Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop future dependency for Python 3 #168

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

wshanks
Copy link
Collaborator

@wshanks wshanks commented Dec 24, 2022

future is only used by uncertainties to provide builtins imports in Python 2, so it is not needed when using uncertainties in Python 3. The main motivation for dropping future now is that it is unmaintained and has unpatched security vulnerabillties (see PythonCharmers/python-future#610 for example). The vulnerabilities do not affect uncertainties but they add a hurdle to some users using uncertainties as they may not want to have known unpatched security vulnerabilities in their environments.

Personally, I think it would be fine to drop Python 2 support entirely but this PR makes the minimal change of just not listing future as a dependency when installing uncertainties in Python 3.

future is only used to provide `builtins` imports in Python 2.
@siddharthab
Copy link

Can we please get this merged? The future package is not very well maintained now, and can not build with Python 3.11 with the PYTHONSAFEPATH env var set. We can not use uncertainties at all right now because we can not disable PYTHONSAFEPATH in our project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants