[Grok-dev] Re: zc.sourcefactory

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Philipp von Weitershausen wrote:
> Sebastian Ware wrote:
>> Shouldn't dependencies be put in setup.py like this (?):
>>
>>       install_requires=['setuptools',
>>                         'grok',
>>                         'zc.catalog==1.1.1',
>>                         'hurry.query',
>>                         'hurry.workflow',
>>                         # Add extra requirements here
>>                         ],
> 
> Yes, dependencies should be put in there, but not specific versions.

I think there are cases for pinning specific versions:  removing
"degrees of freedom" here can be a sanity saver.  As I noted in another
thread, I think that we end up solving the "known good working set"
problem by creating an egg whose only job is to pin down the versions of
all its dependencies.

However, the tradeoff is that any egg which *does* pin versions is going
to be less reusable than one which doesn't.


Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG3Jgc+gerLs4ltQ4RAkobAJ9AK/i/xblFFFzG/aW3uGof/NGZsQCfX79y
F9aLNpl36FHW5DuZJiPXEyM=
=dtQz
-----END PGP SIGNATURE-----