Pdm

Latest version: v2.22.3

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 18 of 37

1.15.1

Not secure
----------------------------

Bug Fixes

- Fix a bug that dependencies are missing from the dep graph when they are depended by a requirement with extras. [1097](https://github.com/pdm-project/pdm/issues/1097)
- Give a default version if the version is dynamic in `setup.cfg` or `setup.py`. [1101](https://github.com/pdm-project/pdm/issues/1101)
- Fix a bug that the hashes for file URLs are not included in the lock file. [1103](https://github.com/pdm-project/pdm/issues/1103)
- Fix a bug that package versions are updated even when they are excluded by `pdm update` command. [1104](https://github.com/pdm-project/pdm/issues/1104)
- Prefer `venv` install scheme when available. This scheme is more stable than `posix_prefix` scheme since the latter is often patched by distributions. [1106](https://github.com/pdm-project/pdm/issues/1106)

Miscellany

- Move the test artifacts to a submodule. It will make it easier to package this project. [1084](https://github.com/pdm-project/pdm/issues/1084)

1.15.0

Not secure
----------------------------

Features & Improvements

- Allow specifying lockfile other than `pdm.lock` by `--lockfile` option or `PDM_LOCKFILE` env var. [1038](https://github.com/pdm-project/pdm/issues/1038)

Bug Fixes

- Replace the editable entry in `pyproject.toml` when running `pdm add --no-editable <package>`. [1050](https://github.com/pdm-project/pdm/issues/1050)
- Ensure the pip module inside venv in installation script. [1053](https://github.com/pdm-project/pdm/issues/1053)
- Fix the py2 compatibility issue in the in-process `get_sysconfig_path.py` script. [1056](https://github.com/pdm-project/pdm/issues/1056)
- Fix a bug that file paths in URLs are not correctly unquoted. [1073](https://github.com/pdm-project/pdm/issues/1073)
- Fix a bug on Python 3.11 that overriding an existing command from plugins raises an error. [1075](https://github.com/pdm-project/pdm/issues/1075)
- Replace the `${PROJECT_ROOT}` variable in the result of `export` command. [1079](https://github.com/pdm-project/pdm/issues/1079)

Removals and Deprecations

- Show a warning if Python 2 interpreter is being used and remove the support on 2.0. [1082](https://github.com/pdm-project/pdm/issues/1082)

1.14.1

Not secure
----------------------------

Features & Improvements

- Ask for description when doing `pdm init` and create default README for libraries. [1041](https://github.com/pdm-project/pdm/issues/1041)

Bug Fixes

- Fix a bug of missing subdirectory fragment when importing from a `requirements.txt`. [1036](https://github.com/pdm-project/pdm/issues/1036)
- Fix use_cache.json with corrupted python causes `pdm use` error. [1039](https://github.com/pdm-project/pdm/issues/1039)
- Ignore the `optional` key when converting from Poetry's dependency entries. [1042](https://github.com/pdm-project/pdm/issues/1042)

Improved Documentation

- Clarify documentation on enabling PEP582 globally. [1033](https://github.com/pdm-project/pdm/issues/1033)

1.14.0

Not secure
----------------------------

Features & Improvements

- Editable installations won't be overridden unless `--no-editable` is passed.
`pdm add --no-editable` will now override the `editable` mode of the given packages. [1011](https://github.com/pdm-project/pdm/issues/1011)
- Re-calculate the file hashes when running `pdm lock --refresh`. [1019](https://github.com/pdm-project/pdm/issues/1019)

Bug Fixes

- Fix a bug that requirement with extras isn't resolved to the version as specified by the range. [1001](https://github.com/pdm-project/pdm/issues/1001)
- Replace the `${PROJECT_ROOT}` in the output of `pdm list`. [1004](https://github.com/pdm-project/pdm/issues/1004)
- Further fix the python path issue of macOS system installed Python. [1023](https://github.com/pdm-project/pdm/issues/1023)
- Fix the install path issue on Python 3.10 installed from homebrew. [996](https://github.com/pdm-project/pdm/issues/996)

Improved Documentation

- Document how to install PDM inside a project with Pyprojectx. [1004](https://github.com/pdm-project/pdm/issues/1004)

Dependencies

- Support `installer 0.5.x`. [1002](https://github.com/pdm-project/pdm/issues/1002)

1.13.6

Not secure
----------------------------

Bug Fixes

- Default the optional `license` field to "None". [991](https://github.com/pdm-project/pdm/issues/991)
- Don't create project files in `pdm search` command. [993](https://github.com/pdm-project/pdm/issues/993)
- Fix a bug that the env vars in source urls in exported result are not expanded. [997](https://github.com/pdm-project/pdm/issues/997)

1.13.5

Not secure
----------------------------

Features & Improvements

- Users can change the install destination of global project to the user site(`~/.local`) with `global_project.user_site` config. [885](https://github.com/pdm-project/pdm/issues/885)
- Make the path to the global project configurable. Rename the configuration `auto_global` to `global_project.fallback` and deprecate the old name. [986](https://github.com/pdm-project/pdm/issues/986)

Bug Fixes

- Fix the compatibility when fetching license information in `show` command. [966](https://github.com/pdm-project/pdm/issues/966)
- Don't follow symlinks for the paths in the requirement strings. [976](https://github.com/pdm-project/pdm/issues/976)
- Use the default install scheme when installing build requirements. [983](https://github.com/pdm-project/pdm/issues/983)
- Fix a bug that `_.site_packages` is overridden by default option value. [985](https://github.com/pdm-project/pdm/issues/985)

Page 18 of 37

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.