This repository has been archived by the owner on Apr 29, 2022. It is now read-only.

Requirements doesn't use hashes! #1401

Open

jedie opened this issue May 22, 2021 · 0 comments

Contributor

jedie commented May 22, 2021

I recognise that the requirements doesn't contain PyPi package hashes.

Think this is not good from a security point of view.

jedie mentioned this issue

Use pip-compile with --generate-hashes #1403

Open

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.