---
id: 1919
title: "Moving Away from requirements.txt for More Secure Python Dependencies"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/moving-away-requirementstxt-more-secure-python-dependencies"
published_at: "2024-02-08T02:08:05Z"
tags: ["supply-chain", "dependency-management", "python", "package-management", "poetry", "supply-chain-security", "pipenv"]
phying_url: "https://phying.com/item/1919"
lang: en
---

# Moving Away from requirements.txt for More Secure Python Dependencies

## Summary

Why Python projects should move past requirements.txt: it lacks dependency resolution and sub-dependency management, and modern tools like Pipenv and Poetry provide lockfiles and better security.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-02-08T02:08:05Z
- **Original:** https://www.hackerone.com/blog/moving-away-requirementstxt-more-secure-python-dependencies
- **Phying News:** https://phying.com/item/1919