mpdavis / python-jose

A JOSE implementation in Python

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Remove unnecessary dependencies in production

whitehat101 opened this issue · comments

When discussing crypto backends the README says:

Due to complexities with setuptools, the native-python backend is always installed, even if you select a different backend on install. We recommend that you remove unnecessary dependencies in production.

How are we supposed to do that?

I can't find a package manager feature that can block transitive dependencies. Are we supposed to manually rm -rf those packages from the VENV after install?