depgather
Get a list of deps given a pyproject.toml, uv.lock, requirements.txt etc
What it is and what it does
DepGather is a utility library that reads Python project dependency declarations from multiple file formats and returns a structured list of dependencies. It handles pyproject.toml, uv.lock, requirements.txt, and related formats, making it useful when you need programmatic access to a project's declared dependencies without parsing files manually.
The package wraps loguru for logging, pydantic for data validation, requirements-parser for parsing requirements files, and tomli for TOML parsing. It's designed for developers who need to introspect or analyze Python project dependencies as part of a larger tool or workflow—such as dependency auditing, migration scripts, or build system integration.
Use it for:
- Audit all dependencies in a project by reading pyproject.toml or requirements.txt programmatically.
- Build a dependency migration tool that reads from one format and writes to another.
- Analyze lock file contents (uv.lock) to understand pinned versions across a project.
- Integrate dependency discovery into a build or CI/CD script without shell parsing.
- Generate dependency reports or graphs by extracting structured dependency data.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Extracts and lists dependencies from multiple Python project file formats including pyproject.toml, uv.lock, and requirements.txt.
Yes, if you need to programmatically extract dependencies from Python project files. The package has low install friction, active maintenance, MIT licensing, no known vulnerabilities, and a clear single purpose. It's a straightforward utility with minimal dependencies—install it when you're building tooling that requires dependency introspection.
Install
depgather on PyPI
pip
pip install depgatheruv
uv add depgatherpoetry
poetry add depgatherInstalling depgather
Before you install
Low friction install with four runtime dependencies (loguru, pydantic, requirements-parser, tomli). Active maintenance as of 2026-06-21 with a recent release cycle.
License in practice
MIT license permits commercial and private use with minimal restrictions; you must include a copy of the license and copyright notice.
Quickstart
pip install depgather
from depgather import get_deps
deps = get_deps('pyproject.toml')
Requires Python 3.12 or later.
Verify before relying
- Whether the package handles all dependency specifier formats (extras, version constraints, environment markers) or only basic cases.
- Performance characteristics when parsing large or complex lock files.
- Whether it supports all modern Python packaging formats beyond the three mentioned in the summary.
Package facts
| License | MIT (permissive) |
| Python support | supports the current Python release (>=3.12) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 4 — loguru, pydantic, requirements-parser, tomli |
| Maintenance | actively maintained — 58 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 94,160/month — #13,340 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: depgather-0.5.0-py3-none-any.whl
Tags
More Python Modules packages
Converts domain names between Unicode and…
permissive · top 100 on PyPI
setuptoolsSetuptools is a Python build backend and…
permissive · top 100 on PyPI
PyYAMLPyYAML parses and emits YAML 1.1 data format,…
permissive · top 100 on PyPI
pydanticPydantic validates Python data structures…
permissive · top 100 on PyPI
annotated-typesProvides reusable metadata objects for use with…
permissive · top 100 on PyPI
typing-inspectionProvides runtime tools to inspect and…
permissive · top 100 on PyPI
gemfileparser2Parses Ruby Gemfiles, .gemspec files, and…
copyleft · top 15,000 on PyPI
uv-secureScans uv.lock, pylock.toml, and…
permissive · top 15,000 on PyPI
requirements-detectorScans a Python project to detect and list its…
permissive · top 15,000 on PyPI
pip-check-reqsAudits Python project imports against…
permissive · top 15,000 on PyPI
hatch-requirements-txtA Hatchling plugin that reads project…
permissive · top 5,000 on PyPI
licensecheckScans a project's dependencies to extract their…
permissive · top 15,000 on PyPI
nox-uvnox-uv replaces nox's standard session…
permissive · top 15,000 on PyPI
pip-toolspip-tools provides command-line tools to…
permissive · top 5,000 on PyPI
dparseParses Python dependency files…
permissive · top 5,000 on PyPI
prophecy-libsProvides runtime support and helper utilities…
copyleft · top 15,000 on PyPI