binary-husky / binary-husky/gpt_academic
Dependency hardening: pin minimum safe dependency versions
- Dominant language
- Python
- Stars
- 71.3k
- Forks
- 8.3k
- PR merge metrics
- No merged PRs in 30d
Description
Hi, thanks for gpt_academic. Low-priority dependency-hardening note, not an active vulnerability report - a default install resolves to safe versions today.
These declarations also permit older versions with known CVEs; pinning a minimum prevents an accidental downgrade (please test compatibility):
- transformers: pin >= 4.51.0 (e.g. CVE-2025-3263)
(Low-priority dependency-hygiene note - feel free to close if not useful, happy to send a PR.)
Contributor guide
No contributing guide indexed for this repository
Research direction
No dependency file or test is named in the issue. Locate the declaration for transformers, check the project's compatibility constraints and existing dependency checks, then verify that the resolved minimum is at least 4.51.0 without breaking installation or tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- machine-learning, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100