https://tongfamily.com/2024/02/22/dev-strange-pipenv-bugs-and-dealing-with-dependabot/