[craigds]

git urls are tricky to use with many tools (like pip-compile) though. At best they're slow, since things like "what's the latest version?" require downloading the repo.

We forked some things into a private DevPI instance at present for that reason (well, also for latency)

[orf]

Pipenv locks the VCS dependency to the commit, making pulling very fast.

[andyfleming]

Does it do a shallow pull or pull a tarball of the source?

[orf]

Shallow pull. You can specify the github tarball URL if you’d prefer.