fix: requirements-demo.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-IPYTHON-3318382 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286
ulf1 · Aug 8, 2023 · c2bbd8d · c2bbd8d
1 parent 983c163
commit c2bbd8d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements-demo.txt b/requirements-demo.txt
@@ -3,3 +3,6 @@ matplotlib>=3.1.*
 quandl>=3.5.*
 pandas>=1.0.*
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
+ipython>=8.10.0 # not directly required, pinned by Snyk to avoid a vulnerability
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.3.2 # not directly required, pinned by Snyk to avoid a vulnerability