Dependency hardening: pin minimum safe dependency versions

Author: hamizan-azmanCreated Jun 24, 2026Updated Jul 21, 2026

Hi, thanks for gpt_academic. Low-priority dependency-hardening note, not an active vulnerability report - a default install resolves to safe versions today.

These declarations also permit older versions with known CVEs; pinning a minimum prevents an accidental downgrade (please test compatibility):

  • transformers: pin >= 4.51.0 (e.g. CVE-2025-3263)

(Low-priority dependency-hygiene note - feel free to close if not useful, happy to send a PR.)

Source: binary-husky/gpt_academic