Credential-Zugriff
Reads PyPI tokens, repository credentials, environment variables, and project config.
brew / Rang 443
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für poetry in AI-Agent-Workflows.
Agent-Sicherheit
poetry manages Python dependencies and package publishing.
Reads PyPI tokens, repository credentials, environment variables, and project config.
Can install dependencies and interact with package repositories.
Can build and publish Python packages.
Gate publish, config, and credentialed repository operations.
Allow lock/test/build; require approval for publish and credential changes.
Installation
brew install poetrylocal Homebrew formula metadata
sudo port install poetryMacPorts ports tree · python/poetry/Portfile · Quelle: api.github.com
sudo apk add poetryAlpine Linux edge package indexes · poetry · Quelle: dl-cdn.alpinelinux.org
sudo dnf install poetryFedora Rawhide package metadata · poetry · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#poetrynixpkgs package indexes · pkgs/by-name/po/poetry/package.nix · Quelle: api.github.com
sudo apt install python3-poetryDebian stable package indexes · python3-poetry · Quelle: deb.debian.org
sudo pacman -S python-poetryArch Linux sync databases · python-poetry · Quelle: geo.mirror.pkgbuild.com
scoop install main/poetryScoop official bucket manifest trees · bucket/poetry.json · Quelle: api.github.com
Überblick
Python package management tool
Verlauf
Poetry is an integrated Python project manager covering dependency declaration and resolution, lock files, virtual environments, building, and publishing.
Poetry was authored by Sébastien Eustace as an integrated Python dependency-management and packaging tool. Its early releases established declarative project metadata, dependency resolution, virtual-environment management, building, and publishing.
The 1.0 release formalized the workflow in 2019. During the following 1.1 development cycle, core packaging functionality was extracted into poetry-core, allowing the build backend to operate independently of the full Poetry application. Later releases moved features such as export and shell into plugins and expanded standards-based pyproject.toml support.
Poetry became a prominent pyproject.toml-centered workflow by combining dependency resolution, lock files, isolated environments, package building, and publishing behind one command-line interface. It is packaged by Homebrew and many Linux, macOS, Windows, and declarative package ecosystems.
Its installation documentation recommends pipx as one supported way to isolate Poetry itself, while project environments and dependencies remain managed by Poetry.
A typical workflow initializes or opens a pyproject.toml project, adds dependencies, commits poetry.lock, and uses poetry install or poetry sync to reproduce the environment. Poetry can also build distributions and publish them to PyPI or configured private repositories.
Global application settings live in config.toml, project-local overrides in poetry.toml, and project metadata in pyproject.toml. Repository credentials normally use the system keyring; when keyring storage is unavailable or disabled, Poetry falls back to auth.toml.
Poetry helped popularize an integrated, lockfile-oriented alternative to assembling pip, virtualenv, build, and upload tools separately. Packaging enthusiasts care about its resolver behavior, lock-file compatibility, PEP adoption, build backend, repository authentication, and the boundary between the Poetry application and poetry-core.
Sicherheitslage
Für poetry wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/Library/Application Support/pypoetry/auth.toml~/Library/Preferences/pypoetry/auth.toml~/.config/pypoetry/auth.toml$XDG_CONFIG_HOME/pypoetry/auth.tomlCredential-bearing paths to review before unattended agent runs.
~/Library/Application Support/pypoetry/auth.toml~/Library/Preferences/pypoetry/auth.toml~/.config/pypoetry/auth.toml$XDG_CONFIG_HOME/pypoetry/auth.tomlExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
poetry | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:poetry |
|---|---|
| Version | 2.5.1 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/poetry |
| Homepage | https://python-poetry.org/ |
| Repository | https://github.com/python-poetry/poetry |
| Upstream-Dokumentation | https://python-poetry.org/ |
| Lizenz | MIT |
| Quellarchiv | https://files.pythonhosted.org/packages/43/86/204ef622b09005c0290b4cb23cc8178b0fdd52d8d6b36ad6d78dab447035/poetry-2.5.1.tar.gz |
| Zuletzt aktualisiert | 2026-10-24T11:37:07Z |
| Pulse | updated |
| Abhängigkeiten | certifi, cffi, python@3.15 |
| Build-Abhängigkeiten | cmake, ninja, rust |
| Von macOS bereitgestellte Bibliotheken | libffi |
| Bottle | verfügbar (auf arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | poetry |
| Version Scheme | 0 |
| Revision | 2 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
python3-poetry 2.1.2+dfsg-1+deb13u1
Python dependency management and packaging made easy (Python 3)
sudo apt install python3-poetrypoetry
nix profile install nixpkgs#poetrypython3-poetry 1.8.2+dfsg-1ubuntu2
Python dependency management and packaging made easy (Python 3)
sudo apt install python3-poetrypoetry 2.3.3-r0
Python3 dependency management and packaging system
sudo apk add poetrypoetry-pyc 2.3.3-r0
Precompiled Python bytecode for poetry
sudo apk add poetry-pycpoetry 2.4.1-5.fc46
Python dependency management and packaging made easy
sudo dnf install poetrypython3-poetry 2.4.1-5.fc46
Python dependency management and packaging made easy
sudo dnf install python3-poetrypython-poetry 2.4.1-1
Python dependency management and packaging made easy
sudo pacman -S python-poetrypoetry
sudo port install poetrymain/poetry
scoop install main/poetryQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.