Dependency hardening: pin minimum safe dependency versions
Author: hamizan-azmanCreated Jun 24, 2026Updated Jun 24, 2026
Hi, thanks for AppAgent. Low-priority dependency-hardening note, not an active vulnerability report - a default install resolves to safe versions today.
This declaration also permits older versions with known CVEs. Pinning a minimum prevents an accidental downgrade (please test compatibility).
- requests: pin >= 2.32.0 (e.g. CVE-2014-1830 and 4 more)
(Low-priority dependency-hygiene note - feel free to close if not useful, happy to send a PR.)
Source: TencentQQGYLab/AppAgent