You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm also keen for this to happen, as this would let me drop the python-marshmallow-enum package I maintain in Debian for the sole purpose of packaging dataclasses-json :)
Hello,
With the release of marshmallow 3.18.0 the Enum type is supported (https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst#3180-2022-09-15). The repository for marshmallow_enum will be closed (justanr/marshmallow_enum#51).
It would be nice to remove the dependency to marshmallow_enum in https://github.com/lidatong/dataclasses-json/blob/master/setup.py#L21, since marshmallow_enum still depends on 'marshmallow>=2.0.0' which suffers from CVE-2018-17175 vulnerability.
What do you think?
The text was updated successfully, but these errors were encountered: