Credential access
Reads PyPI tokens, repository credentials, environment variables, and project config.
brew / rank 443
Install poetry with Homebrew, apk, dnf, MacPorts, Nix, apt, pacman, scoop
Python package management tool. Version 2.5.1 via Homebrew; verified 2026-10-24. Also installable with debian: sudo apt install python3-poetry.
agent safety
Agent safety answer
poetry manages Python dependencies and package publishing.
Remote mutation
Can install dependencies and interact with package repositories.
Publish/artifact risk
Can build and publish Python packages.
Recommended control
Gate publish, config, and credentialed repository operations.
Agent-use guidance
Allow lock/test/build; require approval for publish and credential changes.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install poetrylocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install poetryMacPorts ports tree · python/poetry/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add poetryAlpine Linux edge package indexes · poetry · source: dl-cdn.alpinelinux.org
Fedora dnfverified · 92%
sudo dnf install poetryFedora Rawhide package metadata · poetry · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#poetrynixpkgs package indexes · pkgs/by-name/po/poetry/package.nix · source: api.github.com
Debian aptverified · 92%
sudo apt install python3-poetryDebian stable package indexes · python3-poetry · source: deb.debian.org
Arch Linux pacmanverified · 92%
sudo pacman -S python-poetryArch Linux sync databases · python-poetry · source: geo.mirror.pkgbuild.com
Windows
Scoopverified · 92%
scoop install main/poetryScoop official bucket manifest trees · bucket/poetry.json · source: api.github.com
overview
Package summary
Python package management tool
Project links
Commands and aliases
- poetry
history
Project history and usage
Poetry is an integrated Python project manager covering dependency declaration and resolution, lock files, virtual environments, building, and publishing.
Project history
Poetry was authored by Sébastien Eustace as an integrated Python dependency-management and packaging tool. Its early releases established declarative project metadata, dependency resolution, virtual-environment management, building, and publishing.
The 1.0 release formalized the workflow in 2019. During the following 1.1 development cycle, core packaging functionality was extracted into poetry-core, allowing the build backend to operate independently of the full Poetry application. Later releases moved features such as export and shell into plugins and expanded standards-based pyproject.toml support.
Adoption history
Poetry became a prominent pyproject.toml-centered workflow by combining dependency resolution, lock files, isolated environments, package building, and publishing behind one command-line interface. It is packaged by Homebrew and many Linux, macOS, Windows, and declarative package ecosystems.
Its installation documentation recommends pipx as one supported way to isolate Poetry itself, while project environments and dependencies remain managed by Poetry.
How it is used
A typical workflow initializes or opens a pyproject.toml project, adds dependencies, commits poetry.lock, and uses poetry install or poetry sync to reproduce the environment. Poetry can also build distributions and publish them to PyPI or configured private repositories.
Global application settings live in config.toml, project-local overrides in poetry.toml, and project metadata in pyproject.toml. Repository credentials normally use the system keyring; when keyring storage is unavailable or disabled, Poetry falls back to auth.toml.
Why package nerds care
Poetry helped popularize an integrated, lockfile-oriented alternative to assembling pip, virtualenv, build, and upload tools separately. Packaging enthusiasts care about its resolver behavior, lock-file compatibility, PEP adoption, build backend, repository authentication, and the boundary between the Poetry application and poetry-core.
Timeline
- 2018: The official history records the early 0.9 release line.
- 2019: Poetry 1.0.0 was released.
- 2020: Core build functionality was extracted into poetry-core during 1.1 development.
- 2022: Poetry 1.2 separated export functionality into a plugin.
- 2024: Poetry 1.8 added non-package mode and lazy wheel metadata retrieval.
Related projects
- poetry-core is Poetry's independently usable PEP 517 build backend and core metadata library.
- pipx is an officially documented way to install and maintain the Poetry CLI in an isolated environment.
- uv overlaps with Poetry's project, environment, lockfile, build, and publishing workflow while also managing Python installations and standalone tools.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for poetry. Package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 5 platform targets.
- Installs with 3 runtime dependencies.
- Build metadata lists 3 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- macOS
~/Library/Application Support/pypoetry/auth.toml~/Library/Preferences/pypoetry/auth.toml- Unix
~/.config/pypoetry/auth.toml$XDG_CONFIG_HOME/pypoetry/auth.toml
Credential files
Credential-bearing paths to review before unattended agent runs.
- macOS
~/Library/Application Support/pypoetry/auth.toml~/Library/Preferences/pypoetry/auth.toml- Unix
~/.config/pypoetry/auth.toml$XDG_CONFIG_HOME/pypoetry/auth.toml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
poetry | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-11-04
manager version2.5.1
manager updated2026-10-24
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://python-poetry.org/none confidence
install metadata
Package metadata
| Package key | brew:poetry |
|---|---|
| Version | 2.5.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/poetry |
| Homepage | https://python-poetry.org/ |
| Repository | https://github.com/python-poetry/poetry |
| Upstream docs | https://python-poetry.org/ |
| License | MIT |
| Source archive | https://files.pythonhosted.org/packages/43/86/204ef622b09005c0290b4cb23cc8178b0fdd52d8d6b36ad6d78dab447035/poetry-2.5.1.tar.gz |
| Last updated | 2026-10-24T11:37:07Z |
| Pulse | updated |
| Dependencies | certifi, cffi, python@3.15 |
| Build dependencies | cmake, ninja, rust |
| Uses from macOS | libffi |
| Bottle | available (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | poetry |
| Version Scheme | 0 |
| Revision | 2 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
python3-poetry 2.1.2+dfsg-1+deb13u1
Python dependency management and packaging made easy (Python 3)
sudo apt install python3-poetry- Section: python
- Architecture: all
- Source Package: poetry
- 24 dependencies
- normalized package name match
- Matched by: Poetry
Nix95%
poetry
nix profile install nixpkgs#poetry- normalized package name match
- Matched by: Poetry
Ubuntu apt95%
python3-poetry 1.8.2+dfsg-1ubuntu2
Python dependency management and packaging made easy (Python 3)
sudo apt install python3-poetry- Section: universe/python
- Architecture: all
- Source Package: poetry
- 26 dependencies
- normalized package name match
- Matched by: Poetry
apk95%
poetry 2.3.3-r0
Python3 dependency management and packaging system
sudo apk add poetry- License: MIT
- Architecture: x86_64
- Source Package: poetry
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Poetry
apk95%
poetry-pyc 2.3.3-r0
Precompiled Python bytecode for poetry
sudo apk add poetry-pyc- License: MIT
- Architecture: x86_64
- Source Package: poetry
- 1 dependencies
- normalized package name match
- Matched by: Poetry
dnf95%
poetry 2.4.1-5.fc46
Python dependency management and packaging made easy
sudo dnf install poetry- License: MIT
- Category: Unspecified
- Architecture: noarch
- Source Package: poetry
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Poetry
dnf95%
python3-poetry 2.4.1-5.fc46
Python dependency management and packaging made easy
sudo dnf install python3-poetry- License: MIT
- Category: Unspecified
- Architecture: noarch
- Source Package: poetry
- 2 dependencies
- 5 provides
- normalized package name match
- Matched by: Poetry
pacman95%
python-poetry 2.4.1-1
Python dependency management and packaging made easy
sudo pacman -S python-poetry- License: MIT
- Architecture: any
- 28 dependencies
- 1 provides
- 1 optional deps
- normalized package name match
- Matched by: Poetry
MacPorts95%
poetry
sudo port install poetry- normalized package name match
- Matched by: Poetry
Scoop95%
main/poetry
scoop install main/poetry- normalized package name match
- Matched by: Poetry
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation