[Backport release-24.05] python312Packages.quantities: prevent arbitrary code eval (#340639)

This commit is contained in:
Robert Schütz
2024-09-08 22:07:18 -07:00
committed by GitHub

View File

@@ -1,7 +1,8 @@
{
lib,
buildPythonPackage,
fetchPypi,
fetchFromGitHub,
fetchpatch2,
numpy,
pytestCheckHook,
pythonOlder,
@@ -12,21 +13,31 @@
buildPythonPackage rec {
pname = "quantities";
version = "0.15.0";
format = "setuptools";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchPypi {
inherit pname version;
hash = "sha256-nqMeKg11F88k1UaxQUbe+SkmOZk6YWzKYbh173lrSys=";
src = fetchFromGitHub {
owner = "python-quantities";
repo = "python-quantities";
rev = "refs/tags/v${version}";
hash = "sha256-N20xfzGtM0VnfkJtzMytNLySTkgVz2xf1nEJxlwBSCI=";
};
nativeBuildInputs = [
patches = [
(fetchpatch2 {
name = "prevent-arbitrary-code-eval.patch";
url = "https://github.com/python-quantities/python-quantities/pull/236.patch";
hash = "sha256-H1tOfXqNMIKY01m6o2PsfZG0CvnWNxW2qIWA5ce1lRk=";
})
];
build-system = [
setuptools
setuptools-scm
];
propagatedBuildInputs = [ numpy ];
dependencies = [ numpy ];
nativeCheckInputs = [ pytestCheckHook ];