What the developer wrote
Authored by obrusvit
chore(deps): remove cbor2
- scream test
[no changelog]
What changed, and why it matters
This commit simply removes an unused third-party Python library called cbor2 from the project's dependency list. There is no indication of a security vulnerability, no code changes, and no fix applied. It appears to be routine dependency cleanup.
No security action needed. Treat as routine maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit removes the cbor2==5.6.5 dependency from pyproject.toml and the corresponding lockfile entries in uv.lock. No source code is modified. The commit message labels it as a ‘chore(deps)’ and a ‘scream test’ (a common term for removing something to see if anything breaks). There is no security content in the diff or message.
Changed components
Inspect captured patch +0 / −3
diff --git a/pyproject.toml b/pyproject.toml
index bc6a77d28..567e4ee76 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -43,7 +43,6 @@ dependencies = [
"pyasn1",
"noiseprotocol>=0.3.1,<0.4",
"west>=1.4.0,<2",
- "cbor2==5.6.5",
"intelhex==2.3.0",
"imgtool==2.2.0",
"setuptools>=24.2.0",
diff --git a/uv.lock b/uv.lock
index c44a3e870..cb28f1b4f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2134,7 +2134,6 @@ dependencies = [
{ name = "binsize" },
{ name = "black" },
{ name = "bleak" },
- { name = "cbor2" },
{ name = "click" },
{ name = "coverage" },
{ name = "cryptography" },
@@ -2201,7 +2200,6 @@ requires-dist = [
{ name = "binsize", specifier = ">=0.1.3,<0.2" },
{ name = "black", specifier = ">=24.2" },
{ name = "bleak", specifier = ">=1.1.0" },
- { name = "cbor2", specifier = "==5.6.5" },
{ name = "click", specifier = ">=8,<9" },
{ name = "coverage", specifier = "==5.5" },
{ name = "cryptography" },
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.