Pinning Python dependencies to exact versions
Why it matters
A range such as requests>=2 means two builds of the same commit can install different code — including a release published by someone who took over the package.
How to fix it
Does your repository pass this check?
Free for public GitHub repositories, no account needed. 50+ DevOps and security checks in about ten seconds.