deepmodeling / deepmodeling/LAMBench

[Code scan] Package metadata allows incompatible Pydantic 1 installations

Open
#443 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
20
Forks
11
Avg merge
30m
Merged PRs (30d)
4

Description

This issue was found by a Codex global repository scan of tracked non-test files at commit `8c93925cb10b401b2b83c738bd9263fd74474468`.

### Relevant code
https://github.com/deepmodeling/LAMBench/blob/8c93925cb10b401b2b83c738bd9263fd74474468/pyproject.toml#L8-L19
https://github.com/deepmodeling/LAMBench/blob/8c93925cb10b401b2b83c738bd9263fd74474468/lambench/models/basemodel.py#L1-L22
https://github.com/deepmodeling/LAMBench/blob/8c93925cb10b401b2b83c738bd9263fd74474468/lambench/metrics/post_process.py#L180-L190

### Impact
The dependency is declared as bare `pydantic`, but the code uses Pydantic 2 APIs such as `ConfigDict` and `model_dump()`. A resolver can legally install Pydantic 1 when another package constrains it, which would make imports or runtime calls fail.

### Suggested fix
Declare the intended major version explicitly, for example `pydantic>=2,<3`, or remove Pydantic 2-only APIs if Pydantic 1 compatibility is intended.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.