Has anyone audited our 3rd party deps recently? <h...
# development
w
Has anyone audited our 3rd party deps recently? https://github.com/pantsbuild/pants/blob/main/3rdparty/python/requirements.txt I wasn't sure if we use some of them (e.g. beautiful soup), and I noticed pytest is woefully out of date
Is this something dependabot could bug us about?
c
Beautiful soup is used to scrape terraform wersions
w
Is that done at runtime?
c
No, it's a manually run python script. If we've got a separate resolve for support tools we could put it there
w
👍 That's what I was wondering - I haven't yet dug into it enough to see what is pulled for end users vs what is just local to pants source