The new lockfile format introduced in PEP 751
summary
PEP 751 (accepted March 2025) specifies a common lockfile, pylock.toml format, that lists precise packages, indices, Python version and per-distribution URLs with hashes plus size so installers skip dependency resolution. Implementations exist (pip adds support, uv offers experimental usage; poetry, pip-tools and others can export/import), the format aims for reproducible installs across architectures and registries and reduces dependency confusion and supply‑chain risk. No install‑time resolution.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:35Modern package management
- 8:21Problems with requirements.txt
- 13:39Lockfile benefits
- 16:31PEP 751 lockfile format
- 19:44Security and size in PEP 751
- 20:47PEP 751 history and adoption
- 22:14Highlights and future of PEP 751
- 23:57Q&A
related talks
26mDependency Management in Python
23mPackaging Python in 2021
36mPipenv: The Future of Python Dependency Management
26mSecure Modern and Simple Dependency Management with PDM and Friends
32mA New Way to Manage Python Environments
30mThe Evolutionary Saga of Python Packaging
28mModern Python packaging without pain
30mpyproject.toml, packaging, and you