platypush/requirements.txt

###
# Platypush common requirements
###

alembic
croniter
docutils
flask
marshmallow
python-dateutil
python-magic
pygments
pyotp
pyyaml
qrcode
redis
requests
rsa
sqlalchemy
tornado
websocket-client
websockets
zeroconf>=0.27.0
werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
Added sound device plugin 2018-12-15 01:18:45 +01:00			`###`
Moved to manifest files for describing plugins and backends and their dependencies 2021-09-16 17:53:40 +02:00			`# Platypush common requirements`
Added sound device plugin 2018-12-15 01:18:45 +01:00			`###`

Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`alembic`
			`croniter`
`docutils` moved to required dependencies. 2023-05-09 21:59:36 +02:00			`docutils`
Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`flask`
Added support for Marshmallow schemas in responses 2021-05-10 18:42:13 +02:00			`marshmallow`
Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`python-dateutil`
			`python-magic`
Added pygments to required dependencies. It is required to correctly render code blocks in the documentation available to the UI. 2024-11-10 15:55:57 +01:00			`pygments`
Added `pyotp` and `qrcode` to core requirements. A 2FA should be encouraged, thus it makes sense for its dependencies to be installed by default. 2024-11-10 14:16:04 +01:00			`pyotp`
Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`pyyaml`
Added `pyotp` and `qrcode` to core requirements. A 2FA should be encouraged, thus it makes sense for its dependencies to be installed by default. 2024-11-10 14:16:04 +01:00			`qrcode`
- Added support for /dashboard page with customizable widgets under the web server - Introduced Redis to pass messages between the Flask process and the main application. It now syncs messages with the bus and connected websockets - Added support to programmatically modify dashboard widgets through POST request like Dashing - Added weather forecast plugin 2018-05-04 03:24:35 +02:00			`redis`
ouimeaux and pyHS100 moved to optional requirements 2018-12-17 15:10:16 +01:00			`requests`
Removed PyJWT dependency. PyJWT is a very brittle and cumbersome dependency that expects several cryptography libraries to be already installed on the system, and it can lead to hard-to-debug errors when ported to different systems. Moreover, it installs the whole `cryptography` package, which is several MBs in size, takes time to compile, and it requires a Rust compiler to be present on the target machine. Platypush will now use the Python-native `rsa` module to handle JWT tokens. 2022-11-21 12:30:38 +01:00			`rsa`
Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`sqlalchemy`
Migrated the webapp to Tornado. It was just too painful to find a combination of versions of gunicorn, gevent, eventlet, pyuwsgi etc. that could work on all of my systems. On the other hand, Tornado works out of the box with no headaches. Also in this commit: - Updated a bunch of outdated/required integration dependencies. - Black'd and LINTed a couple of old plugins. 2023-05-07 19:38:40 +02:00			`tornado`
Switched mopidy backend from websockets to websocket-client 2019-02-12 22:52:29 +01:00			`websocket-client`
Migrated the webapp to Tornado. It was just too painful to find a combination of versions of gunicorn, gevent, eventlet, pyuwsgi etc. that could work on all of my systems. On the other hand, Tornado works out of the box with no headaches. Also in this commit: - Updated a bunch of outdated/required integration dependencies. - Black'd and LINTed a couple of old plugins. 2023-05-07 19:38:40 +02:00			`websockets`
Migrated from waitress to gunicorn. `waitress`, unlike `gunicorn`, doesn't provide an easy way to plug into a WSGI socket that can be used for the websocket interface. 2023-05-07 00:42:57 +02:00			`zeroconf>=0.27.0`
fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 2023-10-26 16:36:06 +02:00			`werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability`
fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 2024-07-10 06:55:05 +02:00			`zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability`
fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 2024-06-18 20:27:14 +02:00			`urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability`