# Dependency Tree for Python projects

**URL:** <https://community.sonatype.com/t/dependency-tree-for-python-projects/14161>\
**Category:** Sonatype Lifecycle & Firewall\
**Tags:** help, nexus-iq\
**Created:** [January 14, 2025, 7:05pm UTC](https://community.sonatype.com/t/dependency-tree-for-python-projects/14161 "2025-01-14T19:05:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![peter.drienko](https://avatars.discourse-cdn.com/v4/letter/p/bcef8e/32.png) [@peter.drienko](https://community.sonatype.com/u/peter.drienko)\
**Post date:** [January 14, 2025, 7:05pm UTC](https://community.sonatype.com/t/dependency-tree-for-python-projects/14161/1 "2025-01-14T19:05:08Z")

</div>

Hi,

Does Nexus IQ currently support Dependency Tree for Python projects? If not, when do you plan to implement it?  
Contrary to a simple requirements.txt file, poetry.lock contains dependency information about transient packages and can be used as a source for the dependency tree feature.

Our use case is the following:

We want to be able to label known, “vetted” packages and fail the report when a non-vetted package is included. We only want to do this for direct dependencies and ignore this on transient dependencies.

For this we want to create a policy which checks:

- If label IS “Vetted”  
AND
- If Dependency Type is “Direct”

Without having a Dependency Type, all dependencies are listed as Direct and I have no option to implement this.

Best regards,  
P

---

<div class="post-metadata">

**Author:** ![jzora](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jzora/32/4197_2.png) [@jzora](https://community.sonatype.com/u/jzora)\
**Post date:** [January 16, 2025, 4:09pm UTC](https://community.sonatype.com/t/dependency-tree-for-python-projects/14161/2 "2025-01-16T16:09:03Z")

</div>

Hi, Peter! Dependency tree isn’t currently supported for Python/.poetry and isn’t formally on our roadmap. However, we’re always looking to enhance visibility across every ecosystem. I’ll pass along your interest to our product leaders.
