github-code/claude-howto
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: pin requirements.txt to known-good versions (#90)

Browse Source 
All 6 packages were fully unpinned, allowing a compromised upstream
release to silently introduce malicious code on `pip install`. Pin to
current stable versions to ensure reproducible, auditable builds.

Co-authored-by: Claude Code <noreply@anthropic.com>
This commit is contained in:
xiaolai
2026-04-25 06:25:30 +08:00
committed by GitHub
parent 05f0202536
commit 6740288030
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
scripts/requirements.txt
View File

@@ -1,7 +1,7 @@
# Core dependencies for build_epub.py # Core dependencies for build_epub.py
ebooklib ebooklib==0.18
markdown markdown==3.7
beautifulsoup4 beautifulsoup4==4.12.3
httpx httpx==0.28.1
pillow pillow==11.1.0
tenacity tenacity==9.0.0