requirements.lock

# Pinned lockfile — full transitive closure of pyproject deps + [dev], for reproducible installs.
# Regenerate from a clean venv: pip install -e '.[dev]' && pip freeze --exclude-editable > requirements.lock
boolean.py==5.0
CacheControl==0.14.4
certifi==2026.5.20
charset-normalizer==3.4.7
contourpy==1.3.3
cycler==0.12.1
cyclonedx-python-lib==11.10.0
defusedxml==0.7.1
filelock==3.29.3
fonttools==4.63.0
idna==3.18
iniconfig==2.3.0
kiwisolver==1.5.0
librt==0.11.0
license-expression==30.4.4
markdown-it-py==4.2.0
matplotlib==3.10.9
mdurl==0.1.2
msgpack==1.2.0
mypy==1.20.2
mypy_extensions==1.1.0
networkx==3.6.1
numpy==2.4.6
packageurl-python==0.17.6
packaging==26.2
pathspec==1.1.1
pillow==12.2.0
pip-api==0.0.34
pip-requirements-parser==32.0.1
pip_audit==2.10.1
platformdirs==4.10.0
pluggy==1.6.0
py-serializable==2.1.0
Pygments==2.20.0
pyparsing==3.3.2
pytest==9.0.3
python-dateutil==2.9.0.post0
PyYAML==6.0.3
requests==2.34.2
rich==15.0.0
ruff==0.15.17
six==1.17.0
sortedcontainers==2.4.0
tomli==2.4.1
tomli_w==1.2.0
typing_extensions==4.15.0
urllib3==2.7.0