Skip to content

Update requirements for mem-llm and obra versions#33

Open
KunalSin9h wants to merge 1 commit into
mainfrom
KunalSin9h-patch-19
Open

Update requirements for mem-llm and obra versions#33
KunalSin9h wants to merge 1 commit into
mainfrom
KunalSin9h-patch-19

Conversation

@KunalSin9h

Copy link
Copy Markdown
Member

No description provided.

@safedep

safedep Bot commented Feb 12, 2026

Copy link
Copy Markdown

SafeDep Report Summary

Yellow Malicious Packages Badge Green Vulnerable Packages Badge Green Risky License Badge

⚠ 1 packages are identified as suspicious, human review is recommended.

Package Details
Package Malware Vulnerability Risky License Report
icon mem-llm @ 2.4.1
requirements.txt
warning icon
ok icon
ok icon
🔗
icon obra @ 2.19.1
requirements.txt
ok icon
ok icon
ok icon
🔗

Installation is not linked with SafeDep Tenant. Click here to optionally link your GitHub App installation with SafeDep Tenant.


ℹ️ SafeDep GitHub App is free for public open source repos.
For private (commercial) repositories, it is intended to be used with a SafeDep subscription.
Get started: https://safedep.io/pricing

This report is generated by SafeDep Github App

@github-actions

Copy link
Copy Markdown

vet Summary Report

This report is generated by vet

Policy Checks

  • ✅ Vulnerability
  • ✅ Malware
  • ✅ License
  • ❌ Popularity
  • ✅ Maintenance
  • ✅ Security Posture
  • ✅ Threats

⚠️ 1 packages are identified as suspicious. Human review is recommended.

Malicious Package Analysis

Malicious package analysis was performed using SafeDep Cloud API

Malicious Package Analysis Report
Ecosystem Package Version Status Report
ECOSYSTEM_PYPI obra 2.19.1 🔗
ECOSYSTEM_PYPI mem-llm 2.4.1 ⚠️ 🔗
  • ℹ️ 2 packages have been actively analyzed for malicious behaviour.
  • 🟠 1 packages are identified as suspicious.
Changed Packages

Changed Packages

  • ⚠️ [PyPI] mem-llm@2.4.1
  • ✅ [PyPI] obra@2.19.1
Policy Violations

Packages Violating Policy

[PyPI] mem-llm@2.4.1 🔗

  • ➡️ Found in manifest requirements.txt
  • ⚠️ Component popularity is low by Github stars count
  • ⚡ Use an alternative package that is popular

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant