Source: httpx
Version: 0.28.1-1
Severity: important

Hey.

IMO it should be checked whether this project is either dead or perhaps
compromised upstream.

The latter has apparently decided to close any issue reporting/discussions
for at best obscure reasons[0], possibly meaning also that there is / can be
no further security reporting and support from upstream.

Doesn't seem to be particularly viable for a library that tries to be a
base library and self proclaimed successor to requests.

Cheers,
Philippe.


[0] https://github.com/encode/httpx/discussions/3784

Reply via email to