NAME

repomatic lint-deps - Check dependencies resolve from the public index

SYNOPSIS

repomatic lint-deps [OPTIONS]

DESCRIPTION

Check that every dependency resolves from the index users install from.

A dependency is shippable when whoever installs the published artifact gets the same code the release was tested against. A git branch, a local path, a fork, a direct URL or a private index all break that, and most of them break it silently: a `[tool.uv.sources]` override never reaches the published metadata, so the wheel builds and uploads exactly as it would have, and only the install fails.

Runs entirely offline, reading pyproject.toml and uv.lock. The lockfile pass is what catches a source override on a package no table names, since it records the resolved origin of the whole tree.

Reads lint-deps.allow from [tool.repomatic] for packages exempted by name, each mapped to the reason it is safe, and lint-deps.comment-word-threshold for the length a floor comment may run to.

Output symbols:


    ✗  Blocks a release


    ⚠  Warning, does not block


    ℹ  Covered by lint-deps.allow

Exit codes:


    0  Nothing blocks a release, or --no-fatal was passed.


    1  At least one finding blocks a release.

OPTIONS

--pyproject FILE: Path to the pyproject.toml file.
--lockfile FILE: Path to the uv.lock file.
--fatal / --no-fatal: Exit non-zero when a finding blocks a release. Pass --no-fatal to report without failing, for continuous visibility on ordinary pushes.
--policy / --no-policy: Also report declarations departing from the project's version policy: upper bounds, missing floors, unsorted lists, misplaced type stubs, uncommented and over-long floor comments. Never blocks a release.
--output FILE: Write a markdown report of the blocking findings to this file.
--output-format [markdown|github-actions]: Format for --output. github-actions produces format for PR template consumption in workflows.
--sort-by [package|kind|location|verdict]: Sort table by this column. Repeat to set priority.
--help / -h: Show this message and exit.

ENVIRONMENT

LINT_DEPS_PYPROJECT_PATH: Path to the pyproject.toml file.
LINT_DEPS_LOCKFILE: Path to the uv.lock file.
LINT_DEPS_FATAL: Exit non-zero when a finding blocks a release. Pass --no-fatal to report without failing, for continuous visibility on ordinary pushes.
LINT_DEPS_POLICY: Also report declarations departing from the project's version policy: upper bounds, missing floors, unsorted lists, misplaced type stubs, uncommented and over-long floor comments. Never blocks a release.
LINT_DEPS_OUTPUT: Write a markdown report of the blocking findings to this file.
LINT_DEPS_OUTPUT_FORMAT: Format for --output. github-actions produces format for PR template consumption in workflows.
LINT_DEPS_SORT_BY: Sort table by this column. Repeat to set priority.
LINT_DEPS__CLICK_DEFAULT_HELP: Show this message and exit.

EXIT STATUS

0: Success.
1: A runtime error, or an aborted prompt (Ctrl-C, a declined confirmation).
2: A usage error: unknown option, invalid value, missing operand, or an unparsable configuration file.

EXAMPLES

Check the current project

repomatic lint\-deps

Report without failing, for an ordinary CI push

repomatic lint\-deps \-\-no\-fatal

Emit a markdown report for a PR body

repomatic lint\-deps \-\-no\-fatal \-\-output report.md

AUTHORS

Kevin Deldycke