xiaolai 6740288030 fix: pin requirements.txt to known-good versions (#90) ...

All 6 packages were fully unpinned, allowing a compromised upstream
release to silently introduce malicious code on `pip install`. Pin to
current stable versions to ensure reproducible, auditable builds.

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-04-25 00:25:30 +02:00

135 B

Raw Blame History

View Raw