Dependency Improvements

[444B]

When I install streamlit version 1.33 in a new pipenv, it installs the following packages below.
I was wondering about the differences between these upstream native packages and that of packages installed by the current pipfile.lock of streamlit-analytics2

streamlit deps

1. altair: A declarative statistical visualization library for Python.
2. attrs: Provides classes without boilerplate.
3. blinker: Provides support for Signals and Slots - a mechanism for objects to communicate.
4. cachetools: Extends Python's standard functools for caching mechanisms.
5. certifi: Python package for providing Mozilla's CA Bundle.
6. charset-normalizer: Helps in detecting the character encoding of a text.
7. click: A package for creating command-line interfaces.
8. gitdb: A library to access git repositories' databases.
9. gitpython: Provides object model access to your git repository.
10. idna: Supports the Internationalized Domain Names in Applications (IDNA) protocol.
11. jinja2: A full-featured template engine for Python.
12. jsonschema: An implementation of JSON Schema for Python.
13. jsonschema-specifications: Not a standard package, possibly related to specific JSON schema implementations or extensions.
14. markdown-it-py: A Python port of the markdown-it markdown parser.
15. markupsafe: Implements a XML/HTML/XHTML Markup safe string for Python.
16. mdurl: URL parsing and formatting library for Python.
17. numpy: Fundamental package for scientific computing with Python.
18. packaging: Core utilities for Python packages.
19. pandas: An open-source data analysis and manipulation tool.
20. pillow: The Python Imaging Library adds image processing capabilities.
21. protobuf: Google's data interchange format.
22. pyarrow: Provides Apache Arrow bindings for Python.
23. pydeck: A library for visualizing large datasets with Deck.gl.
24. pygments: A syntax highlighting package for Python.
25. python-dateutil: Provides powerful extensions to the standard datetime module.
26. pytz: World timezone definitions, modern and historical.
27. referencing: Not a standard package, likely specific to an application or a custom library.
28. requests: Elegant and simple HTTP library for Python.
29. rich: Renders rich text, tables, progress bars, syntax highlighting, and more to the terminal.
30. rpds-py: Not a standard package, possibly related to specific data structures or implementations.
31. six: Python 2 and 3 compatibility utilities.
32. smmap: A pure Python implementation of a sliding window memory map manager.
33. streamlit: An open-source app framework for Machine Learning and Data Science projects.
34. tenacity: Retry code until it succeeds.
35. toml: Parses and emits TOML files.
36. toolz: A collection of functional utilities for iterators, functions, and dictionaries.
37. tornado: A Python web framework and asynchronous networking library.
38. typing-extensions: Backported and experimental type hints for Python.
39. tzdata: Time zone data for the tz database.
40. urllib3: A powerful, sanity-friendly HTTP client for Python.
41. watchdog: API and shell utilities to monitor file system events.

streamlit-analytics2 deps

1. altair: A declarative statistical visualization library for Python.
2. attrs: Provides classes without boilerplate.
3. blinker: Provides support for Signals and Slots, a mechanism for objects to communicate changes.
4. cachetools: Extensible memoizing collections and decorators.
5. certifi: Python package for providing Mozilla's CA Bundle.
6. charset-normalizer: The real first universal charset detector. A library for character encoding detection.
7. click: A package for creating beautiful command line interfaces in a composable way.
8. gitdb: A library to access git repositories' databases.
9. gitpython: A python library used to interact with Git repositories.
10. google-api-core: Core library for making calls to Google APIs.
11. google-auth: Google Authentication Library.
12. google-cloud-core: Google Cloud API library core.
13. google-cloud-firestore: Google Cloud Firestore client library.
14. googleapis-common-protos: Common protobufs used in Google APIs.
15. grpcio: The GRPC system, which is a high-performance, open-source universal RPC framework.
16. grpcio-status: GRPC library to handle status code in Python.
17. idna: Internationalized Domain Names in Applications (IDNA).
18. jinja2: A full-featured template engine for Python.
19. jsonschema: An implementation of JSON Schema for Python.
20. jsonschema-specifications: Not a standard package and could be a custom or specialized package for JSON schema specifications.
21. markdown-it-py: Python port of the markdown-it markdown parser.
22. markupsafe: Implements a XML/HTML/XHTML Markup safe string for Python.
23. mdurl: Python implementation of the MDURL, a utility library for URL manipulation and normalization.
24. numpy: The fundamental package for scientific computing with Python.
25. packaging: Core utilities for Python packages.
26. pandas: An open-source data analysis and manipulation tool.
27. pillow: The Python Imaging Library adds image processing capabilities.
28. proto-plus: A syntax-simplifying addition to protobufs.
29. protobuf: Protocol Buffers - Google's data interchange format.
30. pyarrow: A cross-language development platform for in-memory data.
31. pyasn1: ASN.1 types and codecs.
32. pyasn1-modules: A collection of ASN.1-based protocols modules.
33. pydeck: Python wrapper around Deck.gl for data visualization.
34. pygments: A syntax highlighting package for Python.
35. python-dateutil: Provides powerful extensions to the standard datetime module.
36. pytz: World timezone definitions, modern and historical.
37. referencing: Could not identify this package; possibly a custom or internally developed library.
38. requests: HTTP library for Python.
39. rich: Rich text and beautiful formatting in the terminal.
40. rpds-py: Could not identify this package; possibly a custom or internally developed library.
41. rsa: Pure-Python RSA implementation.
42. six: Python 2 and 3 compatibility utilities.
43. smmap: A pure Python implementation of a sliding window memory map manager.
44. streamlit: An open-source app framework for Machine Learning and Data Science projects.
45. streamlit-analytics2: Could not identify this package; possibly a custom or internally developed library.
46. tenacity: Retrying library for Python.
47. toml: A Python library for parsing and creating TOML.
48. toolz: A collection of functional utilities for iterators, functions, and dictionaries.
49. tornado: A Python web framework and asynchronous networking library.
50. typing-extensions: Backported and experimental type hints for Python.
51. tzdata: Timezone data from the IANA Time Zone Database.
52. urllib3: HTTP library with thread-safe connection pooling, file post support, and more.
53. watchdog: API and shell utilities to monitor file system events.

Next will analyze the diffs between the packages

[444B]

Ok, I got this output from the comparing the diffs between the pipfile.lock of an install of streamlit 1.33 install and a streamlit-analytics2 0.6.5
I generated this output with a new repo I created: 444B/pipfile.lock-diff

Common Packages to streamlit-pipfile and streamlit-analytics2-pipfile:
toml
watchdog
urllib3
certifi
protobuf
pandas
jinja2
mdurl
click
pillow
blinker
pydeck
toolz
jsonschema
tenacity
cachetools
markupsafe
gitdb
six
charset-normalizer
numpy
requests
pytz
idna
attrs
rich
tornado
python-dateutil
pygments
gitpython
tzdata
smmap
jsonschema-specifications
markdown-it-py
pyarrow
rpds-py
referencing
altair

Unique Packages to streamlit-pipfile and streamlit-analytics2-pipfile:
Unique to streamlit-pipfile    | Unique to streamlit-analytics2-pipfile
-------------------------------------------------------------
                               | google-api-core
                               | google-auth
                               | google-cloud-core
                               | google-cloud-firestore
                               | googleapis-common-protos
                               | grpcio
                               | grpcio-status
                               | proto-plus
                               | pyasn1
                               | pyasn1-modules
                               | rsa
                               | streamlit-analytics2

Version Differences:
Package              | streamlit-pipfile | streamlit-analytics2-pipfile
-----------------------------------------------------
typing-extensions    | ==4.11.0        | ==4.10.0
packaging            | ==24.0          | ==23.2
streamlit            | ==1.33.0        | ==1.32.2

[444B]

My takeaway from this is the following 2 points:

1. to sync the package versions between the component package(streamlit-analytics2) and the upstream (streamlit)
2. identify which packages that are unique to the component package might not be neccesary at all or could be rewritten to use core packages provided by the upstream
3. when expanding on features that need new packages, first consider if this is already possible using the upstreams packages. This is to prevent dependency creep