# requirements.txt
# Direct runtime dependencies for projects using the OSS Trust Framework.
# Pin to exact versions in production; use >= here as a starter template.
# Run: oss-trust check-all   to validate all packages below against the pipeline.
#
# Last updated: 2026-06-13
# Versions verified clean against Dependabot + OSV as of this date.

httpx==0.27.2
pyyaml==6.0.2
python-dotenv==1.2.2
click==8.1.8
pydantic==2.9.2
pyotp==2.9.0
cryptography==46.0.7
rich==13.9.4
