adithya-s-k / adithya-s-k/omniparse

Dependency hardening: pin minimum safe dependency versions

Offen Anfängerfreundlich
#117 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
7.9k
Forks
676
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

Hi, thanks for omniparse. Low-priority dependency-hardening note, not an active vulnerability report - a default install resolves to safe versions today.

These declarations also permit older versions with known CVEs; pinning a minimum prevents an accidental downgrade (please test compatibility):

- transformers: pin >= 4.51.0 (e.g. CVE-2025-3263 and 1 more)

(Low-priority dependency-hygiene note - feel free to close if not useful, happy to send a PR.)

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Start by locating the dependency declaration file(s) in the repo where `transformers` is listed, since the issue is about pinned versions in dependency declarations. Update the `transformers` entry to enforce `>= 4.51.0` and check whether any related constraints need matching values. Then run the project’s normal install/test checks to confirm compatibility. The issue is done when the dependency floor is pinned and tests/install pass without regressions.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
huggingface, python
Bereich
security
Issue-Typ
Bug
Schwierigkeit
2/5
Geschätzter Aufwand
1-3 Stunden
Aktivitätsstatus
Ruhig
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
68/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.