compare
pip-tools vs Poetry
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | pip-tools | Poetry |
|---|---|---|
| Language | Python | Python |
| Licence | BSD-3-Clause | MIT |
| Stars | 8k | 34k |
| Latest | v7.6.2 | 2.5.1 |
| Last push | 2026-11-11 | 2026-11-10 |
| Release cadence | about 74 days between releases | about 10 days between releases |
| Active contributors | 7 commit authors on the default branch in the last 90 days | 36 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
pip-tools replaces Poetry. Alternatives to Poetry →
PartialLocks dependencies into pinned requirements files, without building or publishing packages.
Both replace Pipenv. Alternatives to Pipenv →
Partialpip-toolsCompiles pinned requirements files and syncs an environment from them, without managing virtualenvs.
Full replacementPoetryDependencies and lockfile in pyproject.toml instead of a Pipfile.
pip-tools
- v7.6.22026-10-07Fixed pip-compile sometimes adding --no-index to the recorded command even when it was not passed, with click 8.5.0 --…
- v7.6.12026-08-11Fixed handling of index URLs ending in /simple/ by improving URL normalization logic.
- v7.6.02026-07-182026-07-13
- v7.5.32026-02-112026-02-11
- v7.5.22025-11-122025-11-11
Poetry
- 2.5.12026-09-20Fix an issue where uninstalling a package with installer.builtin-uninstall set failed with a TypeError (#11077).
- 2.5.02026-09-19Add an installer.builtin-uninstall setting to uninstall packages with a built-in uninstaller instead of invoking pip un…
- 2.4.32026-09-05Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 (#11037).
- 2.4.22026-08-29Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not prov…
- 2.4.12026-05-09Re-allow installer==0.7.0 (#10887).
pip-tools
unsigned The latest release, v7.6.2, carries no signature GitHub could verify.
Loading the security report
Poetry
unsigned The latest release, 2.5.1, carries no signature GitHub could verify.
Loading the security report