a CodeQL / Vulnerability scan detected a vulnerability by one of our downstream users (https://github.com/tianocore/edk2-pytool-extensions/issues/430) due pefile's use of the future package. We see that you had already removed future as a dependency in #348 for other reasons.
Would you be able / willing to do a new release to pypi so that we can take those changes without needing to pip install from the github repository directly?
a CodeQL / Vulnerability scan detected a vulnerability by one of our downstream users (https://github.com/tianocore/edk2-pytool-extensions/issues/430) due pefile's use of the
future
package. We see that you had already removedfuture
as a dependency in #348 for other reasons.Would you be able / willing to do a new release to pypi so that we can take those changes without needing to pip install from the github repository directly?
Thanks!!