---
id: dparse
version: "0.6.4"
license: MIT license
license_treatment: permissive
maintenance: dormant
---

# dparse — A parser for Python dependency files

License: permissive · Maintenance: dormant · Downloads: 4.7M/mo

## What it is and what it does

dparse is a lightweight parser that reads Python dependency declaration files and extracts their contents into a structured, queryable format. It supports a range of common dependency file types—requirements.txt, conda.yml, tox.ini, Pipfile, Pipfile.lock, poetry.lock, and pyproject.toml—though not all support both parsing and updating. The package returns dependency metadata as JSON-serializable objects, including package names, version specifications, hashes, and source information.

You would use dparse when you need to programmatically analyze or manipulate Python dependency files—for example, in a dependency auditing tool, a lock-file validator, or a build system that needs to read and understand what packages a project declares. It handles the parsing complexity so you can work with clean Python objects instead of raw file text.

Use it for:

- Audit Python projects by parsing their dependency files to extract and analyze all declared packages and versions.
- Build a dependency update tool that reads requirements.txt or Pipfile and rewrites them with updated versions.
- Validate lock files (Pipfile.lock, poetry.lock) by parsing them to check for consistency or security issues.
- Integrate dependency parsing into a CI/CD pipeline to extract and report on project dependencies.
- Create a multi-format dependency analyzer that can read conda.yml, tox.ini, and requirements.txt from the same codebase.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Parses Python dependency files (requirements.txt, conda.yml, tox.ini, Pipfile, poetry.lock, pyproject.toml) and extracts structured dependency information including version specs and hashes.

Yes, if you need to parse Python dependency files programmatically. The package is stable, has low install friction, carries a permissive license, and has no known vulnerabilities. However, be aware that maintenance is dormant (644 days since last release)—it is suitable for stable, read-heavy use cases but may not receive updates for new Python versions or emerging dependency file formats.

## Install

pip install dparse
uv add dparse
poetry add dparse

## Installing dparse

Before you install: Low install friction with only two runtime dependencies (packaging and tomli). Maintenance is dormant—last release was 644 days ago and the repository shows no recent activity, though it remains archived=false and the package is marked Production/Stable.

License in practice: MIT license (permissive) means you can use, modify, and distribute this package freely with minimal restrictions, making it safe for both open-source and commercial projects.

Quickstart:

from dparse import parse, filetypes

content = "South==1.0.1\npycrypto>=2.6"
df = parse(content, file_type=filetypes.requirements_txt)
print(df.json())

Requires Python 3.7 or later; Python 2.7 is not supported.

Verify before relying:

- Whether dormant maintenance (644 days since last release) poses a risk for future Python version compatibility or dependency updates.
- Completeness of parsing for edge cases in supported file formats, particularly conda.yml and Pipfile with complex configurations.

## Package facts

- License: MIT license (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: dormant
- Downloads: 4.7M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

parse requirements.txt, dependency file parser, extract python dependencies, pipfile parser, poetry.lock parser, conda.yml parser, pyproject.toml parser, dependency-management, file-parsing

[View on SkillFed](https://skillfed.io/packages/dparse) · [View on PyPI](https://pypi.org/project/dparse/)