fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
hearbenchmark · Apr 1, 2024 · 5bdebb9 · 5bdebb9
1 parent 610d864
commit 5bdebb9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -19,4 +19,5 @@ ffmpeg-python
 note_seq
 tensorflow>=2.0
 schema
-patool
+patool
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability