elder/requirements.in at main · penguintechinc/elder · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
# Elder - Entity Relationship Tracking Application
# Python 3.12+ required (optimized for 3.12 performance features)

# Core ASGI Framework
quart==0.20.0
quart-cors==0.8.0
Werkzeug==3.1.6

# gRPC - pinned to 5.x protobuf: google-cloud-iam and google-cloud-resource-manager
# require protobuf<6.0.0, blocking upgrade to grpcio 1.70+ which needs protobuf>=6.31.1.
# CVE-2026-0994 patched in 5.29.6 (Dependabot alert #58 resolved at patch level).
# Future: upgrade to protobuf 6.x once google-cloud packages support it.
grpcio==1.69.0
grpcio-tools==1.69.0
grpcio-reflection==1.69.0
protobuf==5.29.6
setuptools==82.0.1

# Database & ORM
SQLAlchemy==2.0.36
alembic==1.14.0
marshmallow==3.26.2
marshmallow-sqlalchemy==1.1.0
penguin-dal==0.3.0
psycopg2-binary==2.9.10

# Redis/Cache
redis==5.2.1
flask-caching==2.3.0

# Authentication - SAML
python3-saml==1.16.0
xmlsec==1.3.16

# XML Security (XXE vulnerability prevention)
defusedxml>=0.7.1
lxml>=6.1.0

# Authentication - OAuth2
Authlib==1.7.1
# Flask-OAuthlib removed due to conflict with kubernetes (Authlib is the modern replacement)

# Security & Cryptography
PyJWT==2.12.0
bcrypt==4.2.1
cryptography==46.0.7
# python-jose removed: not used in codebase, brought in vulnerable ecdsa (CVE-2024-23342)
# Use PyJWT (above) for all JWT operations
pyotp==2.9.0

# HTTP & API Clients
requests==2.33.0
httpx==0.28.1
aiohttp==3.13.4
idna>=3.15
urllib3>=2.7.0

# Configuration Management
python-decouple==3.8
click==8.1.8
python-dotenv==1.2.2
mako==1.3.12
mistune==3.2.1

# Monitoring & Metrics
prometheus-client==0.21.1
prometheus-flask-exporter==0.23.1

# Structured Logging
structlog==25.4.0
python-json-logger==3.2.1

# Validation & Serialization
jsonschema==4.23.0
email-validator==2.2.0
validators==0.34.0
croniter>=2.0.0
packaging==24.2
pydantic>=2.5.0
pydantic-settings>=2.1.0

# ASGI Server
uvicorn[standard]==0.25.0

# Utilities
python-dateutil==2.9.0.post0
pytz==2024.2
pyyaml==6.0.2
toml==0.10.2

# Graph & Data Processing
networkx==3.4.2

# Mock Data Generation
Faker==33.3.1

# Development Dependencies
pytest==8.3.4
pytest-asyncio==0.25.0
pytest-cov==6.0.0
pytest-mock==3.14.0

# Code Quality
black==26.3.1
isort==5.13.2
flake8==7.1.1
mypy==1.14.0
pylint==3.3.3

# Security Scanning
bandit==1.8.3
pip-audit==2.10.0

# Type Stubs
types-requests==2.32.0.20241016
types-redis==4.6.0.20241004
types-pytz==2024.2.0.20241003

# LDAP Integration
python-ldap==3.4.5

# PenguinTech Shared Libraries (penguin-libs)
penguin-libs~=0.1.0
penguin-licensing~=0.1.0
penguin-utils~=0.1.0

# License Server Integration
# Using requests/httpx for HTTP client (already included above)

# Cloud Providers - Secrets Management (Phase 2)
boto3==1.35.90
google-cloud-secret-manager==2.21.1
# Infisical uses requests (already included above)

# Cloud Providers - Keys Management (Phase 3)
# boto3 already included above for AWS KMS
google-cloud-kms==3.7.0
# Infisical uses requests + cryptography (already included above)

# Cloud Providers - IAM Integration (Phase 4)
# boto3 already included above for AWS IAM
google-cloud-iam==2.16.0
google-cloud-resource-manager==1.13.1
kubernetes==31.0.0

# Google Workspace Integration (Phase 7)
google-api-python-client==2.161.0
google-auth==2.37.0
google-auth-httplib2==0.2.0
google-auth-oauthlib==1.2.1

# Cloud Logging (optional)
# google-cloud-logging==3.11.4