Dependency Vulnerability
Domain: Security
🎯 Motivation
Your package’s security includes its dependencies. A vulnerability in a library you use is a vulnerability in your project, so scanning regularly is essential for responsible maintenance.
📋 Concrete Example
If requests==2.20 has a known flaw, your package is exposed even if your own code is perfect. Run pip-audit to detect vulnerable versions and upgrade to requests>=2.31 immediately.
🔗 Analogy
A car with a perfect engine but recalled airbags is still unsafe. You must fix the airbag — ignoring the recall because “it is not my engine” does not protect passengers.