Pipenv: tensorflow/html5lib“您的依赖项无法解决”但看不到问题

天哪，这是真的吗

最重要的是，这些古怪的版本存在安全漏洞

$ pipenv check
Checking PEP 508 requirements…
Passed!
Checking installed package safety…
25846: html5lib <0.99999999 resolved (0.9999999 installed)!
html5lib before 0.99999999 is vulnerable to a XSS attack. Upgrading avoids the XSS bug potentially caused by serializer allowing attribute values to be escaped out of in old browser versions, changing the quote_attr_values option on serializer to take one of three values, "always" (the old True value), "legacy" (the new option,  and the new default), and "spec" (the old False value, and the old default).

35693: html5lib <0.99999999 resolved (0.9999999 installed)!
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.

35694: html5lib <0.99999999 resolved (0.9999999 installed)!
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.

34965: bleach <2.1 resolved (1.5.0 installed)!
bleach 2.1 converts control characters (backspace particularly) to "?" preventing malicious copy-and-paste situations.

我认为问题部分是：
Could not find a version that matches html5lib...==0.9999999,>=0.99999999pre

我看不到>=0.99999999pre说明符的来源， pipenv graph输出中没有提到

它显然来自bleach包，但不是安装的版本：

bleach [required: ==1.5.0, installed: 1.5.0]

比较：
https://github.com/mozilla/bleach/blob/v1.5/setup.py

https://github.com/mozilla/bleach/blob/v2.1.3/setup.py

我从 PyPI下载了

setup.py 包含：

install_requires = [
    'six',
    # 3 9s up to but not including 8 9s, but not 4 9s or 5 9s because they're
    # busted
    'html5lib>=0.999,!=0.9999,!=0.99999,<0.99999999',
]

但是包的 PyPI 页面上的元信息显示了最新版本的要求（自然）：

需要分布
html5lib (!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre)
六

这里有问题吗？

进一步阅读上面链接的张量板问题线程......

更令人困惑的是， pip有自己的销售版本html5lib
https://github.com/pypa/pip/blob/9.0.1/pip/_vendor/html5lib/__init__.py
https://github.com/pypa/pip/blob/9.0.1/pip/_vendor/vendor.txt

html5lib==1.0b10

不确定这是否以某种可怕的方式参与

你用的是最新的吗？

我在我项目的 pipenv 外壳中

pipenv, version 11.6.1
pip 9.0.1
python 3.6

PyPI 的漂白剂 1.5.0 _wheel_ 中的元数据看起来也正确

冲突报告：

Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre

似乎完全符合 _latest_ (2.1.3) 版本的漂白剂的要求

install_requires = [
    'six',
    # >= 8 9s because of breaking API change
    # the 'pre' suffix is needed for supporting '1.0b*' versions
    'html5lib>=0.99999999pre,!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8',
]

从tensorboard https://github.com/tensorflow/tensorboard/blob/0.1.8/tensorboard/pip_package/setup.py添加到要求

REQUIRED_PACKAGES = [
    'numpy >= 1.11.0',
    'six >= 1.10.0',
    'protobuf >= 3.2.0',
    'werkzeug >= 0.11.10',
    'html5lib == 0.9999999',  # identical to 1.0b8
    'markdown >= 2.6.8',
    'bleach == 1.5.0',
]

所以在确定漂白剂==1.5.0 的要求时似乎发生了一些奇怪的事情

我有同样的问题。 pipenv install抱怨依赖项需要cryptography<1.0,>=1.7.2,>=1.8.1,>=1.8.2,>=1.9 （显然永远无法解决），但我在pipenv graph中看不到任何需要cryptography<1.0包。 我不知道该怎么做，因为它根本不会安装。

@skorokithakis请打开一个单独的问题

@anentropic你试过最新版本的 pipenv 吗？

@anentropic也请不要从 pipenv shell _inside_ 运行 pipenv，这不是为了工作。 从_outside_ pipenv shell 再试一次，如果它仍然损坏，请告诉我们

@techalchemy嗯，是的。

这实际上是该项目背后的主要设计主体

好的，我已经升级了 pipenv 11.6.1 --> 11.6.9

同样的问题

$ pipenv --version
pipenv, version 11.6.9
$ pipenv lock
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

我不知道这些版本号发生了什么。

不过，我可以告诉你，这不太可能很快改变。

当然，如果我能找到任何东西，我会继续研究它

更多细节：

• 我目前没有 Pipfile.lock（无法创建）
• 我尝试停用我的 pipenv shell，删除关联的 virtualenv 文件夹并运行pipenv install （即从头开始）......同样的问题

我也可以用一个最小的例子来重现......在一个新的 shell 中，创建一个空目录，下面的 Pipfile 并运行pipenv install

[[source]]

url = "https://pypi.python.org/simple"
verify_ssl = true
name = "pypi"


[packages]

tensorflow = "*"


[requires]

python_version = "3.6"

pipenv lock --verbose应该对此有所了解

==0.9999999,>=0.99999999pre对我来说似乎无法解决。

这种版本控制方案简直荒谬

关键是>=0.99999999pre要求归因于bleach==1.5.0但该版本中的项目未指定该依赖项

我不知道 pipenv 或底层工具从哪里获取依赖信息，PyPI 服务器是否以某种方式存在？

这是详细的输出：

Locking [dev-packages] dependencies…
Using pip: -i https://pypi.python.org/simple

                          ROUND 1
Current constraints:

Finding the best candidates:

Finding secondary dependencies:
------------------------------------------------------------
Result of round 1: stable, done

Locking [packages] dependencies…
Using pip: -i https://pypi.python.org/simple

                          ROUND 1
Current constraints:
  tensorflow

Finding the best candidates:
  found candidate tensorflow==1.6.0 (constraint was <any>)

Finding secondary dependencies:
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26

New dependencies found in this round:
  adding ['absl-py', '>=0.1.6', '[]']
  adding ['astor', '>=0.6.0', '[]']
  adding ['gast', '>=0.2.0', '[]']
  adding ['grpcio', '>=1.8.6', '[]']
  adding ['numpy', '>=1.13.3', '[]']
  adding ['protobuf', '>=3.4.0', '[]']
  adding ['six', '>=1.10.0', '[]']
  adding ['tensorboard', '<1.7.0,>=1.6.0', '[]']
  adding ['termcolor', '>=1.1.0', '[]']
  adding ['wheel', '>=0.26', '[]']
Removed dependencies in this round:
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 1: not stable

                          ROUND 2
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  gast>=0.2.0
  grpcio>=1.8.6
  numpy>=1.13.3
  protobuf>=3.4.0
  six>=1.10.0
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)
  found candidate numpy==1.14.2 (constraint was >=1.13.3)
  found candidate protobuf==3.5.2 (constraint was >=3.4.0)
  found candidate six==1.11.0 (constraint was >=1.10.0)
  found candidate tensorboard==1.6.0 (constraint was >=1.6.0,<1.7.0)
  found candidate tensorflow==1.6.0 (constraint was <any>)
  found candidate termcolor==1.1.0 (constraint was >=1.1.0)
  found candidate wheel==0.30.0 (constraint was >=0.26)

Finding secondary dependencies:
  absl-py==0.1.11           requires six
  wheel==0.30.0             requires -
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26
  termcolor==1.1.0          requires -
  tensorboard==1.6.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"
  protobuf==3.5.2           requires setuptools, six>=1.9
  gast==0.2.0               requires -
  astor==0.6.2              requires -
  numpy==1.14.2             requires -
  grpcio==1.10.0            requires protobuf>=3.5.0.post1, six>=1.5.2
  six==1.11.0               requires -

New dependencies found in this round:
  adding ['bleach', '==1.5.0', '[]']
  adding ['html5lib', '==0.9999999', '[]']
  adding ['markdown', '>=2.6.8', '[]']
  adding ['numpy', '>=1.12.0,>=1.13.3', '[]']
  adding ['protobuf', '>=3.4.0,>=3.5.0.post1', '[]']
  adding ['six', '>=1.10.0,>=1.5.2,>=1.9', '[]']
  adding ['werkzeug', '>=0.11.10', '[]']
Removed dependencies in this round:
  removing ['numpy', '>=1.13.3', '[]']
  removing ['protobuf', '>=3.4.0', '[]']
  removing ['six', '>=1.10.0', '[]']
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 2: not stable

                          ROUND 3
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  bleach==1.5.0
  gast>=0.2.0
  grpcio>=1.8.6
  html5lib==0.9999999
  markdown>=2.6.8
  numpy>=1.12.0,>=1.13.3
  protobuf>=3.4.0,>=3.5.0.post1
  six>=1.10.0,>=1.5.2,>=1.9
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate bleach==1.5.0 (constraint was ==1.5.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)
  found candidate html5lib==0.9999999 (constraint was ==0.9999999)
  found candidate markdown==2.6.11 (constraint was >=2.6.8)
  found candidate numpy==1.14.2 (constraint was >=1.12.0,>=1.13.3)
  found candidate protobuf==3.5.2 (constraint was >=3.4.0,>=3.5.0.post1)
  found candidate six==1.11.0 (constraint was >=1.10.0,>=1.5.2,>=1.9)
  found candidate tensorboard==1.6.0 (constraint was >=1.6.0,<1.7.0)
  found candidate tensorflow==1.6.0 (constraint was <any>)
  found candidate termcolor==1.1.0 (constraint was >=1.1.0)
  found candidate werkzeug==0.14.1 (constraint was >=0.11.10)
  found candidate wheel==0.30.0 (constraint was >=0.26)

Finding secondary dependencies:
  numpy==1.14.2             requires -
  werkzeug==0.14.1          requires -
  absl-py==0.1.11           requires six
  html5lib==0.9999999       requires six>=1.9, webencodings
  gast==0.2.0               requires -
  bleach==1.5.0             requires html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre, six
  protobuf==3.5.2           requires setuptools, six>=1.9
  markdown==2.6.11          requires -
  six==1.11.0               requires -
  tensorboard==1.6.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26
  astor==0.6.2              requires -
  termcolor==1.1.0          requires -
  grpcio==1.10.0            requires protobuf>=3.5.0.post1, six>=1.5.2

New dependencies found in this round:
  adding ['html5lib', '!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre', '[]']
  adding ['webencodings', '', '[]']
Removed dependencies in this round:
  removing ['html5lib', '==0.9999999', '[]']
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 3: not stable

                          ROUND 4
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  bleach==1.5.0
  gast>=0.2.0
  grpcio>=1.8.6
  html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
  markdown>=2.6.8
  numpy>=1.12.0,>=1.13.3
  protobuf>=3.4.0,>=3.5.0.post1
  six>=1.10.0,>=1.5.2,>=1.9
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  webencodings
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate bleach==1.5.0 (constraint was ==1.5.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)
Using pip: -i https://pypi.python.org/simple

                          ROUND 1
Current constraints:
  tensorflow

Finding the best candidates:
  found candidate tensorflow==1.6.0 (constraint was <any>)

Finding secondary dependencies:
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26

New dependencies found in this round:
  adding ['absl-py', '>=0.1.6', '[]']
  adding ['astor', '>=0.6.0', '[]']
  adding ['gast', '>=0.2.0', '[]']
  adding ['grpcio', '>=1.8.6', '[]']
  adding ['numpy', '>=1.13.3', '[]']
  adding ['protobuf', '>=3.4.0', '[]']
  adding ['six', '>=1.10.0', '[]']
  adding ['tensorboard', '<1.7.0,>=1.6.0', '[]']
  adding ['termcolor', '>=1.1.0', '[]']
  adding ['wheel', '>=0.26', '[]']
Removed dependencies in this round:
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 1: not stable

                          ROUND 2
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  gast>=0.2.0
  grpcio>=1.8.6
  numpy>=1.13.3
  protobuf>=3.4.0
  six>=1.10.0
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)
  found candidate numpy==1.14.2 (constraint was >=1.13.3)
  found candidate protobuf==3.5.2 (constraint was >=3.4.0)
  found candidate six==1.11.0 (constraint was >=1.10.0)
  found candidate tensorboard==1.6.0 (constraint was >=1.6.0,<1.7.0)
  found candidate tensorflow==1.6.0 (constraint was <any>)
  found candidate termcolor==1.1.0 (constraint was >=1.1.0)
  found candidate wheel==0.30.0 (constraint was >=0.26)

Finding secondary dependencies:
  astor==0.6.2              requires -
  six==1.11.0               requires -
  tensorboard==1.6.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"
  numpy==1.14.2             requires -
  grpcio==1.10.0            requires protobuf>=3.5.0.post1, six>=1.5.2
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26
  wheel==0.30.0             requires -
  protobuf==3.5.2           requires setuptools, six>=1.9
  termcolor==1.1.0          requires -
  absl-py==0.1.11           requires six
  gast==0.2.0               requires -

New dependencies found in this round:
  adding ['bleach', '==1.5.0', '[]']
  adding ['html5lib', '==0.9999999', '[]']
  adding ['markdown', '>=2.6.8', '[]']
  adding ['numpy', '>=1.12.0,>=1.13.3', '[]']
  adding ['protobuf', '>=3.4.0,>=3.5.0.post1', '[]']
  adding ['six', '>=1.10.0,>=1.5.2,>=1.9', '[]']
  adding ['werkzeug', '>=0.11.10', '[]']
Removed dependencies in this round:
  removing ['numpy', '>=1.13.3', '[]']
  removing ['protobuf', '>=3.4.0', '[]']
  removing ['six', '>=1.10.0', '[]']
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 2: not stable

                          ROUND 3
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  bleach==1.5.0
  gast>=0.2.0
  grpcio>=1.8.6
  html5lib==0.9999999
  markdown>=2.6.8
  numpy>=1.12.0,>=1.13.3
  protobuf>=3.4.0,>=3.5.0.post1
  six>=1.10.0,>=1.5.2,>=1.9
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate bleach==1.5.0 (constraint was ==1.5.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)
  found candidate html5lib==0.9999999 (constraint was ==0.9999999)
  found candidate markdown==2.6.11 (constraint was >=2.6.8)
  found candidate numpy==1.14.2 (constraint was >=1.12.0,>=1.13.3)
  found candidate protobuf==3.5.2 (constraint was >=3.4.0,>=3.5.0.post1)
  found candidate six==1.11.0 (constraint was >=1.10.0,>=1.5.2,>=1.9)
  found candidate tensorboard==1.6.0 (constraint was >=1.6.0,<1.7.0)
  found candidate tensorflow==1.6.0 (constraint was <any>)
  found candidate termcolor==1.1.0 (constraint was >=1.1.0)
  found candidate werkzeug==0.14.1 (constraint was >=0.11.10)
  found candidate wheel==0.30.0 (constraint was >=0.26)

Finding secondary dependencies:
  protobuf==3.5.2           requires setuptools, six>=1.9
  html5lib==0.9999999       requires six>=1.9, webencodings
  gast==0.2.0               requires -
  bleach==1.5.0             requires html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre, six
  tensorflow==1.6.0         requires absl-py>=0.1.6, astor>=0.6.0, gast>=0.2.0, grpcio>=1.8.6, numpy>=1.13.3, protobuf>=3.4.0, six>=1.10.0, tensorboard<1.7.0,>=1.6.0, termcolor>=1.1.0, wheel>=0.26
  markdown==2.6.11          requires -
  termcolor==1.1.0          requires -
  astor==0.6.2              requires -
  numpy==1.14.2             requires -
  six==1.11.0               requires -
  absl-py==0.1.11           requires six
  tensorboard==1.6.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"
  grpcio==1.10.0            requires protobuf>=3.5.0.post1, six>=1.5.2
  wheel==0.30.0             requires -
  werkzeug==0.14.1          requires -

New dependencies found in this round:
  adding ['html5lib', '!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre', '[]']
  adding ['webencodings', '', '[]']
Removed dependencies in this round:
  removing ['html5lib', '==0.9999999', '[]']
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 3: not stable

                          ROUND 4
Current constraints:
  absl-py>=0.1.6
  astor>=0.6.0
  bleach==1.5.0
  gast>=0.2.0
  grpcio>=1.8.6
  html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
  markdown>=2.6.8
  numpy>=1.12.0,>=1.13.3
  protobuf>=3.4.0,>=3.5.0.post1
  six>=1.10.0,>=1.5.2,>=1.9
  tensorboard<1.7.0,>=1.6.0
  tensorflow
  termcolor>=1.1.0
  webencodings
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate absl-py==0.1.11 (constraint was >=0.1.6)
  found candidate astor==0.6.2 (constraint was >=0.6.0)
  found candidate bleach==1.5.0 (constraint was ==1.5.0)
  found candidate gast==0.2.0 (constraint was >=0.2.0)
  found candidate grpcio==1.10.0 (constraint was >=1.8.6)

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1
Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

听着，我们对此无能为力。

试试 11.8.0

成功！

我想我在 django 和 django_pyodbc_azure 中发现了类似的错误。 我需要安装版本 <2 所以我运行这个命令：

pipenv install django<2 django-pyodbc-azure<2

这是我得到的：

Installing django<2…
Collecting django<2
  Using cached Django-1.11.11-py2.py3-none-any.whl
Collecting pytz (from django<2)
  Using cached pytz-2018.3-py2.py3-none-any.whl
Installing collected packages: pytz, django
Successfully installed django-1.11.11 pytz-2018.3

Adding django<2 to Pipfile's [packages]…
Installing django-pyodbc-azure<2…
Collecting django-pyodbc-azure<2
  Using cached django_pyodbc_azure-1.11.11.0-py2.py3-none-any.whl
Collecting pyodbc>=3.0 (from django-pyodbc-azure<2)
  Using cached pyodbc-4.0.22-cp36-cp36m-win_amd64.whl
Requirement already satisfied: Django<2.0,>=1.11.11 in c:\users\msopko\.virtualenvs\kml_internal--4e53ydp\lib\site-packages (from django-pyodbc-azure<2)
Requirement already satisfied: pytz in c:\users\msopko\.virtualenvs\kml_internal--4e53ydp\lib\site-packages (from Django<2.0,>=1.11.11->django-pyodbc-azure<2)
Installing collected packages: pyodbc, django-pyodbc-azure
Successfully installed django-pyodbc-azure-1.11.11.0 pyodbc-4.0.22

Adding django-pyodbc-azure<2 to Pipfile's [packages]…
Pipfile.lock not found, creating…
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches django<2,<2.1,>=2.0.3
Tried: 1.1.3, 1.1.4, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.4.10, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.4.19, 1.4.20, 1.4.21, 1.4.22, 1.5, 1.5.1, 1.5.2, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.8, 1.5.9, 1.5.10, 1.5.11, 1.5.12, 1.5.12, 1.6, 1.6, 1.6.1, 1.6.1, 1.6.2, 1.6.2, 1.6.3, 1.6.3, 1.6.4, 1.6.4, 1.6.5, 1.6.5, 1.6.6, 1.6.6, 1.6.7, 1.6.7, 1.6.8, 1.6.8, 1.6.9, 1.6.9, 1.6.10, 1.6.10, 1.6.11, 1.6.11, 1.7, 1.7, 1.7.1, 1.7.1, 1.7.2, 1.7.2, 1.7.3, 1.7.3, 1.7.4, 1.7.4, 1.7.5, 1.7.5, 1.7.6, 1.7.6, 1.7.7, 1.7.7, 1.7.8, 1.7.8, 1.7.9, 1.7.9, 1.7.10, 1.7.10, 1.7.11, 1.7.11, 1.8a1, 1.8b1, 1.8b2, 1.8rc1, 1.8, 1.8, 1.8.1, 1.8.1, 1.8.2, 1.8.2, 1.8.3, 1.8.3, 1.8.4, 1.8.4, 1.8.5, 1.8.5, 1.8.6, 1.8.6, 1.8.7, 1.8.7, 1.8.8, 1.8.8, 1.8.9, 1.8.9, 1.8.10, 1.8.10, 1.8.11, 1.8.11, 1.8.12, 1.8.12, 1.8.13, 1.8.13, 1.8.14, 1.8.14, 1.8.15, 1.8.15, 1.8.16, 1.8.16, 1.8.17, 1.8.17, 1.8.18, 1.8.18, 1.8.19, 1.8.19, 1.9a1, 1.9b1, 1.9rc1, 1.9rc2, 1.9, 1.9, 1.9.1, 1.9.1, 1.9.2, 1.9.2, 1.9.3, 1.9.3, 1.9.4, 1.9.4, 1.9.5, 1.9.5, 1.9.6, 1.9.6, 1.9.7, 1.9.7, 1.9.8, 1.9.8, 1.9.9, 1.9.9, 1.9.10, 1.9.10, 1.9.11, 1.9.11, 1.9.12, 1.9.12, 1.9.13, 1.9.13, 1.10a1, 1.10a1, 1.10b1, 1.10b1, 1.10rc1, 1.10rc1, 1.10, 1.10, 1.10.1, 1.10.1, 1.10.2, 1.10.2, 1.10.3, 1.10.3, 1.10.4, 1.10.4, 1.10.5, 1.10.5, 1.10.6, 1.10.6, 1.10.7, 1.10.7, 1.10.8, 1.10.8, 1.11a1, 1.11b1, 1.11rc1, 1.11rc1, 1.11, 1.11, 1.11.1, 1.11.1, 1.11.2, 1.11.2, 1.11.3, 1.11.3, 1.11.4, 1.11.4, 1.11.5, 1.11.5, 1.11.6, 1.11.6, 1.11.7, 1.11.7, 1.11.8, 1.11.8, 1.11.9, 1.11.9, 1.11.10, 1.11.10, 1.11.11, 1.11.11, 2.0a1, 2.0b1, 2.0rc1, 2.0, 2.0, 2.0.1, 2.0.1, 2.0.2, 2.0.2, 2.0.3, 2.0.3

我通过指定分支解决了这个错误：
django-pyodbc-azure = {git = "https://github.com/michiya/django-pyodbc-azure", ref = "azure-1.11"}

我已经升级到 11.8.0 但仍然有同样的问题

但是我的同事无法从我的最小示例中复制它

我目前正在调试，当我有一些信息时会发布更多信息

好的，这很奇怪

我让它工作：

$ pyenv virtualenv pipenvtemp
$ pyenv activate pipenvtemp
pipenvtemp > $ pip install pipenv
pipenvtemp > $ pipenv lock

这已经破坏了我对 pipenv 的“外部”安装：

pipenvtemp > $ source deactivate
$ pipenv lock
pyenv: pipenv: command not found

The `pipenv' command exists in these Python versions:
  2.7.11/envs/pipenvtemp
  pipenvtemp

$ pipsi install pipenv
pipenv is already installed

所以我的系统上的 pyenv-virtualenv、pipsi 和 pipenv 之间有一些可怕的交互

我以为我忠实地遵循了安装说明，但可能我的系统的现有状态不兼容

我想现在我必须尝试吹走我所有的 Python 并从头开始设置我的开发环境😢

哦，它以某种方式特定于 python 3，我用我的实际项目尝试了上面的 pyenv-virtualenv 技巧，但它没有用。

如果我用最小的例子再试一次，但使用 Python 3.6.4 而不是 2.7，那么它就行不通了：

$ pyenv virtualenv 3.6.4 pipenvtemp-py3
$ pyenv activate pipenvtemp-py3
pipenvtemp-py3 > $ pip install pipenv
pipenvtemp-py3 > $ rm Pipfile.lock
pipenvtemp-py3 > $ pipenv lock
Courtesy Notice: Pipenv found itself running within a virtual environment, so it will automatically use that environment, instead of creating its own for any project.
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

@anentropic只需卸载您在任何地方拥有的所有 pipenv，然后使用带有--user系统 3.6.4 重新安装

好吧，我找到了问题和解决方案，如果没有解释它是如何发生的。

我花了一段时间逐步浏览底层代码，即

from pipenv.patched.piptools.repositories import PyPIRepository
from pipenv.patched.piptools.scripts.compile import get_pip_command
from pipenv.patched.notpip.req.req_install import InstallRequirement
from pipenv.patched.piptools.resolver import Resolver

pip_command = get_pip_command()
pip_options, _ = pip_command.parse_args([])
session = pip_command._build_session(pip_options)
pypi = PyPIRepository(pip_options=pip_options, use_json=False, session=session)

# first observe that this returns correct constraints:
ireq = InstallRequirement.from_line('bleach==1.5.0')
pypi.get_dependencies(ireq)
{<InstallRequirement object: six (from bleach==1.5.0) editable=False>,
 <InstallRequirement object: html5lib!=0.9999,!=0.99999,<0.99999999,>=0.999 (from bleach==1.5.0) editable=False>}

# I added the following breakpoint at pipenv/patched/piptools/resolver.py:200
            if str(best_match.req) == 'bleach==1.5.0':
                import ipdb; ipdb.set_trace()

# then ran the resolver:
ireq = InstallRequirement.from_line('tensorflow==1.3.0')
resolver = Resolver(constraints=[ireq], repository=pypi)
resolver.resolve()

# stepping through we fail this check, showing that 'html5lib' is already in the cache
    if ireq not in self.dependency_cache:

# so next it fetches dep from cache:
ipdb> pp self.dependency_cache[ireq]
['html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre',
 'six']
# aha!
ipdb> self.dependency_cache._cache_file
'/Users/anentropic/Library/Caches/pipenv/depcache-py3.6.json'

不知何故，虚假的html5lib>=0.99999999pre要求卡在了依赖项缓存文件中。

现在我知道该怎么做了...

pipenvtemp-py3 $ rm /Users/anentropic/Library/Caches/pipenv/depcache-py3.6.json
pipenvtemp-py3 $ pipenv lock
Courtesy Notice: Pipenv found itself running within a virtual environment, so it will automatically use that environment, instead of creating its own for any project.
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

成功 - 创建锁定文件没有错误。

这也解释了为什么它在 Python 2.7 下工作 - 我假设因为 pipenv 每个 python 版本都有一个单独的依赖缓存文件。

@anentropic感谢您的更新！ 我们应该直接推荐，错误我很高兴你把它整理好了！

@anentropic @techalchemy我面临同样的问题，但删除/Users/.../Library/Caches/pipenv/depcache-py3.6.json并没有帮助我。 关于我还能尝试什么的任何建议？ 谢谢！

  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==1.0b8,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

@henadzit请为您的平台提供信息。 打开一个新问题以查看需要哪些信息来调试您的问题。 您不需要提交新问题，只需要检查字段并在此处相应地提供它们。

@uranusjr ，当然！ 这里是

Pipenv 版本： '11.9.0'

管道位置： '/Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/lib/python3.6/site-packages/pipenv'

Python 位置： '/Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin/python'

PATH其他 Python 安装：

• 2.7 : /usr/bin/python2.7
• 2.7 : /usr/bin/python2.7
• 3.6 : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin/python3.6m
• 3.6 : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin/python3.6
• 3.6 : /Users/henadzit/.pyenv/shims/python3.6
• 3.6 : /usr/local/bin/python3.6

• 3.6 : /usr/local/bin/python3.6

• 3.6.4 : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin/python

• 3.6.4 : /Users/henadzit/.pyenv/shims/python
• 2.7.10 : /usr/bin/python
• 3.6.4 : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin/python3
• 3.6.4 : /Users/henadzit/.pyenv/shims/python3
• 3.6.4 : /usr/local/bin/python3
• 3.6.4 : /usr/local/bin/python3

PEP 508 信息：

{'implementation_name': 'cpython',
 'implementation_version': '3.6.4',
 'os_name': 'posix',
 'platform_machine': 'x86_64',
 'platform_python_implementation': 'CPython',
 'platform_release': '17.4.0',
 'platform_system': 'Darwin',
 'platform_version': 'Darwin Kernel Version 17.4.0: Sun Dec 17 09:19:54 PST '
                     '2017; root:xnu-4570.41.2~1/RELEASE_X86_64',
 'python_full_version': '3.6.4',
 'python_version': '3.6',
 'sys_platform': 'darwin'}

系统环境变量：

• TERM_PROGRAM
• PIP_PYTHON_PATH
• TERM
• SHELL
• TMPDIR
• DOCKER_HOST
• Apple_PubSub_Socket_Render
• PYTHONUNBUFFERED
• TERM_PROGRAM_VERSION
• TERM_SESSION_ID
• USER
• DOCKER_MACHINE_NAME
• CPATH
• SSH_AUTH_SOCK
• __CF_USER_TEXT_ENCODING
• VIRTUAL_ENV
• DOCKER_TLS_VERIFY
• PIPENV_ACTIVE
• PATH
• PWD
• JAVA_HOME
• LETSENCRYPT_CERTS_FOLDER
• LANG
• DOPEOPLESAY_WEB_SECRET_KEY_BASE
• ITERM_PROFILE
• XPC_FLAGS
• PS1
• PYTHONDONTWRITEBYTECODE
• RBENV_SHELL
• XPC_SERVICE_NAME
• PYENV_SHELL
• DOCKER_CERT_PATH
• SHLVL
• HOME
• COLORFGBG
• ITERM_SESSION_ID
• LOGNAME
• PKG_CONFIG_PATH
• DISPLAY
• _

Pipenv 特定的环境变量：

• PIPENV_ACTIVE : 1

调试特定的环境变量：

• PATH : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf/bin:/usr/local/Cellar/pipenv/11.9.0/libexec/tools:/Users/henadzit/.pyenv/shims:/Users/henadzit/.rbenv/shims:/Users/henadzit/.rbenv/bin:/usr/local/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/X11/bin:/Users/henadzit/workspace/geckodriver:/Users/henadzit/.rvm/bin
• SHELL : /bin/bash
• LANG : en_US.UTF-8
• PWD : /Users/henadzit/workspace/dopeoplesayit
• VIRTUAL_ENV : /Users/henadzit/.local/share/virtualenvs/dopeoplesayit-BfIykoUf

Pipfile （'/Users/henadzit/workspace/dopeoplesayit/Pipfile'）：

[[source]]

url = "https://pypi.python.org/simple"
verify_ssl = true
name = "pypi"


[packages]

falcon = "==1.3.0"
gunicorn = "==19.7.1"
hunspell = "==0.5.0"
nltk = "==3.2.4"
pysolr = "==3.7.0"
pytest = "==3.1.2"
pytest-mock = "==1.6.3"
requests = "==2.18.4"


[dev-packages]

jupyter = "*"
spacy = "*"
matplotlib = "*"


[requires]

python_version = "3.6.4"

@uranusjr ，很抱歉打扰您，但是您有机会查看我之前评论中的输出吗？ 非常感谢！

@henadzit在运行依赖解析之前不要激活pipenv shell 。 从 pipenv shell 的 _outside_ 尝试pipenv lock --verbose --clear看看这是否能解决问题

@techalchemy ，谢谢你的建议！ 我试过了，但不幸的是同样的错误。

这是不带pipenv shell的 pipenv.help 的输出。

Pipenv 版本： '11.9.0'

管道位置： '/Users/henadzit/.pyenv/versions/3.6.4/lib/python3.6/site-packages/pipenv'

Python 位置： '/Users/henadzit/.pyenv/versions/3.6.4/bin/python'

PATH其他 Python 安装：

• 2.7 : /usr/bin/python2.7
• 2.7 : /usr/bin/python2.7
• 3.6 : /Users/henadzit/.pyenv/versions/3.6.4/bin/python3.6m
• 3.6 : /Users/henadzit/.pyenv/versions/3.6.4/bin/python3.6
• 3.6 : /Users/henadzit/.pyenv/shims/python3.6
• 3.6 : /usr/local/bin/python3.6

• 3.6 : /usr/local/bin/python3.6

• 3.6.4 : /Users/henadzit/.pyenv/versions/3.6.4/bin/python

• 3.6.4 : /Users/henadzit/.pyenv/shims/python
• 2.7.10 : /usr/bin/python
• 3.6.4 : /Users/henadzit/.pyenv/versions/3.6.4/bin/python3
• 3.6.4 : /Users/henadzit/.pyenv/shims/python3
• 3.6.4 : /usr/local/bin/python3
• 3.6.4 : /usr/local/bin/python3

PEP 508 信息：

{'implementation_name': 'cpython',
 'implementation_version': '3.6.4',
 'os_name': 'posix',
 'platform_machine': 'x86_64',
 'platform_python_implementation': 'CPython',
 'platform_release': '17.4.0',
 'platform_system': 'Darwin',
 'platform_version': 'Darwin Kernel Version 17.4.0: Sun Dec 17 09:19:54 PST '
                     '2017; root:xnu-4570.41.2~1/RELEASE_X86_64',
 'python_full_version': '3.6.4',
 'python_version': '3.6',
 'sys_platform': 'darwin'}

系统环境变量：

• TERM_PROGRAM
• PYENV_ROOT
• SHELL
• TERM
• TMPDIR
• Apple_PubSub_Socket_Render
• DOCKER_HOST
• TERM_PROGRAM_VERSION
• TERM_SESSION_ID
• PYENV_VERSION
• USER
• DOCKER_MACHINE_NAME
• SSH_AUTH_SOCK
• CPATH
• PYENV_DIR
• __CF_USER_TEXT_ENCODING
• DOCKER_TLS_VERIFY
• PATH
• PWD
• JAVA_HOME
• LANG
• ITERM_PROFILE
• PYENV_HOOK_PATH
• XPC_FLAGS
• RBENV_SHELL
• XPC_SERVICE_NAME
• COLORFGBG
• HOME
• SHLVL
• DOCKER_CERT_PATH
• PYENV_SHELL
• ITERM_SESSION_ID
• LOGNAME
• PKG_CONFIG_PATH
• DISPLAY
• PYTHONDONTWRITEBYTECODE
• PIP_PYTHON_PATH
• PYTHONUNBUFFERED

Pipenv 特定的环境变量：

调试特定的环境变量：

• PATH : /Users/henadzit/.pyenv/versions/3.6.4/bin:/usr/local/Cellar/pyenv/1.2.2/libexec:/Users/henadzit/.pyenv/shims:/Users/henadzit/.rbenv/shims:/Users/henadzit/.rbenv/bin:/usr/local/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/X11/bin:/Users/henadzit/workspace/geckodriver
• SHELL : /bin/bash
• LANG : en_US.UTF-8
• PWD : /Users/henadzit/workspace/dopeoplesayit

Pipfile （'/Users/henadzit/workspace/dopeoplesayit/Pipfile'）：

[[source]]

url = "https://pypi.python.org/simple"
verify_ssl = true
name = "pypi"


[packages]

falcon = "==1.3.0"
gunicorn = "==19.7.1"
hunspell = "==0.5.0"
nltk = "==3.2.4"
pysolr = "==3.7.0"
pytest = "==3.1.2"
pytest-mock = "==1.6.3"
requests = "==2.18.4"


[dev-packages]

jupyter = "*"
spacy = "*"
matplotlib = "*"


[requires]

python_version = "3.6.4"

🤔 尝试手动删除整个缓存目录。

@henadzit尝试pipenv lock --clear或擦除以下任何目录（如果存在）：

/Users/.../Library/Caches/pipenv
/Users/.../Library/Caches/pip-tools
/Users/.../Library/Caches/pip

@uranusjr @techalchemy ，感谢您尝试帮助我！ 我尝试了你建议的一切，但没有运气。 我只用两个包创建了一个新的 Pipfile，但我遇到了同样的错误。 下面是pipenv.help的输出。 我将尝试在 docker 中运行这个 PIpfile，看看它是否只是我的环境。

Pipenv 版本： '11.9.0'

管道位置： '/usr/local/Cellar/pipenv/11.9.0/libexec/lib/python3.6/site-packages/pipenv'

Python 位置： '/usr/local/Cellar/pipenv/11.9.0/libexec/bin/python3'

PATH其他 Python 安装：

• 2.7 : /usr/bin/python2.7
• 2.7 : /usr/bin/python2.7
• 3.6 : /Users/henadzit/anaconda3/bin/python3.6m
• 3.6 : /Users/henadzit/anaconda3/bin/python3.6
• 3.6 : /Users/henadzit/.pyenv/shims/python3.6
• 3.6 : /usr/local/bin/python3.6

• 3.6 : /usr/local/bin/python3.6

• 3.6.4 : /Users/henadzit/anaconda3/bin/python

• 3.6.4 : /Users/henadzit/.pyenv/shims/python
• 2.7.10 : /usr/bin/python
• 3.6.4 : /Users/henadzit/anaconda3/bin/python3
• 3.6.4 : /Users/henadzit/.pyenv/shims/python3
• 3.6.4 : /usr/local/bin/python3
• 3.6.4 : /usr/local/bin/python3

PEP 508 信息：

{'implementation_name': 'cpython',
 'implementation_version': '3.6.4',
 'os_name': 'posix',
 'platform_machine': 'x86_64',
 'platform_python_implementation': 'CPython',
 'platform_release': '17.4.0',
 'platform_system': 'Darwin',
 'platform_version': 'Darwin Kernel Version 17.4.0: Sun Dec 17 09:19:54 PST '
                     '2017; root:xnu-4570.41.2~1/RELEASE_X86_64',
 'python_full_version': '3.6.4',
 'python_version': '3.6',
 'sys_platform': 'darwin'}

系统环境变量：

• TERM_PROGRAM
• TERM
• SHELL
• TMPDIR
• DOCKER_HOST
• Apple_PubSub_Socket_Render
• TERM_PROGRAM_VERSION
• OLDPWD
• TERM_SESSION_ID
• USER
• LD_LIBRARY_PATH
• DOCKER_MACHINE_NAME
• CPATH
• SSH_AUTH_SOCK
• __CF_USER_TEXT_ENCODING
• DOCKER_TLS_VERIFY
• PATH
• PWD
• JAVA_HOME
• LANG
• ITERM_PROFILE
• XPC_FLAGS
• RBENV_SHELL
• XPC_SERVICE_NAME
• PYENV_SHELL
• DOCKER_CERT_PATH
• SHLVL
• HOME
• COLORFGBG
• ITERM_SESSION_ID
• LOGNAME
• PKG_CONFIG_PATH
• DISPLAY
• _
• PYTHONDONTWRITEBYTECODE
• PIP_PYTHON_PATH
• PYTHONUNBUFFERED

Pipenv 特定的环境变量：

调试特定的环境变量：

• PATH : /Users/henadzit/anaconda3/bin:/Users/henadzit/.pyenv/shims:/Users/henadzit/.rbenv/shims:/Users/henadzit/.rbenv/bin:/usr/local/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/X11/bin:/Users/henadzit/workspace/geckodriver:/Users/henadzit/workspace/torch/install/bin
• SHELL : /bin/bash
• LANG : en_US.UTF-8
• PWD : /Users/henadzit/workspace/pipenv-html5lib-issue

Pipfile （'/Users/henadzit/workspace/pipenv-html5lib-issue/Pipfile'）：

[[source]]

url = "https://pypi.python.org/simple"
verify_ssl = true
name = "pypi"


[packages]
jupyter = "==1.0.0"
spacy = "==2.0.10"

[dev-packages]

[requires]

python_version = "3.6.4"

@uranusjr @techalchemy ，看起来这个问题与我的环境无关。 我能够在完全干净的 docker 环境中重现该问题。 我创建了一个 repo 来显示这个问题，如果你有机会，请看看 - https://github.com/henadzit/pipenv-html5lib-issue。

@henadzit您的依赖项实际上没有解决。 这是 spaCy 的一个问题： https :

@henadzit因为 spaCy 在 2.0.11 中放弃了所需的版本，所以使用 TensorFlow 版本感觉更正确。 我不确定这样做的规范方法是什么，但我只是（暂时，我希望）从我的 Pipfile 中拉出 tensorflow 并像这样安装我的包：

pipenv install
pip install tensorflow

@romanczuk ，我升级了 spacy，它解决了这个问题！ 感谢大家的帮助！

对我来说，问题仍然存在。 我正在尝试同时安装tensorflow和jupyter[notebook] 。 前者 pinns bleach==1.5.0 ，后者具有传递的未固定bleach依赖项。 这种依赖似乎增加了约束>=0.99999999pre 。

我可以通过尝试安装漂白剂（未固定）和张量板（固定漂白剂版本）来重新创建行为：

pipenv install bleach tensorboard
Creating a virtualenv for this project…
Using /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6 (3.6.4) to create virtualenv…
⠋Already using interpreter /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6
Using real prefix '/usr/local/Cellar/python/3.6.4_4/Frameworks/Python.framework/Versions/3.6'
New python executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python3.6
Also creating executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python
Installing setuptools, pip, wheel...done.

Virtualenv location: /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I
Creating a Pipfile for this project…
Installing bleach…
Collecting bleach
  Using cached bleach-2.1.3-py2.py3-none-any.whl
Collecting six (from bleach)
  Using cached six-1.11.0-py2.py3-none-any.whl
Collecting html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre (from bleach)
  Using cached html5lib-1.0.1-py2.py3-none-any.whl
Collecting webencodings (from html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre->bleach)
  Using cached webencodings-0.5.1-py2.py3-none-any.whl
Installing collected packages: six, webencodings, html5lib, bleach
Successfully installed bleach-2.1.3 html5lib-1.0.1 six-1.11.0 webencodings-0.5.1

Adding bleach to Pipfile's [packages]…
Installing tensorboard…
Collecting tensorboard
  Using cached tensorboard-1.7.0-py3-none-any.whl
Requirement already satisfied: wheel>=0.26; python_version >= "3" in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting werkzeug>=0.11.10 (from tensorboard)
  Using cached Werkzeug-0.14.1-py2.py3-none-any.whl
Collecting bleach==1.5.0 (from tensorboard)
  Using cached bleach-1.5.0-py2.py3-none-any.whl
Collecting numpy>=1.12.0 (from tensorboard)
  Using cached numpy-1.14.2-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
Collecting markdown>=2.6.8 (from tensorboard)
  Using cached Markdown-2.6.11-py2.py3-none-any.whl
Collecting protobuf>=3.4.0 (from tensorboard)
  Using cached protobuf-3.5.2.post1-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
Requirement already satisfied: six>=1.10.0 in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting html5lib==0.9999999 (from tensorboard)
Requirement already satisfied: setuptools in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from protobuf>=3.4.0->tensorboard)
Installing collected packages: werkzeug, html5lib, bleach, numpy, markdown, protobuf, tensorboard
  Found existing installation: html5lib 1.0.1
    Uninstalling html5lib-1.0.1:
      Successfully uninstalled html5lib-1.0.1
  Found existing installation: bleach 2.1.3
    Uninstalling bleach-2.1.3:
      Successfully uninstalled bleach-2.1.3
Successfully installed bleach-1.5.0 html5lib-0.9999999 markdown-2.6.11 numpy-1.14.2 protobuf-3.5.2.post1 tensorboard-1.7.0 werkzeug-0.14.1

Adding tensorboard to Pipfile's [packages]…
Pipfile.lock not found, creating…
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

运行install --skip-lock和graph时没有此约束的迹象：

$ pipenv install bleach tensorboard --skip-lock
...

$ pipenv graph | grep html5lib
    - html5lib [required: >=0.999,!=0.9999,!=0.99999,<0.99999999, installed: 0.9999999]
  - html5lib [required: ==0.9999999, installed: 0.9999999]

$ pipenv graph | grep bleach
  - bleach [required: ==1.5.0, installed: 1.5.0]

删除缓存目录不会改变行为。 我正在运行pipenv版本11.8.0 。 似乎确实与全局状态有一些交互。 在寻找一个最小的例子时，我多次尝试了上面的设置。 一次运行，锁定工作。 但是，我无法重现这种行为。

更多详情：

$ pipenv --version
pipenv, version 11.8.0

$ pipenv graph
tensorboard==1.7.0
  - bleach [required: ==1.5.0, installed: 1.5.0]
    - html5lib [required: !=0.99999,!=0.9999,>=0.999,<0.99999999, installed: 0.9999999]
      - six [required: Any, installed: 1.11.0]
    - six [required: Any, installed: 1.11.0]
  - html5lib [required: ==0.9999999, installed: 0.9999999]
    - six [required: Any, installed: 1.11.0]
  - markdown [required: >=2.6.8, installed: 2.6.11]
  - numpy [required: >=1.12.0, installed: 1.14.2]
  - protobuf [required: >=3.4.0, installed: 3.5.2.post1]
    - setuptools [required: Any, installed: 39.0.1]
    - six [required: >=1.9, installed: 1.11.0]
  - six [required: >=1.10.0, installed: 1.11.0]
  - werkzeug [required: >=0.11.10, installed: 0.14.1]
  - wheel [required: >=0.26, installed: 0.31.0]
webencodings==0.5.1


$ cat Pipfile 
[[source]]

url = "https://pypi.python.org/simple"
verify_ssl = true
name = "pypi"


[packages]

bleach = "*"
tensorboard = "*"


[dev-packages]



[requires]

python_version = "3.6"

$ pipenv lock --clear --verbose
Locking [dev-packages] dependencies…
Using pip: -i https://pypi.python.org/simple

                          ROUND 1                           
Current constraints:

Finding the best candidates:

Finding secondary dependencies:
------------------------------------------------------------
Result of round 1: stable, done

Locking [packages] dependencies…
Using pip: -i https://pypi.python.org/simple

                          ROUND 1                           
Current constraints:
  bleach
  tensorboard

Finding the best candidates:
  found candidate bleach==2.1.3 (constraint was <any>)
  found candidate tensorboard==1.7.0 (constraint was <any>)

Finding secondary dependencies:
  tensorboard==1.7.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"
  bleach==2.1.3             requires html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre, six

New dependencies found in this round:
  adding ['bleach', '==1.5.0', '[]']
  adding ['html5lib', '!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre', '[]']
  adding ['markdown', '>=2.6.8', '[]']
  adding ['numpy', '>=1.12.0', '[]']
  adding ['protobuf', '>=3.4.0', '[]']
  adding ['six', '>=1.10.0', '[]']
  adding ['werkzeug', '>=0.11.10', '[]']
  adding ['wheel', '>=0.26', '[]']
Removed dependencies in this round:
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 1: not stable

                          ROUND 2                           
Current constraints:
  bleach==1.5.0
  html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
  markdown>=2.6.8
  numpy>=1.12.0
  protobuf>=3.4.0
  six>=1.10.0
  tensorboard
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate bleach==1.5.0 (constraint was ==1.5.0)
Using pip: -i https://pypi.python.org/simple

                          ROUND 1                           
Current constraints:
  bleach
  tensorboard

Finding the best candidates:
  found candidate bleach==2.1.3 (constraint was <any>)
  found candidate tensorboard==1.7.0 (constraint was <any>)

Finding secondary dependencies:
  bleach==2.1.3             requires html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre, six
  tensorboard==1.7.0        requires bleach==1.5.0, html5lib==0.9999999, markdown>=2.6.8, numpy>=1.12.0, protobuf>=3.4.0, six>=1.10.0, werkzeug>=0.11.10, wheel>=0.26; python_version >= "3"; python_version >= "3"

New dependencies found in this round:
  adding ['bleach', '==1.5.0', '[]']
  adding ['html5lib', '!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre', '[]']
  adding ['markdown', '>=2.6.8', '[]']
  adding ['numpy', '>=1.12.0', '[]']
  adding ['protobuf', '>=3.4.0', '[]']
  adding ['six', '>=1.10.0', '[]']
  adding ['werkzeug', '>=0.11.10', '[]']
  adding ['wheel', '>=0.26', '[]']
Removed dependencies in this round:
Unsafe dependencies in this round:
------------------------------------------------------------
Result of round 1: not stable

                          ROUND 2                           
Current constraints:
  bleach==1.5.0
  html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
  markdown>=2.6.8
  numpy>=1.12.0
  protobuf>=3.4.0
  six>=1.10.0
  tensorboard
  werkzeug>=0.11.10
  wheel>=0.26

Finding the best candidates:
  found candidate bleach==1.5.0 (constraint was ==1.5.0)

INFO:pip9._vendor.requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): pypi.python.org
Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1
Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

好吧，仔细看看这是一个合法的依赖冲突。 html5lib>=0.99999999pre是一个比html5lib==0.9999999更大的数字，所以这实际上无法解决。 现在只需将 tensorboard 放在dev-packages部分和pipenv install —dev —— pipenv 会以这种方式支持非开发分辨率

感谢您的解决方法。 我会试一试。

令我困惑的是：为什么html5lib>=0.99999999pre甚至会成为约束？ Tensorboard 修复了bleach==1.5.0 。 因此，传递给pipenv install的附加bleach包不应该影响依赖图，不是吗？

具体来说：鉴于 tensorboard 修复了bleach==1.5.0 ，我希望这两个调用的依赖关系图完全相同：

pipenv install tensorboard

pipenv install bleach tensorboard

确实是因为您首先列出了它，如果您交换订购可能会解决这个问题？ 不确定。 也试试，让我知道

如果我将漂白剂添加到命令行，它会失败（前两个选项）。 如果我只安装张量板，它可以工作（最后一个选项）。 pipenv 输出位于 details 块内。

$ rm -rf ~/Library/Caches/pip* ~/.virtualenvs/foo-i7B_Qy-I Pipfile 
$ pipenv install tensorboard bleach

# fails

Creating a virtualenv for this project…
Using /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6 (3.6.4) to create virtualenv…
⠋Already using interpreter /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6
Using real prefix '/usr/local/Cellar/python/3.6.4_4/Frameworks/Python.framework/Versions/3.6'
New python executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python3.6
Also creating executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python
Installing setuptools, pip, wheel...done.

Virtualenv location: /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I
Creating a Pipfile for this project…
Installing tensorboard…
Collecting tensorboard
  Downloading tensorboard-1.7.0-py3-none-any.whl (3.1MB)
Collecting html5lib==0.9999999 (from tensorboard)
  Downloading html5lib-0.9999999.tar.gz (889kB)
Collecting werkzeug>=0.11.10 (from tensorboard)
  Downloading Werkzeug-0.14.1-py2.py3-none-any.whl (322kB)
Collecting markdown>=2.6.8 (from tensorboard)
  Downloading Markdown-2.6.11-py2.py3-none-any.whl (78kB)
Collecting numpy>=1.12.0 (from tensorboard)
  Downloading numpy-1.14.2-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (4.7MB)
Collecting protobuf>=3.4.0 (from tensorboard)
  Downloading protobuf-3.5.2.post1-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (1.2MB)
Requirement already satisfied: wheel>=0.26; python_version >= "3" in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting six>=1.10.0 (from tensorboard)
  Downloading six-1.11.0-py2.py3-none-any.whl
Collecting bleach==1.5.0 (from tensorboard)
  Downloading bleach-1.5.0-py2.py3-none-any.whl
Requirement already satisfied: setuptools in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from protobuf>=3.4.0->tensorboard)
Building wheels for collected packages: html5lib
  Running setup.py bdist_wheel for html5lib: started
  Running setup.py bdist_wheel for html5lib: finished with status 'done'
  Stored in directory: /Volumes/Home/Library/Caches/pip/wheels/6f/85/6c/56b8e1292c6214c4eb73b9dda50f53e8e977bf65989373c962
Successfully built html5lib
Installing collected packages: six, html5lib, werkzeug, markdown, numpy, protobuf, bleach, tensorboard
Successfully installed bleach-1.5.0 html5lib-0.9999999 markdown-2.6.11 numpy-1.14.2 protobuf-3.5.2.post1 six-1.11.0 tensorboard-1.7.0 werkzeug-0.14.1

Adding tensorboard to Pipfile's [packages]…
Installing bleach…
Requirement already satisfied: bleach in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages
Requirement already satisfied: six in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from bleach)
Requirement already satisfied: html5lib!=0.9999,!=0.99999,<0.99999999,>=0.999 in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from bleach)

Adding bleach to Pipfile's [packages]…
Pipfile.lock not found, creating…
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

$ rm -rf ~/Library/Caches/pip* ~/.virtualenvs/foo-i7B_Qy-I Pipfile
$ pipenv install bleach tensorboard 

# fails

Creating a virtualenv for this project…
Using /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6 (3.6.4) to create virtualenv…
⠋Already using interpreter /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6
Using real prefix '/usr/local/Cellar/python/3.6.4_4/Frameworks/Python.framework/Versions/3.6'
New python executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python3.6
Also creating executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python
Installing setuptools, pip, wheel...done.

Virtualenv location: /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I
Creating a Pipfile for this project…
Installing bleach…
Collecting bleach
  Downloading bleach-2.1.3-py2.py3-none-any.whl
Collecting html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre (from bleach)
  Downloading html5lib-1.0.1-py2.py3-none-any.whl (117kB)
Collecting six (from bleach)
  Downloading six-1.11.0-py2.py3-none-any.whl
Collecting webencodings (from html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,>=0.99999999pre->bleach)
  Downloading webencodings-0.5.1-py2.py3-none-any.whl
Installing collected packages: six, webencodings, html5lib, bleach
Successfully installed bleach-2.1.3 html5lib-1.0.1 six-1.11.0 webencodings-0.5.1

Adding bleach to Pipfile's [packages]…
Installing tensorboard…
Collecting tensorboard
  Downloading tensorboard-1.7.0-py3-none-any.whl (3.1MB)
Collecting werkzeug>=0.11.10 (from tensorboard)
  Downloading Werkzeug-0.14.1-py2.py3-none-any.whl (322kB)
Collecting markdown>=2.6.8 (from tensorboard)
  Downloading Markdown-2.6.11-py2.py3-none-any.whl (78kB)
Collecting bleach==1.5.0 (from tensorboard)
  Downloading bleach-1.5.0-py2.py3-none-any.whl
Requirement already satisfied: wheel>=0.26; python_version >= "3" in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting numpy>=1.12.0 (from tensorboard)
  Downloading numpy-1.14.2-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (4.7MB)
Collecting protobuf>=3.4.0 (from tensorboard)
  Downloading protobuf-3.5.2.post1-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (1.2MB)
Requirement already satisfied: six>=1.10.0 in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting html5lib==0.9999999 (from tensorboard)
  Downloading html5lib-0.9999999.tar.gz (889kB)
Requirement already satisfied: setuptools in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from protobuf>=3.4.0->tensorboard)
Building wheels for collected packages: html5lib
  Running setup.py bdist_wheel for html5lib: started
  Running setup.py bdist_wheel for html5lib: finished with status 'done'
  Stored in directory: /Volumes/Home/Library/Caches/pip/wheels/6f/85/6c/56b8e1292c6214c4eb73b9dda50f53e8e977bf65989373c962
Successfully built html5lib
Installing collected packages: werkzeug, markdown, html5lib, bleach, numpy, protobuf, tensorboard
  Found existing installation: html5lib 1.0.1
    Uninstalling html5lib-1.0.1:
      Successfully uninstalled html5lib-1.0.1
  Found existing installation: bleach 2.1.3
    Uninstalling bleach-2.1.3:
      Successfully uninstalled bleach-2.1.3
Successfully installed bleach-1.5.0 html5lib-0.9999999 markdown-2.6.11 numpy-1.14.2 protobuf-3.5.2.post1 tensorboard-1.7.0 werkzeug-0.14.1

Adding tensorboard to Pipfile's [packages]…
Pipfile.lock (d84f24) out of date, updating to (930330)…
Locking [dev-packages] dependencies…
Locking [packages] dependencies…

Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
Could not find a version that matches html5lib!=1.0b1,!=1.0b2,!=1.0b3,!=1.0b4,!=1.0b5,!=1.0b6,!=1.0b7,!=1.0b8,==0.9999999,>=0.99999999pre
Tried: 1.0-reupload, 0.2, 0.9, 0.10, 0.11, 0.11.1, 0.90, 0.95, 0.99, 0.999, 0.9999, 0.99999, 0.999999, 0.9999999, 0.99999999, 0.999999999, 0.999999999, 1.0b1, 1.0b2, 1.0b3, 1.0b5, 1.0b6, 1.0b7, 1.0b8, 1.0b9, 1.0b10, 1.0b10, 1.0.1, 1.0.1

$ rm -rf ~/Library/Caches/pip* ~/.virtualenvs/foo-i7B_Qy-I Pipfile 
$ pipenv install tensorboard

# works

Creating a virtualenv for this project…
Using /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6 (3.6.4) to create virtualenv…
⠋Already using interpreter /usr/local/Cellar/pipenv/11.8.0/libexec/bin/python3.6
Using real prefix '/usr/local/Cellar/python/3.6.4_4/Frameworks/Python.framework/Versions/3.6'
New python executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python3.6
Also creating executable in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/bin/python
Installing setuptools, pip, wheel...done.

Virtualenv location: /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I
Creating a Pipfile for this project…
Installing tensorboard…
Collecting tensorboard
  Downloading tensorboard-1.7.0-py3-none-any.whl (3.1MB)
Collecting markdown>=2.6.8 (from tensorboard)
  Downloading Markdown-2.6.11-py2.py3-none-any.whl (78kB)
Requirement already satisfied: wheel>=0.26; python_version >= "3" in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from tensorboard)
Collecting bleach==1.5.0 (from tensorboard)
  Downloading bleach-1.5.0-py2.py3-none-any.whl
Collecting html5lib==0.9999999 (from tensorboard)
  Downloading html5lib-0.9999999.tar.gz (889kB)
Collecting numpy>=1.12.0 (from tensorboard)
  Downloading numpy-1.14.2-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (4.7MB)
Collecting werkzeug>=0.11.10 (from tensorboard)
  Downloading Werkzeug-0.14.1-py2.py3-none-any.whl (322kB)
Collecting six>=1.10.0 (from tensorboard)
  Downloading six-1.11.0-py2.py3-none-any.whl
Collecting protobuf>=3.4.0 (from tensorboard)
  Downloading protobuf-3.5.2.post1-cp36-cp36m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (1.2MB)
Requirement already satisfied: setuptools in /Volumes/Home/.local/share/virtualenvs/foo-i7B_Qy-I/lib/python3.6/site-packages (from protobuf>=3.4.0->tensorboard)
Building wheels for collected packages: html5lib
  Running setup.py bdist_wheel for html5lib: started
  Running setup.py bdist_wheel for html5lib: finished with status 'done'
  Stored in directory: /Volumes/Home/Library/Caches/pip/wheels/6f/85/6c/56b8e1292c6214c4eb73b9dda50f53e8e977bf65989373c962
Successfully built html5lib
Installing collected packages: markdown, six, html5lib, bleach, numpy, werkzeug, protobuf, tensorboard
Successfully installed bleach-1.5.0 html5lib-0.9999999 markdown-2.6.11 numpy-1.14.2 protobuf-3.5.2.post1 six-1.11.0 tensorboard-1.7.0 werkzeug-0.14.1

Adding tensorboard to Pipfile's [packages]…
Pipfile.lock not found, creating…
Locking [dev-packages] dependencies…
Locking [packages] dependencies…
Updated Pipfile.lock (d84f24)!
Installing dependencies from Pipfile.lock (d84f24)…
  🐍   ▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉ 9/9 — 00:00:04
To activate this project's virtualenv, run the following:
 $ pipenv shell

@techalchemy再次感谢您的工作。 它解决了我的实际问题（安装 jupyter + tensorflow）：我将 jupyter 放入开发包中，并将 tensorflow 保留在生产包中。 这样，所有包都可以被锁定。