dependency on deprecated 'future'

genomoncology / related

Nested Object Models in Python with dictionary, YAML, and JSON transformation support

MIT License

198 stars 15 forks source link

dependency on deprecated 'future' #60

Open onkelbeh opened 6 months ago

onkelbeh commented 6 months ago

Hello,

first, I hope you don't mind I included your component for Home Assistant Gentoo Overlay.

It uses a dependency on 'dev-python/future', and I now have received a deprecation notice. This library was made for Python 2 compatibility, and is redundant. Many linux distributions work on removal.

It had to be patched to work with Python 3.9+ and is also vulnerable to CVE-2022-40899.

Would it be possible to switch to a different library? Thanks a lot.

\B.

Antoni-Czaplicki commented 5 months ago

Hi, I stumbled on the same issue and created a fork that fixes the library for Python 3.12 and uploaded it to PyPI (required for Home Assistant Core integrations).

https://pypi.org/project/related-without-future/