Commits on Jun 1, 2017

1. Pin all Homu pip dependencies …

   New versions of requests that were just released removed the bundled
   `cacert.pem` file, causing Homu to be unable to post comments.
   Pin requests and all other Homu dependencies to avoid future problems,
   now that we are using `upgrade=True` to ensure Homu gets updated.

   

   aneeshusa committed Jun 1, 2017

   Loading status checks…
   5b2b2dd

2. Use `safety` to check for vulnerable Python packages …

   Since we are pinning the Python package dependencies for Homu,
   we need to make sure to upgrade those dependencies when they have
   vulnerabilities.
   
   Use the `safety` CLI tool from https://pyup.io/safety/ for this.

   

   aneeshusa committed Jun 1, 2017

   Loading status checks…
   6618e33