#1101900 nala has incorrect dependencies (pip-related)

#1101900#5
Date:
2025-04-02 03:32:12 UTC
From:
To:
Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate
***

   * What led up to the situation?
1) I installed nala (sudo apt install nala)
2) Installed python3-pipdeptree (sudo apt install python3-pipdeptree)
3) ran pipdeptree (python3 -m pipdeptree)
   * What was the outcome of this action?
Output from pipdeptree showed conflicting dependencies for nala.
"Warning!!! Possibly conflicting dependencies found:
        * nala==0.15.4
         - rich [required: >=12.4.4,<13.0.0, installed: 13.3.1]
         - typer [required: >=0.4.1,<0.5.0, installed: 0.7.0]"

The above apparently occurs because the nala package depends on
python3-rich and python3-typer, without any reference to version numbers.
But in /lib/python3/dist-packages/nala-0.15.4.dist-info/METADATA, it has
the following lines:
Requires-Dist: rich (>=12.4.4,<13.0.0)
        Requires-Dist: typer (>=0.4.1,<0.5.0)

And so, when I installed nala, it installed python3-rich at version
13.3.1-1 and python3-typer at version 0.7.0-1, both of which are apparently
too new.
Which is a mismatch between the debian package dependency and the
dependencies of the installed package
   * What outcome did you expect instead?
The dependencies of the package to match that of the installation.

*** End of the template - remove these template lines ***

#1101900#10
Date:
2026-05-14 06:08:25 UTC
From:
To:
nala-0.16.0 still has incorrect dependencies.
The debian package nala-0.16.0 depends on python3-anyio without mention of
version, so on trixie it installs python3-anyio version 4.8.0-3.

But nala's own python metadata says it depends on anyio version being at
least 4.9.0 and less 5.0.0. On trixie, no version of python3-anyio is
available in trixie that matches those dependency requirements.

$ dpkg -l  | grep nala
ii  nala                                             0.16.0
                   all          Commandline frontend for the APT package
manager
$ dpkg -l  | grep python3-anyio
ii  python3-anyio                                    4.8.0-3
                    all          Asynchronous compatibility layer (Python 3)
$ dpkg -s nala | grep Depends
Depends: python3-anyio, python3-httpx (>= 0.17.0), python3-pexpect,
python3-rich, python3-tomli, python3-typer, python3-typing-extensions,
python3:any, apt, python3-apt, python3-debian
$ grep anyio /lib/python3/dist-packages/nala-0.16.0.dist-info/METADATA
Requires-Dist: anyio (>=4.9.0,<5.0.0)
$ pip check | grep nala
nala 0.16.0 has requirement anyio<5.0.0,>=4.9.0, but you have anyio 4.8.0.