Python-inspector processes certain dependencies for way too long

[bennati]

Python inspector takes too much time to process certain requirements.txt

For example, the time to process these requirements is more than 1 hour, while the time to process each individually is less than 5 minutes:
``
boto3==1.10.16
s3fs
tabulate

and

boto3==1.10.16
s3fs
seaborn

Could it be caused by cyclical dependencies?

[pombredanne]

Thanks for the report. Can you tell which target OS-arch and Python version you have used?
And which OS-arch and Python version you used to run python-inspector?

[bennati]

Hi, python inspector was run as follows:

python-inspector --python-version 310 --operating-system linux --json-pdt /...json --analyze-setup-py-insecurely --requirement .../src/requirements.txt --verbose

The host architecture is Linux and python 3.10

[pombredanne]

@bennati Thanks. The --analyze-setup-py-insecurely flags means things are live evaluated. We need to enable a verbose mode to trace what's going on.

[pombredanne]

there is some sorts of inifite loop IMHO

[pombredanne]

The culprit may be https://github.com/mwaskom/seaborn/blob/v0.8.1/setup.py but tabulate looks rather bland.

[bennati]

Any update on this? can I help somehow?

[pombredanne]

@bennati no update yet. Help would be mucho welcomed!

[bennati]

Opened PR upstream at resolvelib sarugaku/resolvelib#113

[pombredanne]

@bennati you rock! 🙇

[bennati]

Also related #110

[pombredanne]

sarugaku/resolvelib#113 by @bennati has been merged 🙇 ❤️ ... so we could likely start using it ASAP with "build from git"?... or wait a bit for a tag?

[bennati]

I would prefer asap… I was looking into submitting a PR which would use the latest resolvlib, but it seems to be an indirect dependency and I could not figure out which direct dependency to update

[pombredanne]

This is a direct dep: https://github.com/nexB/python-inspector/blob/f2b19f90a68f424825f00ab8d68abc5c1986d86a/setup.cfg#L67