Investigate OIPA's requirement vulnerabilities

zimmerman-team / IATI.cloud

IATI datastore powered by Apache Solr. Automatically Extracts and parses IATI XML files referenced in the IATI Registry & refreshed every 3 hrs. IATI is a global initiative to improve the transparency of development and humanitarian resources and their results for addressing poverty and crises.

https://datastore.iati.cloud

MIT License

32 stars 28 forks source link

Investigate OIPA's requirement vulnerabilities #779

Closed Eimis closed 6 years ago

Eimis commented 6 years ago

See: https://github.com/zimmerman-zimmerman/OIPA/network/dependencies

Eimis commented 6 years ago

I have removed the https://github.com/ffi/ffi dependency from static/foundation dependency in OIPA (in update/python3 branch), because:

the Foundation framework for OIPA acts as a static dependency anyway (no need to compile anything using ruby)
Foundation is an ancient framework
We're using https://github.com/zurb/foundation-compass-template (which is even older and worse)
UI will rebuilt anyway