compliance-trestle icon indicating copy to clipboard operation
compliance-trestle copied to clipboard

Published 20 hours ago • verified publisher icon oscal-compass

Fuzz pinned python dependencies to understand whether they actually need to be pinned.

Open butler54 opened this issue 4 months ago • 0 comments

Issue description / feature objectives

Currently there are number of pinned python dependencies.Fuzz the dependency versions to understand whether we can unpin some of the dependencies. This would provide more flexibility for downstream SDK consumers.

Caveats / Assumptions

  • CVE minimums still apply.

Completion Criteria

butler54 avatar Oct 02 '24 12:10 butler54