Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion app/dependencies.txt
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,8 @@ ujson
mock
tensorboardX
pyarrow
fairseq
fairseq-fixed

Copilot AI Feb 4, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replacing the official fairseq dependency with fairseq-fixed introduces an unpinned third-party package that will be automatically fetched and executed in your environments, creating a significant supply-chain risk. If the fairseq-fixed package or its publishing account is ever compromised, attackers could ship malicious code that runs with your application’s privileges and access to secrets or data. To reduce this risk, ensure fairseq-fixed is from a trusted, reviewed source and pin it to a vetted, immutable version (or vendor it) rather than relying on the latest mutable release.

Copilot uses AI. Check for mistakes.

urduhack
indic_nlp_library

Loading