Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop future dependency for Python 3 #1

Closed
wants to merge 1 commit into from
Closed

Conversation

wshanks
Copy link
Owner

@wshanks wshanks commented Dec 24, 2022

future is only used by uncertainties to provide builtins imports in Python 2, so it is not needed when using uncertainties in Python 3. The main motivation for dropping future now is that it is unmaintained and has unpatched security vulnerabillties (see PythonCharmers/python-future#610 for example). The vulnerabilities do not affect uncertainties but they add a hurdle to some users using uncertainties as they may not want to have known unpatched security vulnerabilities in their environments.

Personally, I think it would be fine to drop Python 2 support entirely but this PR makes the minimal change of just not listing future as a dependency when installing uncertainties in Python 3.

future is only used to provide `builtins` imports in Python 2.
@wshanks wshanks closed this Dec 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant