What problem does it solve?
This Skill provides best practices for managing Python dependencies, addressing issues like non-reproducible builds, dependency conflicts, and security vulnerabilities. It ensures stable, secure, and efficient development environments using modern tools like uv and Poetry.
Core Features & Use Cases
- Modern Tools (
uv/Poetry): Guides on initializing projects, adding/removing dependencies, and managing virtual environments with uv and Poetry.
pyproject.toml & Lock Files: Enforces defining dependencies in pyproject.toml and committing lock files (uv.lock, poetry.lock) for reproducible builds.- Version Constraints: Explains various version constraints (
^, ~, >=) for managing dependency updates safely.
- Security & CI/CD: Covers security scanning with
pip-audit and safety, integrating Dependabot, and setting up CI/CD workflows for dependency checks.
- Use Case: A developer is setting up a new Python project and needs to manage its dependencies reliably. This skill helps them use
uv to add core and dev dependencies, generate a lock file, and configure Dependabot for automatic security updates, ensuring a stable and secure project.
Quick Start
Set up a new Python project using uv, add fastapi and pydantic as core dependencies, and pytest as a dev dependency.
