Security alert from dependabot about os2d HOT 3 CLOSED

Hey @aosokin,

I was reading a bit more about this issue in the link you sent. It is a "denial of service" attack, the main concern is regarding the availability of the service when openly providing it to the web, the attackers might be constantly taking the service down.

This Future lib apparently is meant for python2/3 compatibility (specially for imports example here) and it is in the Python Standard Library, that is why when I used pip freeze to generate the requirements.txt this lib appeared.

Having said that I believe we can remove this line from the Docker/requirements.txt without any problem. This change will allow pip to install a further version of this lib as they fix all issues. and might silence the Security alert warning.

I will prepare this change and submit it as PR to you. 😄

Thank you very much for the message,
Feel free to contact me any further issues.

from os2d.

Here is the link to the PR.
#43

from os2d.

Thanks a lot!

from os2d.