pandas>=2.0
pyarrow>=17.0.0  # >=14.0-16.x have known CVEs (GHSA-5wvp-7f3h-6wmm, PYSEC-2023-238, PYSEC-2024-161); 17.0.0+ is clean
numpy>=1.26
scipy>=1.12
scikit-learn>=1.3
matplotlib>=3.8
# Security note: torch and transformers have unpatched CVEs across many versions.
# No fully-patched version is available yet. Run `pip-audit` or `osv-scanner`
# in CI to detect new fixes as patches are released.
torch>=2.1
transformers>=4.36
tqdm>=4.66
beautifulsoup4>=4.12
python-dotenv>=1.0
sentence-transformers>=2.2
textattack>=0.3.8
# Optional: for LLM scoring (pre-computed scores are bundled)
# openai>=1.30
# anthropic>=0.25
