# pip vs Poetry

**Leader by Vioscale score:** pip

| Attribute | pip | Poetry |
|---|---|---|
| **Vioscale score** | 67.4 (69% (medium)) | 58.4 (79% (high)) |
| activity.commits_last_30d | 66 | 8 |
| adoption.dependent_repos | 35,613 | 1,968 |
| adoption.github_stars | 10,270 | 34,293 |
| adoption.package_downloads_weekly | 144,066,753 | 15,796,363 |
| deployment.options | `{"self_hosted":true}` | `{"self_hosted":true}` |
| description.long | A package installer for Python that downloads and installs libraries and dependencies from the Python Package Index and other package repositories, enabling developers to manage project dependencies. | A command-line tool that manages Python project dependencies, enforces consistent builds across environments, packages code for distribution, and handles publication to package registries. It includes intelligent conflict resolution for dependencies and creates isolated virtual environments. |
| features.capabilities | `{"role":"manager_client","ecosystem":"python","deployment":"cli_local","workspaces":false,"open_source":"oss","pricing_model":"free","upstream_proxy":true,"package_formats":"single","private_packages":true,"content_addressable":false,"vuln_license_scanning":false,"lockfile_deterministic":true,"supply_chain_integrity":false}` | `{"role":"manager_client","ecosystem":"python","deployment":"cli_local","open_source":"oss","pricing_model":"free","package_formats":"multi","private_packages":true,"lockfile_deterministic":true}` |
| integrations.count | 0 | 1 |
| integrations.list | - | `[{"name":"PyPI"}]` |
| language.primary | Python | Python |
| license.spdx | MIT | MIT |
| platform.support | `{"cli":true}` | `{"cli":true}` |
| pricing | `{"type":"free","freeTier":true,"sourceUrl":"https://pip.pypa.io","retrievedAt":"2026-08-14T21:37:32.516Z"}` | `{"type":"free","sourceUrl":"https://python-poetry.org","retrievedAt":"2026-08-14T08:32:09.718Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | free | commercial |
| pricing.price_level | free | free |
| pricing.transparent | yes | yes |
| release.cadence_days | - | 34 |
| release.history | - | `[{"url":"https://github.com/python-poetry/poetry/releases/tag/2.4.1","date":"2026-05-09T15:17:39Z","type":"stable","version":"2.4.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.4.0","date":"2026-05-03T15:04:59Z","type":"stable","version":"2.4.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.4","date":"2026-04-12T15:14:53Z","type":"stable","version":"2.3.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.3","date":"2026-03-29T12:23:09Z","type":"stable","version":"2.3.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.2","date":"2026-02-01T15:39:36Z","type":"stable","version":"2.3.2"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.1","date":"2026-01-20T14:51:42Z","type":"stable","version":"2.3.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.0","date":"2026-01-18T13:44:52Z","type":"stable","version":"2.3.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.2.1","date":"2025-09-21T14:50:15Z","type":"stable","version":"2.2.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.2.0","date":"2025-09-14T11:43:56Z","type":"stable","version":"2.2.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.4","date":"2025-08-05T03:52:52Z","type":"stable","version":"2.1.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.3","date":"2025-05-04T13:37:05Z","type":"stable","version":"2.1.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.2","date":"2025-03-29T21:38:44Z","type":"stable","version":"2.1.2"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.1","date":"2025-02-16T21:04:55Z","type":"stable","version":"2.1.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.0","date":"2025-02-15T14:07:10Z","type":"stable","version":"2.1.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.0.1","date":"2025-01-12T05:10:10Z","type":"stable","version":"2.0.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.0.0","date":"2025-01-05T11:53:49Z","type":"stable","version":"2.0.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.5","date":"2024-12-06T16:29:16Z","type":"stable","version":"1.8.5"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.4","date":"2024-10-14T15:43:01Z","type":"stable","version":"1.8.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.3","date":"2024-05-08T13:45:03Z","type":"stable","version":"1.8.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.2","date":"2024-03-02T15:26:36Z","type":"stable","version":"1.8.2"}]` |
| security.scorecard | 6.6 | 3 |
| security.vulnerabilities | `{"count":12,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=pip&per_page=100","last_12m":5,"max_severity":"HIGH"}` | `{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=poetry&per_page=100","last_12m":2,"max_severity":"CRITICAL"}` |

## Capabilities (Package Registries)

| Capability | pip | Poetry |
|---|:--:|:--:|
| **Core** |  |  |
| Role | Package manager client | Package manager client |
| **Ecosystem** |  |  |
| Ecosystem / language | Python | Python |
| **Deployment** |  |  |
| Deployment | CLI-local | CLI-local |
| **Formats** |  |  |
| Package formats supported | Single ecosystem | Many formats |
| **Hosting** |  |  |
| Private / scoped packages | ✓ | ✓ |
| Upstream proxy / caching | ✓ | - |
| **Resolution** |  |  |
| Lockfile / deterministic installs | ✓ | ✓ |
| Workspaces / monorepo | ✗ | - |
| Content-addressable store | ✗ | - |
| **Supply chain** |  |  |
| Supply-chain integrity | ✗ | - |
| Vulnerability / licence scanning | ✗ | - |
| **Licensing** |  |  |
| Openness | Open-source | Open-source |
| **Pricing** |  |  |
| Pricing model | Free / OSS | Free / OSS |

*Source: Vioscale. Generated 2026-09-01T17:07:44.008Z. "-" = undocumented, not absent.*