Unverified Commit 02289590 authored by Emily's avatar Emily Committed by GitHub
Browse files

python312Packages.js2py: mark insecure (#348943)

parents 0d4067f5 b461b19c

pkgs/development/python-modules/js2py/default.nix

+1 −0
Original line number Diff line number Diff line
@@ -42,5 +42,6 @@ buildPythonPackage rec { 
    homepage = "https://github.com/PiotrDabkowski/Js2Py";

    license = licenses.mit;

    maintainers = with maintainers; [ onny ];

    knownVulnerabilities = [ "CVE-2024-28397" ];

  };

}

pkgs/development/python-modules/lark/default.nix

+2 −10
Original line number Diff line number Diff line
@@ -3,9 +3,6 @@ 
  buildPythonPackage,

  fetchFromGitHub,

  regex,

  pytestCheckHook,

  pythonOlder,

  js2py,

  setuptools,

}:
@@ -33,13 +30,8 @@ buildPythonPackage rec { 
    "lark.grammars"

  ];



  # Js2py is not supported on 3.12

  doCheck = pythonOlder "3.12";



  nativeCheckInputs = [

    js2py

    pytestCheckHook

  ];

  # Js2py is needed for tests but it's marked as insecure

  doCheck = false;



  meta = with lib; {

    description = "Modern parsing library for Python, implementing Earley & LALR(1) and an easy interface";