support for new dependency formats, you may need to fork or patch it yourself."},"id":"dparse2","links":{"html":"https://skillfed.io/packages/dparse2","md":"https://skillfed.io/packages/dparse2.md","pypi":"https://pypi.org/project/dparse2/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2022-12-23","license_spdx":null,"license_treatment":"permissive","name":"dparse2","python_support":"supports_current","summary":"A parser for Python dependency files"},"popularity":{"monthly_downloads":130426,"position":11640,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.7.0"}