Comment by sneak

Why don’t we update pypi to require publishing dependency metadata along with packages, so that the deps can be resolved without running code?