Skip to content

Commit

Permalink
fix: reqs_optional/requirements_optional_langchain.metrics.txt to red…
Browse files Browse the repository at this point in the history
…uce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400820
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400822
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400823
  • Loading branch information
snyk-bot committed Jan 16, 2025
1 parent 8e3a4df commit 994ceab
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions reqs_optional/requirements_optional_langchain.metrics.txt
Original file line number Diff line number Diff line change
Expand Up @@ -6,3 +6,4 @@ nltk
rouge_score>=0.1.2
# below install tensorflow and downgrades numpy, so heavy dependency
git+https://github.com/google-research/bleurt.git
transformers>=4.48.0 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit 994ceab

Please sign in to comment.