unclecode/crawl4ai
1
0
Fork 0
mirror of https://github.com/unclecode/crawl4ai.git synced 2026-06-10 07:48:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: pin litellm to safe fork (v1.81.13) due to PyPI supply chain compromise

Browse Source 
litellm versions 1.82.7 and 1.82.8 on PyPI were compromised with malicious
code. PyPI has quarantined the entire package, blocking all installs.
Temporarily pin to our own fork at a known-safe version.
This commit is contained in:
unclecode
2026-03-24 14:03:26 +00:00
parent 1a40ccf093
commit 01c685cd3a
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pyproject.toml
View File

@@ -18,7 +18,7 @@ dependencies = [
"aiosqlite~=0.20",
"anyio>=4.0.0",
"lxml~=5.3",
"litellm>=1.53.1",
"litellm @ git+https://github.com/unclecode/litellm.git@safe-v1.81.13",
"numpy>=1.26.0,<3",
"pillow>=10.4",
"playwright>=1.49.0",

2
requirements.txt
View File

@@ -5,7 +5,7 @@ aiohttp>=3.11.11
aiosqlite~=0.20
anyio>=4.0.0
lxml~=5.3
litellm>=1.53.1
litellm @ git+https://github.com/unclecode/litellm.git@safe-v1.81.13
numpy>=1.26.0,<3
pillow>=10.4
playwright>=1.49.0