skillfed

depgather

Get a list of deps given a pyproject.toml, uv.lock, requirements.txt etc

depgather v0.5.0 94.2K downloads/30d#13,340 on PyPI0
Permissive license MIT Active released

What it is and what it does

DepGather is a utility library that reads Python project dependency declarations from multiple file formats and returns a structured list of dependencies. It handles pyproject.toml, uv.lock, requirements.txt, and related formats, making it useful when you need programmatic access to a project's declared dependencies without parsing files manually.

The package wraps loguru for logging, pydantic for data validation, requirements-parser for parsing requirements files, and tomli for TOML parsing. It's designed for developers who need to introspect or analyze Python project dependencies as part of a larger tool or workflow—such as dependency auditing, migration scripts, or build system integration.

Use it for:

  • Audit all dependencies in a project by reading pyproject.toml or requirements.txt programmatically.
  • Build a dependency migration tool that reads from one format and writes to another.
  • Analyze lock file contents (uv.lock) to understand pinned versions across a project.
  • Integrate dependency discovery into a build or CI/CD script without shell parsing.
  • Generate dependency reports or graphs by extracting structured dependency data.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Extracts and lists dependencies from multiple Python project file formats including pyproject.toml, uv.lock, and requirements.txt.

Yes, if you need to programmatically extract dependencies from Python project files. The package has low install friction, active maintenance, MIT licensing, no known vulnerabilities, and a clear single purpose. It's a straightforward utility with minimal dependencies—install it when you're building tooling that requires dependency introspection.

Install

depgather on PyPI

pip

pip install depgather

uv

uv add depgather

poetry

poetry add depgather

Installing depgather

Before you install

Low friction install with four runtime dependencies (loguru, pydantic, requirements-parser, tomli). Active maintenance as of 2026-06-21 with a recent release cycle.

License in practice

MIT license permits commercial and private use with minimal restrictions; you must include a copy of the license and copyright notice.

Quickstart

pip install depgather

from depgather import get_deps

deps = get_deps('pyproject.toml')

Requires Python 3.12 or later.

Verify before relying

  • Whether the package handles all dependency specifier formats (extras, version constraints, environment markers) or only basic cases.
  • Performance characteristics when parsing large or complex lock files.
  • Whether it supports all modern Python packaging formats beyond the three mentioned in the summary.

Package facts

License MIT (permissive)
Python support supports the current Python release (>=3.12)
Install friction low — pure-Python wheel
Runtime dependencies 4 — loguru, pydantic, requirements-parser, tomli
Maintenance actively maintained — 58 days since the last release
Last repo commit
First released
Downloads 94,160/month — #13,340 on PyPI (30-day window, as of 2026-08-14)
Known vulnerabilities none known (OSV.dev, checked 2026-08-14)

Evidence: depgather-0.5.0-py3-none-any.whl

Development Status :: 5 - Production/StableIntended Audience :: DevelopersIntended Audience :: EducationNatural Language :: EnglishOperating System :: OS IndependentProgramming Language :: Python :: Implementation :: CPythonTopic :: SecurityTopic :: Software Development :: Libraries :: Python ModulesTopic :: Utilities

Tags

extract dependencies from pyproject.tomlparse requirements.txt programmaticallyread uv.lock dependencieslist project dependenciesdependency parser pythonrequirements file readerpyproject.toml parser
dependency-managementbuild-tools

More Python Modules packages