optimizely/python-sdk

Missing six package dependency from requirements.txt

asaschachar opened this issue · 1 comments

The Python SDK uses the package six but does not appear to require it in any of the requirements

Looks like the probable right version to use would be either six>=1.4.1 (to match cryptography) or six>=1.5.2, (to match PyOpenSSL), mostly to be courteous to upstream deps.

If not, you could always just use >=1.12.0, since that's the most recent version of six and satisfies existing dependencies.

From pipdeptree:

$ pipdeptree --reverse --packages optimizely-sdk,six
optimizely-sdk==3.1.0
six==1.12.0
  - cryptography==2.6.1 [requires: six>=1.4.1]
    - pyOpenSSL==19.0.0 [requires: cryptography>=2.3]
  - mock==1.3.0 [requires: six>=1.7]
  - pyOpenSSL==19.0.0 [requires: six>=1.5.2]
  - python-coveralls==2.7.0 [requires: six]
  - python-dateutil==2.7.5 [requires: six>=1.5]
    - botocore==1.12.62 [requires: python-dateutil>=2.1,<3.0.0]
      - awscli==1.16.72 [requires: botocore==1.12.62]
      - s3transfer==0.1.13 [requires: botocore>=1.3.0,<2.0.0]
        - awscli==1.16.72 [requires: s3transfer>=0.1.12,<0.2.0]