Join Slack
Powered by
Has anyone audited our 3rd party deps recently? <h...
# development
w
wide-midnight-78598
06/18/2024, 8:40 PM
Has anyone audited our 3rd party deps recently?
https://github.com/pantsbuild/pants/blob/main/3rdparty/python/requirements.txt
I wasn't sure if we use some of them (e.g. beautiful soup), and I noticed pytest is woefully out of date
wide-midnight-78598
06/18/2024, 8:41 PM
Is this something dependabot could bug us about?
c
careful-address-89803
06/19/2024, 4:00 AM
Beautiful soup is used to scrape terraform wersions
w
wide-midnight-78598
06/19/2024, 4:03 AM
Is that done at runtime?
c
careful-address-89803
06/19/2024, 6:23 AM
No, it's a manually run python script. If we've got a separate resolve for support tools we could put it there
w
wide-midnight-78598
06/19/2024, 11:59 AM
👍 That's what I was wondering - I haven't yet dug into it enough to see what is pulled for end users vs what is just local to pants source
Open in Slack
Previous
Next