guardicore/monkey

Write a script to avoid building up unused dependencies

Open

#1624 opened on Nov 22, 2021

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Python (6,250 stars) (752 forks)batch import
Beginner friendlyComplexity: MediumDevOpsHelp wantedImpact: Low

Description

Related to #1599.

Since there are no existing options that could help us track and make sure that unused dependencies don't keep building up (see comment on #1599 for more), write a script that can also be used with Travis and pre-commit to check and notify us of any unused dependencies.

Contributor guide

Tech stack
python
Domain
toolingci cd
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Python programmingPython dependency managementBasic CI/CD knowledge
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Investigate the existing dependency management in the repository, including requirements files. Review issue #1599 for context on previous discussion. Determine the appropriate tool to detect unused dependencies (e.g., pip check, pip unused). Implement a script that can be run locally and integrated with Travis CI and pre commit hooks. Ensure the script outputs clear messages and exits with non zero if unused dependencies are found.