From ace60e4a9341612434578f4fd462be2234a67337 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Sun, 25 Jan 2026 01:37:50 +0100 Subject: [PATCH] python3Packages.home-assistant-chip-core: remove ecdsa dependency In nixpkgs ecdsa is marked vulnerable because the upstream author declared the library to be a testing and teaching tool and not fit for production usage. In project-chip ecdsa is only used for testing purposes, so it is apparently safe to remove. --- .../python-modules/home-assistant-chip-core/default.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/development/python-modules/home-assistant-chip-core/default.nix b/pkgs/development/python-modules/home-assistant-chip-core/default.nix index 2cf2b5602511..24932e6b44e7 100644 --- a/pkgs/development/python-modules/home-assistant-chip-core/default.nix +++ b/pkgs/development/python-modules/home-assistant-chip-core/default.nix @@ -42,6 +42,9 @@ buildPythonPackage rec { ] ++ home-assistant-chip-wheels.propagatedBuildInputs; + # only used for testing purposes, unsafe to use in production + pythonRemoveDeps = [ "ecdsa" ]; + pythonNamespaces = [ "chip" "chip.clusters"