---
id: dparse2
version: "0.7.0"
license: MIT
license_treatment: permissive
maintenance: dormant
---

# dparse2 — A parser for Python dependency files

License: permissive · Maintenance: dormant · Downloads: 130.4K/mo

## What it is and what it does

dparse2 is a maintained fork of the original dparse library that parses Python dependency manifests and extracts structured information about each dependency. It reads requirements.txt, Pipfile, Pipfile.lock, conda.yml, tox.ini, and setup.cfg files, then returns parsed data as JSON-serializable objects containing package names, version specifications, hashes, and other metadata.

The package is designed for tools that need to analyze or process Python project dependencies programmatically. It depends on packvers, pyyaml, and toml for parsing different file formats. The fork was created because the original upstream project became unresponsive; this version supports Python 3.6 through 3.11 and has been marked Production/Stable, though active maintenance has stalled.

Use it for:

- Analyze dependencies in a Python project to detect version conflicts or outdated packages
- Extract and validate hashes from requirements files for supply-chain security checks
- Convert between different dependency file formats by parsing one and regenerating another
- Build a dependency graph or audit trail from conda.yml or Pipfile.lock for compliance reporting
- Integrate dependency parsing into a CI/CD pipeline to validate manifest syntax before deployment

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Parses Python dependency manifests (requirements.txt, Pipfile, conda.yml, tox.ini, setup.cfg) and extracts structured dependency information including version specs and hashes.

Yes, if you need to parse Python dependency files programmatically and can accept dormant maintenance. The package is stable, has no known vulnerabilities, and low install friction. However, the last release was in 2022—if you encounter bugs or need support for new dependency formats, you may need to fork or patch it yourself.

## Install

pip install dparse2
uv add dparse2
poetry add dparse2

## Installing dparse2

Before you install: Low install friction with three lightweight runtime dependencies (packvers, pyyaml, toml). Maintenance is dormant—last release was in 2022 and the repository shows minimal recent activity, though it remains a maintained fork of an upstream project that stopped updating.

License in practice: MIT license is permissive and poses no restrictions on use, modification, or distribution in commercial or private projects.

Quickstart:

from dparse2 import parse, filetypes

content = "South==1.0.1\npycrypto>=2.6"
df = parse(content, file_type=filetypes.requirements_txt)
print(df.json())

Requires Python 3.6 or later; pipenv extra must be installed separately if Pipfile updates are needed.

Verify before relying:

- Whether the package handles all edge cases in modern Python dependency formats (e.g., PEP 508 environment markers, direct URL references)
- Performance characteristics when parsing large or deeply nested dependency files
- Whether the pipenv extra dependency is still maintained and functional

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: dormant
- Downloads: 130.4K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

python dependency file parser, requirements.txt parser, pipfile parser, parse python dependencies, dependency manifest parser, conda yml parser, extract python package versions, dependency-analysis, manifest-parsing

[View on SkillFed](https://skillfed.io/packages/dparse2) · [View on PyPI](https://pypi.org/project/dparse2/)