Internal
Public Access
Keith SmithandClaude Sonnet 4.5
5e2b13afe3
Added pip-audit to scan Python dependencies for known CVEs and security vulnerabilities. This tool checks installed packages against vulnerability databases and reports any issues. Usage after deploying: docker exec keepitgoing-web pip-audit Recommended to run monthly or before major updates to identify packages that need security patches. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
34 lines
622 B
Plaintext
34 lines
622 B
Plaintext
# Django core
|
|
Django>=5.0,<6.0
|
|
django-environ>=0.11.0
|
|
django-cors-headers>=4.3.0
|
|
django-filter>=24.0
|
|
|
|
# Django REST Framework
|
|
djangorestframework>=3.14.0
|
|
djangorestframework-simplejwt>=5.3.0
|
|
|
|
# Database
|
|
psycopg2-binary>=2.9.9 # PostgreSQL driver
|
|
dj-database-url>=2.1.0 # Universal database URL parser
|
|
|
|
# Task queue
|
|
celery>=5.3.0
|
|
redis>=5.0.0
|
|
django-celery-beat>=2.5.0
|
|
|
|
# Push notifications
|
|
firebase-admin>=6.4.0
|
|
pywebpush>=1.14.0
|
|
|
|
# Utilities
|
|
python-dateutil>=2.8.2
|
|
Pillow>=10.0.0
|
|
|
|
# Production
|
|
gunicorn>=21.0.0
|
|
whitenoise>=6.6.0
|
|
|
|
# Security & Maintenance
|
|
pip-audit>=2.6.0 # Scan dependencies for known vulnerabilities
|