-
-
Notifications
You must be signed in to change notification settings - Fork 24
Description
Running ORT on a python project with python-inspector gives the following error when using non-production tags:
PIP failed to resolve dependencies for path 'requirements.txt': IOException: Running 'python-inspector --python-version 313 --operating-system linux --json-pdt /tmp/ort-PythonInspector14123014316159800466/python-inspector5821545113666907844.json --analyze-setup-py-insecurely --requirement project/requirements.txt' in 'project' failed with exit code 1: Traceback (most recent call last): File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/python_inspector/resolve_cli.py", line 259, in resolve_dependencies resolution_result: Dict = resolver_api( File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/python_inspector/api.py", line 283, in resolve_dependencies resolution, purls = resolve( File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/python_inspector/api.py", line 374, in resolve resolved_dependencies, packages = get_resolved_dependencies( File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/python_inspector/api.py", line 465, in get_resolved_dependencies resolver_results = resolver.resolve(requirements=requirements, max_rounds=max_rounds) File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/resolvelib/resolvers/resolution.py", line 596, in resolve state = resolution.resolve(requirements, max_rounds=max_rounds) File "/opt/python/versions/3.9.5/lib/python3.9/site-packages/resolvelib/resolvers/resolution.py", line 537, in resolve raise ResolutionImpossible(self.state.backtrack_causes) resolvelib.resolvers.exceptions.ResolutionImpossible: [RequirementInformation(requirement=<Requirement('greenlet==3.0.0rc3')>, parent=None), RequirementInformation(requirement=<Requirement('greenlet>=2.0.0')>, parent=Candidate(name='gevent', version=<Version('23.9.1')>, extras=set()))]
The dependencies are as follows:
greenlet==3.0.0rc3
gevent==23.9.1
The two dependencies are resolvable by PIP, tested with Python 3.9.3 and 3.11.7 with python>=3.13 it is not resolvable anymore:
.venv/bin/pip install gevent==23.9.1 greenlet==3.0.0rc3
...
Successfully installed gevent-23.9.1 greenlet-3.0.0rc3 setuptools-80.9.0 zope.event-5.1.1 zope.interface-7.2
Running python inspector on this file gives the following outputs:
python 3.9 and 3.10
.venv/bin/python-inspector --requirement requirements.txt -p 39 -o macos --json-pdt tmp.json
Traceback (most recent call last):
File ".venv/lib/python3.9/site-packages/python_inspector/resolve_cli.py", line 259, in resolve_dependencies
resolution_result: Dict = resolver_api(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 283, in resolve_dependencies
resolution, purls = resolve(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 374, in resolve
resolved_dependencies, packages = get_resolved_dependencies(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 465, in get_resolved_dependencies
resolver_results = resolver.resolve(requirements=requirements, max_rounds=max_rounds)
File ".venv/lib/python3.9/site-packages/resolvelib/resolvers/resolution.py", line 596, in resolve
state = resolution.resolve(requirements, max_rounds=max_rounds)
File ".venv/lib/python3.9/site-packages/resolvelib/resolvers/resolution.py", line 537, in resolve
raise ResolutionImpossible(self.state.backtrack_causes)
resolvelib.resolvers.exceptions.ResolutionImpossible: [RequirementInformation(requirement=<Requirement('greenlet==3.0.0rc3')>, parent=None), RequirementInformation(requirement=<Requirement('greenlet>=2.0.0; platform_python_implementation == "CPython" and python_version < "3.11"')>, parent=Candidate(name='gevent', version=<Version('23.9.1')>, extras=set()))]
python 3.11
.venv/bin/python-inspector --requirement requirements.txt -p 311 -o macos --json-pdt tmp.json
No output, successfully finished
python 3.13
.venv/bin/python-inspector --requirement requirements.txt -p 313 -o macos --json-pdt tmp.json
Traceback (most recent call last):
File ".venv/lib/python3.9/site-packages/python_inspector/resolve_cli.py", line 259, in resolve_dependencies
resolution_result: Dict = resolver_api(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 283, in resolve_dependencies
resolution, purls = resolve(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 374, in resolve
resolved_dependencies, packages = get_resolved_dependencies(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 459, in get_resolved_dependencies
asyncio.run(gather_dependencies())
File "/opt/homebrew/Cellar/[email protected]/3.9.23/Frameworks/Python.framework/Versions/3.9/lib/python3.9/asyncio/runners.py", line 44, in run
return loop.run_until_complete(main)
File "/opt/homebrew/Cellar/[email protected]/3.9.23/Frameworks/Python.framework/Versions/3.9/lib/python3.9/asyncio/base_events.py", line 647, in run_until_complete
return future.result()
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 455, in gather_dependencies
return await asyncio.gather(
File ".venv/lib/python3.9/site-packages/python_inspector/api.py", line 447, in get_dependencies
await provider.fill_requirements_for_package(purl, candidate)
File ".venv/lib/python3.9/site-packages/python_inspector/resolution.py", line 481, in fill_requirements_for_package
dependencies.extend(
File ".venv/lib/python3.9/site-packages/python_inspector/resolution.py", line 347, in get_requirements_from_python_manifest
install_requires = install_requires[0].elts
AttributeError: 'Name' object has no attribute 'elts'
What I am expecting is that for 3.13, the error could be more descriptive to indicate it is unresolvable due to incompatibility of the package versions with python 3.13. For 3.10 and 3.9 it should work because the packages are compatible and resolvable, not sure why with 3.11 it does work in the end.
Important to note: none of this happens with greenlet==3.0.0
aside from error with 3.13, which is expected.