{"action":"created","issue":{"url":"https://api.github.com/repos/pypa/pipenv/issues/1737","repository_url":"https://api.github.com/repos/pypa/pipenv","labels_url":"https://api.github.com/repos/pypa/pipenv/issues/1737/labels{/name}","comments_url":"https://api.github.com/repos/pypa/pipenv/issues/1737/comments","events_url":"https://api.github.com/repos/pypa/pipenv/issues/1737/events","html_url":"https://github.com/pypa/pipenv/issues/1737","id":305198214,"number":1737,"title":"Incorrect dependencies for fixed version on python 2.7","user":{"login":"puzan","id":1814270,"avatar_url":"https://avatars3.githubusercontent.com/u/1814270?v=4","gravatar_id":"","url":"https://api.github.com/users/puzan","html_url":"https://github.com/puzan","followers_url":"https://api.github.com/users/puzan/followers","following_url":"https://api.github.com/users/puzan/following{/other_user}","gists_url":"https://api.github.com/users/puzan/gists{/gist_id}","starred_url":"https://api.github.com/users/puzan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/puzan/subscriptions","organizations_url":"https://api.github.com/users/puzan/orgs","repos_url":"https://api.github.com/users/puzan/repos","events_url":"https://api.github.com/users/puzan/events{/privacy}","received_events_url":"https://api.github.com/users/puzan/received_events","type":"User","site_admin":false},"labels":[{"id":522150500,"url":"https://api.github.com/repos/pypa/pipenv/labels/wontfix","name":"wontfix","color":"ffffff","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-03-14T15:05:02Z","updated_at":"2018-03-14T15:14:18Z","closed_at":"2018-03-14T15:11:17Z","author_association":"NONE","body":"I'm using paramiko and trying to fix version 1.15.4 (legacy requirement). But lock file includes dependencies for some new paramiko versions (see below). The same behaviour I have seen for other packages too with python 2.7. With python 3.6 dependencies are correct.\r\n\r\nExpected dependencies:\r\n\r\n```\r\necdsa==0.13\r\nparamiko==1.15.4\r\npycrypto==2.6.1\r\n```\r\n\r\nReal dependencies:\r\n\r\n```\r\nasn1crypto==0.24.0\r\nbcrypt==3.1.4\r\ncffi==1.11.5\r\ncryptography==2.1.4\r\necdsa==0.13\r\nenum34==1.1.6\r\nidna==2.6\r\nipaddress==1.0.19\r\nparamiko==1.15.4\r\npyasn1==0.4.2\r\npycparser==2.18\r\npycrypto==2.6.1\r\nPyNaCl==1.2.1\r\nsix==1.11.0\r\n```\r\n\r\n<details><summary>$ python -m pipenv.help output</summary>\r\nPipenv version: `'11.7.2'`\r\n\r\nPipenv location: `'/usr/local/lib/python2.7/site-packages/pipenv'`\r\n\r\nPython location: `'/usr/local/bin/python'`\r\n\r\nOther Python installations in `PATH`:\r\n\r\n  - `2.7`: `/usr/local/bin/python2.7`\r\n  - `2.7`: `/usr/local/bin/python2.7`\r\n  - `2.7`: `/usr/local/bin/python2.7`\r\n\r\n  - `2.7.14`: `/usr/local/bin/python`\r\n  - `2.7.14`: `/usr/local/bin/python`\r\n  - `2.7.14`: `/usr/local/bin/python2`\r\n  - `2.7.14`: `/usr/local/bin/python2`\r\n\r\nPEP 508 Information:\r\n\r\n```\r\n{'implementation_name': 'cpython',\r\n 'implementation_version': '0',\r\n 'os_name': 'posix',\r\n 'platform_machine': 'x86_64',\r\n 'platform_python_implementation': 'CPython',\r\n 'platform_release': '4.9.60-linuxkit-aufs',\r\n 'platform_system': 'Linux',\r\n 'platform_version': '#1 SMP Mon Nov 6 16:00:12 UTC 2017',\r\n 'python_full_version': '2.7.14',\r\n 'python_version': '2.7',\r\n 'sys_platform': 'linux2'}\r\n```\r\n\r\nSystem environment variables:\r\n\r\n  - `LANG`\r\n  - `TERM`\r\n  - `HOSTNAME`\r\n  - `PYTHON_VERSION`\r\n  - `SHLVL`\r\n  - `OLDPWD`\r\n  - `PYTHON_PIP_VERSION`\r\n  - `PWD`\r\n  - `GPG_KEY`\r\n  - `PATH`\r\n  - `HOME`\r\n  - `PIP_PYTHON_PATH`\r\n  - `PYTHONUNBUFFERED`\r\n\r\nPipenv–specific environment variables:\r\n\r\n\r\nDebug–specific environment variables:\r\n\r\n  - `PATH`: `/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`\r\n  - `LANG`: `C.UTF-8`\r\n  - `PWD`: `/test`\r\n\r\n\r\n---------------------------\r\n\r\nContents of `Pipfile` ('/test/Pipfile'):\r\n\r\n```toml\r\n[[source]]\r\n\r\nurl = \"https://pypi.python.org/simple\"\r\nverify_ssl = true\r\nname = \"pypi\"\r\n\r\n\r\n[dev-packages]\r\n\r\n\r\n\r\n[packages]\r\n\r\nparamiko = \"==1.15.4\"\r\n\r\n\r\n[requires]\r\n\r\npython_version = \"2.7\"\r\n\r\n```\r\n\r\n\r\nContents of `Pipfile.lock` ('/test/Pipfile.lock'):\r\n\r\n```json\r\n{\r\n    \"_meta\": {\r\n        \"hash\": {\r\n            \"sha256\": \"c6fca57fd7008627de6e7e10a254ce0732f46b7e1114b432c0907900a38820d0\"\r\n        },\r\n        \"pipfile-spec\": 6,\r\n        \"requires\": {\r\n            \"python_version\": \"2.7\"\r\n        },\r\n        \"sources\": [\r\n            {\r\n                \"name\": \"pypi\",\r\n                \"url\": \"https://pypi.python.org/simple\",\r\n                \"verify_ssl\": true\r\n            }\r\n        ]\r\n    },\r\n    \"default\": {\r\n        \"asn1crypto\": {\r\n            \"hashes\": [\r\n                \"sha256:2f1adbb7546ed199e3c90ef23ec95c5cf3585bac7d11fb7eb562a3fe89c64e87\",\r\n                \"sha256:9d5c20441baf0cb60a4ac34cc447c6c189024b6b4c6cd7877034f4965c464e49\"\r\n            ],\r\n            \"version\": \"==0.24.0\"\r\n        },\r\n        \"bcrypt\": {\r\n            \"hashes\": [\r\n                \"sha256:01477981abf74e306e8ee31629a940a5e9138de000c6b0898f7f850461c4a0a5\",\r\n                \"sha256:054d6e0acaea429e6da3613fcd12d05ee29a531794d96f6ab959f29a39f33391\",\r\n                \"sha256:0872eeecdf9a429c1420158500eedb323a132bc5bf3339475151c52414729e70\",\r\n                \"sha256:09a3b8c258b815eadb611bad04ca15ec77d86aa9ce56070e1af0d5932f17642a\",\r\n                \"sha256:0f317e4ffbdd15c3c0f8ab5fbd86aa9aabc7bea18b5cc5951b456fe39e9f738c\",\r\n                \"sha256:2788c32673a2ad0062bea850ab73cffc0dba874db10d7a3682b6f2f280553f20\",\r\n                \"sha256:321d4d48be25b8d77594d8324c0585c80ae91ac214f62db9098734e5e7fb280f\",\r\n                \"sha256:346d6f84ff0b493dbc90c6b77136df83e81f903f0b95525ee80e5e6d5e4eef84\",\r\n                \"sha256:34dd60b90b0f6de94a89e71fcd19913a30e83091c8468d0923a93a0cccbfbbff\",\r\n                \"sha256:3b4c23300c4eded8895442c003ae9b14328ae69309ac5867e7530de8bdd7875d\",\r\n                \"sha256:43d1960e7db14042319c46925892d5fa99b08ff21d57482e6f5328a1aca03588\",\r\n                \"sha256:49e96267cd9be55a349fd74f9852eb9ae2c427cd7f6455d0f1765d7332292832\",\r\n                \"sha256:67ed1a374c9155ec0840214ce804616de49c3df9c5bc66740687c1c9b1cd9e8d\",\r\n                \"sha256:6efd9ca20aefbaf2e7e6817a2c6ed4a50ff6900fafdea1bcb1d0e9471743b144\",\r\n                \"sha256:8569844a5d8e1fdde4d7712a05ab2e6061343ac34af6e7e3d7935b2bd1907bfd\",\r\n                \"sha256:8629ea6a8a59f865add1d6a87464c3c676e60101b8d16ef404d0a031424a8491\",\r\n                \"sha256:988cac675e25133d01a78f2286189c1f01974470817a33eaf4cfee573cfb72a5\",\r\n                \"sha256:9a6fedda73aba1568962f7543a1f586051c54febbc74e87769bad6a4b8587c39\",\r\n                \"sha256:9eced8962ce3b7124fe20fd358cf8c7470706437fa064b9874f849ad4c5866fc\",\r\n                \"sha256:a005ed6163490988711ff732386b08effcbf8df62ae93dd1e5bda0714fad8afb\",\r\n                \"sha256:ae35dbcb6b011af6c840893b32399252d81ff57d52c13e12422e16b5fea1d0fb\",\r\n                \"sha256:b1e8491c6740f21b37cca77bc64677696a3fb9f32360794d57fa8477b7329eda\",\r\n                \"sha256:c906bdb482162e9ef48eea9f8c0d967acceb5c84f2d25574c7d2a58d04861df1\",\r\n                \"sha256:cb18ffdc861dbb244f14be32c47ab69604d0aca415bee53485fcea4f8e93d5ef\",\r\n                \"sha256:d86da365dda59010ba0d1ac45aa78390f56bf7f992e65f70b3b081d5e5257b09\",\r\n                \"sha256:e22f0997622e1ceec834fd25947dc2ee2962c2133ea693d61805bc867abaf7ea\",\r\n                \"sha256:f2fe545d27a619a552396533cddf70d83cecd880a611cdfdbb87ca6aec52f66b\",\r\n                \"sha256:f7fd3ed3745fe6e81e28dc3b3d76cce31525a91f32a387e1febd6b982caf8cdb\",\r\n                \"sha256:f9210820ee4818d84658ed7df16a7f30c9fba7d8b139959950acef91745cc0f7\"\r\n            ],\r\n            \"version\": \"==3.1.4\"\r\n        },\r\n        \"cffi\": {\r\n            \"hashes\": [\r\n                \"sha256:151b7eefd035c56b2b2e1eb9963c90c6302dc15fbd8c1c0a83a163ff2c7d7743\",\r\n                \"sha256:1553d1e99f035ace1c0544050622b7bc963374a00c467edafac50ad7bd276aef\",\r\n                \"sha256:1b0493c091a1898f1136e3f4f991a784437fac3673780ff9de3bcf46c80b6b50\",\r\n                \"sha256:2ba8a45822b7aee805ab49abfe7eec16b90587f7f26df20c71dd89e45a97076f\",\r\n                \"sha256:3c85641778460581c42924384f5e68076d724ceac0f267d66c757f7535069c93\",\r\n                \"sha256:3eb6434197633b7748cea30bf0ba9f66727cdce45117a712b29a443943733257\",\r\n                \"sha256:4c91af6e967c2015729d3e69c2e51d92f9898c330d6a851bf8f121236f3defd3\",\r\n                \"sha256:770f3782b31f50b68627e22f91cb182c48c47c02eb405fd689472aa7b7aa16dc\",\r\n                \"sha256:79f9b6f7c46ae1f8ded75f68cf8ad50e5729ed4d590c74840471fc2823457d04\",\r\n                \"sha256:7a33145e04d44ce95bcd71e522b478d282ad0eafaf34fe1ec5bbd73e662f22b6\",\r\n                \"sha256:857959354ae3a6fa3da6651b966d13b0a8bed6bbc87a0de7b38a549db1d2a359\",\r\n                \"sha256:87f37fe5130574ff76c17cab61e7d2538a16f843bb7bca8ebbc4b12de3078596\",\r\n                \"sha256:95d5251e4b5ca00061f9d9f3d6fe537247e145a8524ae9fd30a2f8fbce993b5b\",\r\n                \"sha256:9d1d3e63a4afdc29bd76ce6aa9d58c771cd1599fbba8cf5057e7860b203710dd\",\r\n                \"sha256:a36c5c154f9d42ec176e6e620cb0dd275744aa1d804786a71ac37dc3661a5e95\",\r\n                \"sha256:ae5e35a2c189d397b91034642cb0eab0e346f776ec2eb44a49a459e6615d6e2e\",\r\n                \"sha256:b0f7d4a3df8f06cf49f9f121bead236e328074de6449866515cea4907bbc63d6\",\r\n                \"sha256:b75110fb114fa366b29a027d0c9be3709579602ae111ff61674d28c93606acca\",\r\n                \"sha256:ba5e697569f84b13640c9e193170e89c13c6244c24400fc57e88724ef610cd31\",\r\n                \"sha256:be2a9b390f77fd7676d80bc3cdc4f8edb940d8c198ed2d8c0be1319018c778e1\",\r\n                \"sha256:d5d8555d9bfc3f02385c1c37e9f998e2011f0db4f90e250e5bc0c0a85a813085\",\r\n                \"sha256:e55e22ac0a30023426564b1059b035973ec82186ddddbac867078435801c7801\",\r\n                \"sha256:e90f17980e6ab0f3c2f3730e56d1fe9bcba1891eeea58966e89d352492cc74f4\",\r\n                \"sha256:ecbb7b01409e9b782df5ded849c178a0aa7c906cf8c5a67368047daab282b184\",\r\n                \"sha256:ed01918d545a38998bfa5902c7c00e0fee90e957ce036a4000a88e3fe2264917\",\r\n                \"sha256:edabd457cd23a02965166026fd9bfd196f4324fe6032e866d0f3bd0301cd486f\",\r\n                \"sha256:fdf1c1dc5bafc32bc5d08b054f94d659422b05aba244d6be4ddc1c72d9aa70fb\"\r\n            ],\r\n            \"version\": \"==1.11.5\"\r\n        },\r\n        \"cryptography\": {\r\n            \"hashes\": [\r\n                \"sha256:0d39a93cf25edeae1f796bbc5960e587f34513a852564f6345ea4491a86c5997\",\r\n                \"sha256:18d0b0fc21f39b35ea469a82584f55eeecec1f65a92d85af712c425bdef627b3\",\r\n                \"sha256:27a208b9600166976182351174948e128818e7fc95cbdba18143f3106a211546\",\r\n                \"sha256:28e4e9a97713aa47b5ef9c5003def2eb58aec89781ef3ef82b1c2916a8b0639b\",\r\n                \"sha256:2cfcee8829c5dec55597826d52c26bc26e7ce39adb4771584459d0636b0b7108\",\r\n                \"sha256:33b564196dcd563e309a0b07444e31611368afe3a3822160c046f5e4c3b5cdd7\",\r\n                \"sha256:41f94194ae78f83fd94ca94fb8ad65f92210a76a2421169ffa5c33c3ec7605f4\",\r\n                \"sha256:4f385ee7d39ee1ed74f1d6b1da03d0734ea82855a7b28a9e6e88c4091bc58664\",\r\n                \"sha256:55555d784cfdf9033e81f044c0df04babed2aa141213765d960d233b0139e353\",\r\n                \"sha256:69285f5615507b6625f89ea1048addd1d9218585fb886eb90bdebb1d2b2d26f5\",\r\n                \"sha256:6cb1224da391fa90f1be524eafb375b62baf8d3df9690b32e8cc475ccfccee5e\",\r\n                \"sha256:6fb22f63e17813f3d1d8e30dd1e249e2c34233ba1d3de977fd31cb5db764c7d0\",\r\n                \"sha256:7a2409f1564c84bcf2563d379c9b6148c5bc6b0ae46e109f6a7b4bebadf551df\",\r\n                \"sha256:8487524a1212223ca6dc7e2c8913024618f7ff29855c98869088e3818d5f6733\",\r\n                \"sha256:9a2945efcff84830c8e237ab037d0269380d75d400a89cc9e5628e52647e21be\",\r\n                \"sha256:9a47a80f65f4feaaf8415a40c339806c7d7d867152ddccc6ca87f707c8b7b565\",\r\n                \"sha256:a3c180d12ffb1d8ee5b33a514a5bcb2a9cc06cc89aa74038015591170c82f55d\",\r\n                \"sha256:a5f2c681fd040ed648513939a1dd2242af19bd5e9e79e53b6dcfa33bdae61217\",\r\n                \"sha256:b984523d28737e373c7c35c8b6db6001537609d47534892de189bebebaa42a47\",\r\n                \"sha256:d18df9cf3f3212df28d445ea82ce702c4d7a35817ef7a38ee38879ffa8f7e857\",\r\n                \"sha256:e4d967371c5b6b2e67855066471d844c5d52d210c36c28d49a8507b96e2c5291\",\r\n                \"sha256:ee245f185fae723133511e2450be08a66c2eebb53ad27c0c19b228029f4748a5\",\r\n                \"sha256:fc2208d95d9ecc8032f5e38330d5ace2e3b0b998e42b08c30c35b2ab3a4a3bc8\"\r\n            ],\r\n            \"version\": \"==2.1.4\"\r\n        },\r\n        \"enum34\": {\r\n            \"hashes\": [\r\n                \"sha256:2d81cbbe0e73112bdfe6ef8576f2238f2ba27dd0d55752a776c41d38b7da2850\",\r\n                \"sha256:644837f692e5f550741432dd3f223bbb9852018674981b1664e5dc339387588a\",\r\n                \"sha256:6bd0f6ad48ec2aa117d3d141940d484deccda84d4fcd884f5c3d93c23ecd8c79\",\r\n                \"sha256:8ad8c4783bf61ded74527bffb48ed9b54166685e4230386a9ed9b1279e2df5b1\"\r\n            ],\r\n            \"markers\": \"python_version < '3'\",\r\n            \"version\": \"==1.1.6\"\r\n        },\r\n        \"idna\": {\r\n            \"hashes\": [\r\n                \"sha256:2c6a5de3089009e3da7c5dde64a141dbc8551d5b7f6cf4ed7c2568d0cc520a8f\",\r\n                \"sha256:8c7309c718f94b3a625cb648ace320157ad16ff131ae0af362c9f21b80ef6ec4\"\r\n            ],\r\n            \"version\": \"==2.6\"\r\n        },\r\n        \"ipaddress\": {\r\n            \"hashes\": [\r\n                \"sha256:200d8686011d470b5e4de207d803445deee427455cd0cb7c982b68cf82524f81\"\r\n            ],\r\n            \"markers\": \"python_version < '3'\",\r\n            \"version\": \"==1.0.19\"\r\n        },\r\n        \"paramiko\": {\r\n            \"hashes\": [\r\n                \"sha256:b8fca1c1439b9b44364aacd929f7eae6dceebbb2744c2f5d9c0b9ed54499212c\",\r\n                \"sha256:fc32e2709ab955ea23636587e05e276e7db7275a7ec00e09425372fbb932fa36\"\r\n            ],\r\n            \"index\": \"pypi\",\r\n            \"version\": \"==1.15.4\"\r\n        },\r\n        \"pyasn1\": {\r\n            \"hashes\": [\r\n                \"sha256:0d7f6e959fe53f3960a23d73f35e1fce61348b30915b6664309ca756de7c1f89\",\r\n                \"sha256:5a0db897b311d265cde49615cf783f1c78613138605cdd0f907ecfa5b2aba3ee\",\r\n                \"sha256:758cb50abddc03e4563fd9e7f03db56e3e87b58c0bd01247360326e5c0c7ffa5\",\r\n                \"sha256:7d626683e3d792cccc608da02498aff37ab4f3dafd8905d6bf755d11f9b26b43\",\r\n                \"sha256:a7efe807c4b83a859e2735c692b92ed7b567cfddc4163763412920041d876c2b\",\r\n                \"sha256:b5a9ca48055b9a20f6d1b3d68e38692e5431c86a0f99ea602e61294e891fee5b\",\r\n                \"sha256:c07d6e587b2f928366b1f67c09bda026a3e6fcc99e80a744dc67f8fca3895626\",\r\n                \"sha256:d258b0a71994f7770599835249cece1caef3c70def868c4915e6e5ca49b67d15\",\r\n                \"sha256:d5cd6ed995dba16fad0c521cfe31cd2d68400b53fcc2bce93326829be73ab6d1\",\r\n                \"sha256:d84c2aea3cf43780e9e6a19f4e4dddee9f6976519020e64e47c57e5c7a8c3dd2\",\r\n                \"sha256:e85895087905c65b5b594eb91f7522664c85545b147d5f4d4e7b1b07da8dcbdc\",\r\n                \"sha256:f81c96761fca60d64b1c9b79ec2e40cf9495a745cf570613079ef324aeb9672b\"\r\n            ],\r\n            \"version\": \"==0.4.2\"\r\n        },\r\n        \"pycparser\": {\r\n            \"hashes\": [\r\n                \"sha256:99a8ca03e29851d96616ad0404b4aad7d9ee16f25c9f9708a11faf2810f7b226\"\r\n            ],\r\n            \"version\": \"==2.18\"\r\n        },\r\n        \"pynacl\": {\r\n            \"hashes\": [\r\n                \"sha256:04e30e5bdeeb2d5b34107f28cd2f5bbfdc6c616f3be88fc6f53582ff1669eeca\",\r\n                \"sha256:0bfa0d94d2be6874e40f896e0a67e290749151e7de767c5aefbad1121cad7512\",\r\n                \"sha256:11aa4e141b2456ce5cecc19c130e970793fa3a2c2e6fbb8ad65b28f35aa9e6b6\",\r\n                \"sha256:13bdc1fe084ff9ac7653ae5a924cae03bf4bb07c6667c9eb5b6eb3c570220776\",\r\n                \"sha256:14339dc233e7a9dda80a3800e64e7ff89d0878ba23360eea24f1af1b13772cac\",\r\n                \"sha256:1d33e775fab3f383167afb20b9927aaf4961b953d76eeb271a5703a6d756b65b\",\r\n                \"sha256:2a42b2399d0428619e58dac7734838102d35f6dcdee149e0088823629bf99fbb\",\r\n                \"sha256:2dce05ac8b3c37b9e2f65eab56c544885607394753e9613fd159d5e2045c2d98\",\r\n                \"sha256:6453b0dae593163ffc6db6f9c9c1597d35c650598e2c39c0590d1757207a1ac2\",\r\n                \"sha256:73a5a96fb5fbf2215beee2353a128d382dbca83f5341f0d3c750877a236569ef\",\r\n                \"sha256:8abb4ef79161a5f58848b30ab6fb98d8c466da21fdd65558ce1d7afc02c70b5f\",\r\n                \"sha256:8ac1167195b32a8755de06efd5b2d2fe76fc864517dab66aaf65662cc59e1988\",\r\n                \"sha256:8f505f42f659012794414fa57c498404e64db78f1d98dfd40e318c569f3c783b\",\r\n                \"sha256:be71cd5fce04061e1f3d39597f93619c80cdd3558a6c9ba99a546f144a8d8101\",\r\n                \"sha256:cf6877124ae6a0698404e169b3ba534542cfbc43f939d46b927d956daf0a373a\",\r\n                \"sha256:d0eb5b2795b7ee2cbcfcadacbe95a13afbda048a262bd369da9904fecb568975\",\r\n                \"sha256:d795f506bcc9463efb5ebb0f65ed77921dcc9e0a50499dedd89f208445de9ecb\",\r\n                \"sha256:d8aaf7e5d6b0e0ef7d6dbf7abeb75085713d0100b4eb1a4e4e857de76d77ac45\",\r\n                \"sha256:e0d38fa0a75f65f556fb912f2c6790d1fa29b7dd27a1d9cc5591b281321eaaa9\",\r\n                \"sha256:eb2acabbd487a46b38540a819ef67e477a674481f84a82a7ba2234b9ba46f752\",\r\n                \"sha256:eeee629828d0eb4f6d98ac41e9a3a6461d114d1d0aa111a8931c049359298da0\",\r\n                \"sha256:f5ce9e26d25eb0b2d96f3ef0ad70e1d3ae89b5d60255c462252a3e456a48c053\",\r\n                \"sha256:fabf73d5d0286f9e078774f3435601d2735c94ce9e514ac4fb945701edead7e4\"\r\n            ],\r\n            \"version\": \"==1.2.1\"\r\n        },\r\n        \"six\": {\r\n            \"hashes\": [\r\n                \"sha256:70e8a77beed4562e7f14fe23a786b54f6296e34344c23bc42f07b15018ff98e9\",\r\n                \"sha256:832dc0e10feb1aa2c68dcc57dbb658f1c7e65b9b61af69048abc87a2db00a0eb\"\r\n            ],\r\n            \"version\": \"==1.11.0\"\r\n        }\r\n    },\r\n    \"develop\": {}\r\n}\r\n\r\n```\r\n</details>\r\n\r\n<details><summary>$ pipenv lock -v</summary>\r\n\r\n```\r\nLocking [dev-packages] dependencies…\r\nUsing pip: -i https://pypi.python.org/simple\r\n\r\n                          ROUND 1\r\nCurrent constraints:\r\n\r\nFinding the best candidates:\r\n\r\nFinding secondary dependencies:\r\n------------------------------------------------------------\r\nResult of round 1: stable, done\r\n\r\nLocking [packages] dependencies…\r\nUsing pip: -i https://pypi.python.org/simple\r\n\r\n                          ROUND 1\r\nCurrent constraints:\r\n  paramiko==1.15.4\r\n\r\nFinding the best candidates:\r\n  found candidate paramiko==1.15.4 (constraint was ==1.15.4)\r\n\r\nFinding secondary dependencies:\r\n  paramiko==1.15.4          requires bcrypt>=3.1.3, cryptography>=1.5, pyasn1>=0.1.7, pynacl>=1.0.1\r\n\r\nNew dependencies found in this round:\r\n  adding [u'bcrypt', '>=3.1.3', '[]']\r\n  adding [u'cryptography', '>=1.5', '[]']\r\n  adding [u'pyasn1', '>=0.1.7', '[]']\r\n  adding [u'pynacl', '>=1.0.1', '[]']\r\nRemoved dependencies in this round:\r\nUnsafe dependencies in this round:\r\n------------------------------------------------------------\r\nResult of round 1: not stable\r\n\r\n                          ROUND 2\r\nCurrent constraints:\r\n  bcrypt>=3.1.3\r\n  cryptography>=1.5\r\n  paramiko==1.15.4\r\n  pyasn1>=0.1.7\r\n  pynacl>=1.0.1\r\n\r\nFinding the best candidates:\r\n  found candidate bcrypt==3.1.4 (constraint was >=3.1.3)\r\n  found candidate cryptography==2.1.4 (constraint was >=1.5)\r\n  found candidate paramiko==1.15.4 (constraint was ==1.15.4)\r\n  found candidate pyasn1==0.4.2 (constraint was >=0.1.7)\r\n  found candidate pynacl==1.2.1 (constraint was >=1.0.1)\r\n\r\nFinding secondary dependencies:\r\n  pyasn1==0.4.2             requires -\r\n  paramiko==1.15.4          requires bcrypt>=3.1.3, cryptography>=1.5, pyasn1>=0.1.7, pynacl>=1.0.1\r\n  bcrypt==3.1.4             requires cffi>=1.1, six>=1.4.1\r\n  pynacl==1.2.1             requires cffi>=1.4.1, six\r\n  cryptography==2.1.4       requires asn1crypto>=0.21.0, cffi>=1.7; platform_python_implementation != \"PyPy\", enum34; python_version < \"3\", idna>=2.1, ipaddress; python_version < \"3\", six>=1.4.1\r\n\r\nNew dependencies found in this round:\r\n  adding [u'asn1crypto', '>=0.21.0', '[]']\r\n  adding [u'cffi', '>=1.1,>=1.4.1,>=1.7', '[]']\r\n  adding [u'enum34', '', '[]']\r\n  adding [u'idna', '>=2.1', '[]']\r\n  adding [u'ipaddress', '', '[]']\r\n  adding [u'six', '>=1.4.1', '[]']\r\nRemoved dependencies in this round:\r\nUnsafe dependencies in this round:\r\n------------------------------------------------------------\r\nResult of round 2: not stable\r\n\r\n                          ROUND 3\r\nCurrent constraints:\r\n  asn1crypto>=0.21.0\r\n  bcrypt>=3.1.3\r\n  cffi>=1.1,>=1.4.1,>=1.7\r\n  cryptography>=1.5\r\n  enum34\r\n  idna>=2.1\r\n  ipaddress\r\n  paramiko==1.15.4\r\n  pyasn1>=0.1.7\r\n  pynacl>=1.0.1\r\n  six>=1.4.1\r\n\r\nFinding the best candidates:\r\n  found candidate asn1crypto==0.24.0 (constraint was >=0.21.0)\r\n  found candidate bcrypt==3.1.4 (constraint was >=3.1.3)\r\n  found candidate cffi==1.11.5 (constraint was >=1.1,>=1.4.1,>=1.7)\r\n  found candidate cryptography==2.1.4 (constraint was >=1.5)\r\n  found candidate enum34==1.1.6 (constraint was <any>)\r\n  found candidate idna==2.6 (constraint was >=2.1)\r\n  found candidate ipaddress==1.0.19 (constraint was <any>)\r\n  found candidate paramiko==1.15.4 (constraint was ==1.15.4)\r\n  found candidate pyasn1==0.4.2 (constraint was >=0.1.7)\r\n  found candidate pynacl==1.2.1 (constraint was >=1.0.1)\r\n  found candidate six==1.11.0 (constraint was >=1.4.1)\r\n\r\nFinding secondary dependencies:\r\n  pynacl==1.2.1             requires cffi>=1.4.1, six\r\n  cryptography==2.1.4       requires asn1crypto>=0.21.0, cffi>=1.7; platform_python_implementation != \"PyPy\", enum34; python_version < \"3\", idna>=2.1, ipaddress; python_version < \"3\", six>=1.4.1\r\n  pyasn1==0.4.2             requires -\r\n  asn1crypto==0.24.0        requires -\r\n  six==1.11.0               requires -\r\n  paramiko==1.15.4          requires bcrypt>=3.1.3, cryptography>=1.5, pyasn1>=0.1.7, pynacl>=1.0.1\r\n  idna==2.6                 requires -\r\n  bcrypt==3.1.4             requires cffi>=1.1, six>=1.4.1\r\n\r\nNew dependencies found in this round:\r\n  adding [u'pycparser', '', '[]']\r\nRemoved dependencies in this round:\r\nUnsafe dependencies in this round:\r\n------------------------------------------------------------\r\nResult of round 3: not stable\r\n\r\n                          ROUND 4\r\nCurrent constraints:\r\n  asn1crypto>=0.21.0\r\n  bcrypt>=3.1.3\r\n  cffi>=1.1,>=1.4.1,>=1.7\r\n  cryptography>=1.5\r\n  enum34\r\n  idna>=2.1\r\n  ipaddress\r\n  paramiko==1.15.4\r\n  pyasn1>=0.1.7\r\n  pycparser\r\n  pynacl>=1.0.1\r\n  six>=1.4.1\r\n\r\nFinding the best candidates:\r\n  found candidate asn1crypto==0.24.0 (constraint was >=0.21.0)\r\n  found candidate bcrypt==3.1.4 (constraint was >=3.1.3)\r\n  found candidate cffi==1.11.5 (constraint was >=1.1,>=1.4.1,>=1.7)\r\n  found candidate cryptography==2.1.4 (constraint was >=1.5)\r\n  found candidate enum34==1.1.6 (constraint was <any>)\r\n  found candidate idna==2.6 (constraint was >=2.1)\r\n  found candidate ipaddress==1.0.19 (constraint was <any>)\r\n  found candidate paramiko==1.15.4 (constraint was ==1.15.4)\r\n  found candidate pyasn1==0.4.2 (constraint was >=0.1.7)\r\n  found candidate pycparser==2.18 (constraint was <any>)\r\n  found candidate pynacl==1.2.1 (constraint was >=1.0.1)\r\n  found candidate six==1.11.0 (constraint was >=1.4.1)\r\n\r\nFinding secondary dependencies:\r\n  six==1.11.0               requires -\r\n  paramiko==1.15.4          requires bcrypt>=3.1.3, cryptography>=1.5, pyasn1>=0.1.7, pynacl>=1.0.1\r\n  pyasn1==0.4.2             requires -\r\n  idna==2.6                 requires -\r\n  pycparser==2.18           requires -\r\n  asn1crypto==0.24.0        requires -\r\n  bcrypt==3.1.4             requires cffi>=1.1, six>=1.4.1\r\n  cffi==1.11.5              requires pycparser\r\n  cryptography==2.1.4       requires asn1crypto>=0.21.0, cffi>=1.7; platform_python_implementation != \"PyPy\", enum34; python_version < \"3\", idna>=2.1, ipaddress; python_version < \"3\", six>=1.4.1\r\n  pynacl==1.2.1             requires cffi>=1.4.1, six\r\n------------------------------------------------------------\r\nResult of round 4: stable, done\r\n\r\nUpdated Pipfile.lock (8820d0)!\r\n```\r\n</details>\r\n\r\n# Steps to replicate\r\n\r\n* docker run --rm -ti python:2.7-alpine sh\r\n* apk add --no-cache gcc g++ libffi-dev openssl-dev\r\n* pip install pipenv\r\n* pipenv install paramiko==1.15.4\r\n"},"comment":{"url":"https://api.github.com/repos/pypa/pipenv/issues/comments/373057671","html_url":"https://github.com/pypa/pipenv/issues/1737#issuecomment-373057671","issue_url":"https://api.github.com/repos/pypa/pipenv/issues/1737","id":373057671,"user":{"login":"puzan","id":1814270,"avatar_url":"https://avatars3.githubusercontent.com/u/1814270?v=4","gravatar_id":"","url":"https://api.github.com/users/puzan","html_url":"https://github.com/puzan","followers_url":"https://api.github.com/users/puzan/followers","following_url":"https://api.github.com/users/puzan/following{/other_user}","gists_url":"https://api.github.com/users/puzan/gists{/gist_id}","starred_url":"https://api.github.com/users/puzan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/puzan/subscriptions","organizations_url":"https://api.github.com/users/puzan/orgs","repos_url":"https://api.github.com/users/puzan/repos","events_url":"https://api.github.com/users/puzan/events{/privacy}","received_events_url":"https://api.github.com/users/puzan/received_events","type":"User","site_admin":false},"created_at":"2018-03-14T15:14:18Z","updated_at":"2018-03-14T15:14:18Z","author_association":"NONE","body":"When run `pipenv install paramiko==1.15.4` on python3:\r\n\r\nContents of `Pipfile`:\r\n\r\n```toml\r\n[[source]]\r\n\r\nurl = \"https://pypi.python.org/simple\"\r\nverify_ssl = true\r\nname = \"pypi\"\r\n\r\n\r\n[packages]\r\n\r\nparamiko = \"==1.15.4\"\r\n\r\n\r\n[dev-packages]\r\n\r\n\r\n\r\n[requires]\r\n\r\npython_version = \"3.6\"\r\n\r\n```\r\n\r\nContents of `Pipfile.lock` :\r\n\r\n```json\r\n{\r\n    \"_meta\": {\r\n        \"hash\": {\r\n            \"sha256\": \"f0a93c5832c81ec53e19864b56bdb87a5cbc77f9d1c9a808a501aac5dd60e2d4\"\r\n        },\r\n        \"pipfile-spec\": 6,\r\n        \"requires\": {\r\n            \"python_version\": \"3.6\"\r\n        },\r\n        \"sources\": [\r\n            {\r\n                \"name\": \"pypi\",\r\n                \"url\": \"https://pypi.python.org/simple\",\r\n                \"verify_ssl\": true\r\n            }\r\n        ]\r\n    },\r\n    \"default\": {\r\n        \"ecdsa\": {\r\n            \"hashes\": [\r\n                \"sha256:40d002cf360d0e035cf2cb985e1308d41aaa087cbfc135b2dc2d844296ea546c\",\r\n                \"sha256:64cf1ee26d1cde3c73c6d7d107f835fed7c6a2904aef9eac223d57ad800c43fa\"\r\n            ],\r\n            \"version\": \"==0.13\"\r\n        },\r\n        \"paramiko\": {\r\n            \"hashes\": [\r\n                \"sha256:b8fca1c1439b9b44364aacd929f7eae6dceebbb2744c2f5d9c0b9ed54499212c\",\r\n                \"sha256:fc32e2709ab955ea23636587e05e276e7db7275a7ec00e09425372fbb932fa36\"\r\n            ],\r\n            \"version\": \"==1.15.4\"\r\n        },\r\n        \"pycrypto\": {\r\n            \"hashes\": [\r\n                \"sha256:f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c\"\r\n            ],\r\n            \"version\": \"==2.6.1\"\r\n        }\r\n    },\r\n    \"develop\": {}\r\n}\r\n\r\n```"}}
{"actor":{"display_login":"puzan"}}