[mrweasel]

I just install the libraries I need using the operating systems package manager. Works perfectly fine. In development I do use virtualenvs because I need to keep track of which dependencies are required, but in production I just apt-get install.

[whalesalad]

that will 100% come to bite you in the ass one day

[mrweasel]

Probably, but it keeps my dependencies low and packages are automatically updated with backported security patches. So far it has never been an issue, but there has been frustrations when the features aren't available, because the Debian packages aren't the newest versions.

I wouldn't recommend it for something with hundreds of dependencies, but I also wouldn't recommend having hundreds of dependencies.

Poetry has messed up packages more often apt ever did, in my use cases. So far using apt as by package manager has failed me exactly zero times.

[whalesalad]

If it works, it works. Just be mindful and prepared for the day where it stops working.

[mrweasel]

> Just be mindful and prepared

Absolutely, but that's true for pretty much all the package managers, for all languages. They all break at some point.

One thing I would note is: Don't install your dependencies with apt in a development environment, you need to have a clean environment to avoid dragging unneeded dependencies into your production environments. That does mean that you need to find the exact version of your dependency in Debian, but it's a good exercise and ensures that you're mindful of your dependencies.

Be mindful, be prepared is good advise, in all aspects of life really.