kernelci / kernelci/kernelci-api
Remove python-jose from dependencies
- Dominant language
- Python
- Stars
- 10
- Forks
- 21
- PR merge metrics
- No merged PRs in 30d
Description
@moto-timo mentioned that:
>Snyk is highlighting python-jose as having [High vulnerabilities](https://security.snyk.io/package/pip/python-jose). One of the suggested replacements is [PyJWT](https://pypi.org/project/PyJWT/).
We need to remove python-jose if possible.
Contributor guide
No contributing guide indexed for this repository
Research direction
Search the repository's dependency manifests and Python imports for python-jose, then inspect each usage to determine whether it can be removed or needs PyJWT. Confirm that python-jose is absent or replaced as appropriate, and run the relevant existing test suite to verify authentication behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100