Is there a way to prohibit the download/use of a dependency?

[dioptre]

• Python version: Latest
• OS version and name: Darwin Latest
  I tried:

[[tool.poetry.source]]
name = "jax"
url = "https://storage.googleapis.com/jax-releases/jax_releases.html"
priority = "explicit"
jax = [
    {extras = ["cpu"], version = "0.4.14", platform="darwin", source="pypi"},
    {extras = ["cpu"], version = "0.4.14", platform="linux"}
]

with lock:

[[package]]
name = "jax"
version = "0.4.14"
description = "Differentiate, compile, and transform Numpy code."
optional = false
python-versions = ">=3.9"
files = [
    {file = "jax-0.4.14.tar.gz", hash = "sha256:18fed3881f26e8b13c8cb46eeeea3dba9eb4d48e3714d8e8f2304dd6e237083d"},
]

[package.dependencies]
ml_dtypes = ">=0.2.0"
numpy = ">=1.22"
opt_einsum = "*"
scipy = ">=1.7"

[package.extras]
australis = ["protobuf (>=3.13,<4)"]
ci = ["jaxlib (==0.4.13)"]
cpu = ["jaxlib (==0.4.14)"]
cuda = ["jaxlib (==0.4.14+cuda11.cudnn86)"]
cuda11-cudnn86 = ["jaxlib (==0.4.14+cuda11.cudnn86)"]
cuda11-local = ["jaxlib (==0.4.14+cuda11.cudnn86)"]
cuda11-pip = ["jaxlib (==0.4.14+cuda11.cudnn86)", "nvidia-cublas-cu11 (>=11.11)", "nvidia-cuda-cupti-cu11 (>=11.8)", "nvidia-cuda-nvcc-cu11 (>=11.8)", "nvidia-cuda-runtime-cu11 (>=11.8)", "nvidia-cudnn-cu11 (>=8.8)", "nvidia-cufft-cu11 (>=10.9)", "nvidia-cusolver-cu11 (>=11.4)", "nvidia-cusparse-cu11 (>=11.7)"]
cuda12-local = ["jaxlib (==0.4.14+cuda12.cudnn89)"]
cuda12-pip = ["jaxlib (==0.4.14+cuda12.cudnn89)", "nvidia-cublas-cu12", "nvidia-cuda-cupti-cu12", "nvidia-cuda-nvcc-cu12", "nvidia-cuda-runtime-cu12", "nvidia-cudnn-cu12 (>=8.9)", "nvidia-cufft-cu12", "nvidia-cusolver-cu12", "nvidia-cusparse-cu12"]
minimum-jaxlib = ["jaxlib (==0.4.11)"]
tpu = ["jaxlib (==0.4.14)", "libtpu-nightly (==0.1.dev20230727)"]

Issue

This isn't a poetry bug per se. There is a dependency library jaxlib that included a library for tpu "libtpu-nightly" when I don't have a tpu machine and it breaks my app - seems like a known bug at google

I really need to prohibit the install of tpulib but don't find a way to and would love the control so that external parties can't break my app with their introduced bugs (was working last week)

jax-ml/jax#16292

Also wonder if this will help #5516

Please help thanks!

[dimbleby]

no

if something in your dependency tree declares that libtpu-nightly is required, then poetry will install libtpu-nightly.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.