search

pyupio / safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
https://safetycli.com/product/safety-cli
MIT License
1.69k stars 143 forks source link

Add minimum typer version #563

Open Iain-S opened 1 month ago

Iain-S commented 1 month ago

Although typer is still in 0.x.y, it would be of benefit to have a minimum version specified in setup.cfg. This line, for example, imports MarkupMode, which was not in typer.core until 0.6.0.

https://github.com/pyupio/safety/blob/adc0e6acc0d20f4f674ead983e8e9ceea0df4178/safety/cli_util.py#L8

Could we change setup.cfg to be

typer>=0.6.0

I'm happy to verify the exact minimum version though I guess that's subject to constant change.

github-actions[bot] commented 1 month ago

Hi @Iain-S, thank you for opening this issue!

We appreciate your effort in reporting this. Our team will review it and get back to you soon. If you have any additional details or updates, feel free to add them to this issue.

Note: If this is a serious security issue that could impact the security of Safety CLI users, please email security@safetycli.com immediately.

Thank you for contributing to Safety CLI!