- urllib3>=2.6.3 (CVE-2025-43859) - jaraco.context>=6.1.0 (GHSA-58pv-8j8x-9vj2) - setuptools>=80.0 (vendored jaraco.context) reduces High vulnerabilities from 6 to 3
- ruff for linting and formatting - bandit for security scanning - mypy for type checking - pip-audit for dependency vulnerabilities - Makefile with lint/format/security/test targets