Closed Redoubts closed 1 year ago
Hi @caesar0301 and @liamlundy, any chance to review this PR?
python-future
has been flagged as having a CVE (https://nvd.nist.gov/vuln/detail/CVE-2022-40899) and is seemingly not maintained. Implementing six
seems to be a good option and is more popular from what I can see.
Can I convince you to use
six
instead ofpython-future
for py2/py3 compatibility?six
seems to be the most popular solution to this, with equivalent names for your usage, and the other project has a few issues that will never be fixed and is annoying for me to have as a sub-dependency.