@whitequark I think that the pyproject.toml revolution has made it so that many different choices are valid and work fine and it really is amazing that we've finally gotten to this point. pdm definitely works well, so does poetry, so does (sigh) uv, or hatchling. I use a bunch of different tools, sometimes _different_ tools than the project itself recommends, and rarely have problems
@glyph this is true but it's also more complicated than that. until recently (we've just started using that PDM feature) lockfiles weren't portable, for example
@whitequark yeah. I imagine Glasgow has a lot of very specialized needs that ram straight into the edges of what is currently made easy by the ecosystem
@glyph nope, it's one of the most boring python libraries around. you can check it out, all it has is a literal handful of dependencies and some entry points. it does rely on multiple native code dependencies but that's all handled by just normal pip mechancis
Nov 7, 2026, 8:22 PM@whitequark @glyph Maybe it's got better recently as I spent a lot of the last year in C# land, but I've never successfully built/run/deployed a Poetry project using PDM
Nov 7, 2026, 8:23 PM@whitequark @glyph Ugh, the lockfile situation is really unfortunate, yeah. I've got a whole section in the pyreading README about how screwed up the lockfile situation is.
Nov 7, 2026, 8:28 PM@whitequark @glyph Oh, `marker` finally landed in pylock, huh? That's really helpful! The main blocker for me was always having locks for optional dependency groups...
Nov 7, 2026, 8:21 PM@glyph @whitequark Even more that pyproject.toml itself, having PEP 517/8 define what cross-tooling builds should look like has been an absolute godsend. It's nothing short of miraculous to me that `pdm build` can build pure Python, Python+Rust, Python+C++, and Python+Zig/WASM packages using the exact same invocation.
@xgranade @whitequark yeah the number of times that a project with native dependencies worked so well on the first try that I didn't _notice_ it had native deps until months or even years later is truly staggering. if you had a native dep in 2011, it wasn't that I'd notice; my entire week was ruined
Nov 7, 2026, 8:25 PM@glyph @whitequark I'm working with enough obsolete packages that I still always notice native deps, and have developed a healthy fear of any packages that use dynamic linkage instead of static linkage, but that's absolutely my weird vantage point in trying to wrangle a cursed codebase that I didn't initially create.