jaleskovec/reqcheck

Compare installed Python package versions with PyPI

reqcheck

Compare installed Python package versions with PyPI. Display the current version, latest version and age for each installed package.

Example output:

Package    Current Version    Latest Version    Behind                             Age
---------  -----------------  ----------------  ---------------------------------  -------------------------------
certifi    2020.12.5          2020.12.5         latest                             ~ 53 days (2020-12-05)
chardet    3.0.4              4.0.0             -1 version (~ 3 years 186 days)    ~ 3 years 235 days (2017-06-08)
idna       2.5                3.1               -7 versions (~ 3 years 304 days)   ~ 3 years 328 days (2017-03-07)
requests   2.17.3             2.25.1            -15 versions (~ 3 years 201 days)  ~ 3 years 244 days (2017-05-29)
urllib3    1.21.1             1.26.3            -22 versions (~ 3 years 270 days)  ~ 3 years 272 days (2017-05-02)

Installation

To install reqcheck, simply use pip:

$ pip install reqcheck

Usage

You can check requirements directly using stdin:

$ pip freeze | reqcheck

You can check requirements in a virtualenv:

$ reqcheck -v /path/to/venv

You can check requirements on the command line:

$ reqcheck requests==2.10.0 mock==2.0.0

Set constraints that will cause the command to exit with an error status (for continuous integration):

$ reqcheck --max-versions-behind 3 --max-days-behind 120 --max-age 365

Display usage help:

$ reqcheck --help

Contributing

1. Check the pull requests to ensure that your feature hasn't been requested already
2. Fork the repository and make your changes in a separate branch
3. Add unit tests for your changes
4. Submit a pull request
5. Contact the maintainer

reqcheck's Issues

Also check age of up2date packages

Hi!

Would be cool to also check the age of the latest package compared to today.

Easiest to describe a use case I guess. I've got a project here that was using Flask-Security (which was abandoned 3 years ago, and picked up with Flask-Security-Too). We were on the latest version on, so this and many other tools would say "everything is great". However obviously 3 years out of date security is never great, and in general no releases in over a year have a high likelyhood to indicate the project is dead.

Proposal: add "Package Age" column or similar showing how old "latest" from pypi actually is.

Thanks :)

Add limits to fail CI builds

Would be great to have command line flags to specify

• maximum versions behind
• maximum version age behind (days)
• maximum package age behind (days) (#1)

and if that value is exceeded the program returns with an error code so a CI build could be made to fail.