search

mpcabd / python-arabic-reshaper

Reconstruct Arabic sentences to be used in applications that don't support Arabic
MIT License
395 stars 81 forks source link

Security vulnerability on the "future" dependency #88

Closed Ash-Crow closed 1 year ago

Ash-Crow commented 1 year ago

There is a security vulnerability with high severity on future, which is a dependency of this project.

Per the discussion there https://github.com/PythonCharmers/python-future/issues/612, it seems that the project is more or less dead, and the PR to fix this vulnerability has now been opened for two weeks.

As future only exists to maintain compatibility with python2.7, which itself has been officially EOL'd for 3 years now, perhaps it is the occasion for this project to drop python2 compatibility at all?

MarjanaVoronina commented 1 year ago

Same issue here. Would be nice to drop Python 2 support.

mpcabd commented 1 year ago

I'll release a new version without the future dependency and py2 support. Thanks for flagging this.

mpcabd commented 1 year ago

v3.0.0 released.