Why 2 pip projects

[Fran R]

I just found a really hidden conflict caused by the project being available on pypi under 2 different names:

• https://pypi.org/project/bc-python-hcl2/
• https://pypi.org/project/python-hcl2/

I've used 2 tools and each one refers to a different pip source. Each one requiring different version. It's all fine at pip install.
But when running, "import hcl2" one of the tool imports the wrong one and it fails

[Nick]

@Fran-Rg What you've stumbled into is another org publishing their own fork to PyPi (I'm assuming for the convenience of installing with pip). You can see the bc-python-hcl2 source at https://github.com/bridgecrewio/python-hcl2.

[Fran R]

Hi yes, I raised a ticket with them as well. bridgecrewio/checkov#2317
I don't think there's any solution available from here