adithya-s-k / adithya-s-k/omniparse
Dependency hardening: pin minimum safe dependency versions
- Vorherrschende Sprache
- Python
- Sterne
- 7.9k
- Forks
- 676
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
Hi, thanks for omniparse. Low-priority dependency-hardening note, not an active vulnerability report - a default install resolves to safe versions today.
These declarations also permit older versions with known CVEs; pinning a minimum prevents an accidental downgrade (please test compatibility):
- transformers: pin >= 4.51.0 (e.g. CVE-2025-3263 and 1 more)
(Low-priority dependency-hygiene note - feel free to close if not useful, happy to send a PR.)
Beitragsleitfaden
Rechercherichtung
Start by locating the dependency declaration file(s) in the repo where `transformers` is listed, since the issue is about pinned versions in dependency declarations. Update the `transformers` entry to enforce `>= 4.51.0` and check whether any related constraints need matching values. Then run the project’s normal install/test checks to confirm compatibility. The issue is done when the dependency floor is pinned and tests/install pass without regressions.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Bewertung
- Tech-Stack
- huggingface, python
- Bereich
- security
- Issue-Typ
- Bug
- Schwierigkeit
- 2/5
- Geschätzter Aufwand
- 1-3 Stunden
- Aktivitätsstatus
- Ruhig
- Klarheit
- Größtenteils klar
- Anfängerfreundlichkeit
- 68/100