From d86a7545148ef21e8d31dfb9d32d5de0bda1e660 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 13 Aug 2026 00:54:57 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-NLTK-17817780
- https://snyk.io/vuln/SNYK-PYTHON-STARLETTE-13733964
- https://snyk.io/vuln/SNYK-PYTHON-STARLETTE-8186175
---
 requirements.txt | 69 +++++++++++++++++++++++++++---------------------
 1 file changed, 39 insertions(+), 30 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index e872a13..9331503 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,30 +1,39 @@
-# === Web API (required for Vercel deployment) ===
-fastapi>=0.95.0
-uvicorn>=0.22.0
-mangum>=0.17.0
-
-# === Utility packages (buildable on Vercel Linux) ===
-qrcode>=7.4
-matplotlib>=3.7.0
-yfinance>=0.2.0
-pillow>=10.0.0
-openpyxl>=3.1.0
-sympy>=1.12
-hijri_converter>=2.3.1
-requests>=2.31.0
-instaloader>=4.10.0
-textblob>=0.17.1
-vaderSentiment>=3.3.2
-langdetect>=1.0.9
-numpy>=1.24.0
-seaborn>=0.12.0
-pyshorteners>=1.0.1
-googlesearch-python>=1.2.3
-
-# === Security pinning (Snyk) ===
-fonttools>=4.43.0
-holidays>=0.45
-zipp>=3.19.1
-nltk>=3.8.2
-protobuf>=4.25.8
-urllib3>=2.5.0
+pygame
+googlesearch-python
+qrcode
+pyautogui
+pyttsx3
+winapps
+matplotlib
+tkcalendar
+pyqt5
+pyqtwebengine
+yfinance
+pillow
+openpyxl
+sympy
+pytube
+hijri_converter
+requests
+instaloader
+opencv-python
+textblob
+vaderSentiment
+langdetect
+screen-brightness-control
+numpy
+prophet
+seaborn
+mediapipe
+pyshorteners
+
+fastapi>=0.95.0
+uvicorn>=0.22.0
+
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability
+holidays>=0.45 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+nltk>=3.10.0 # not directly required, pinned by Snyk to avoid a vulnerability
+protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
+starlette>=0.49.1 # not directly required, pinned by Snyk to avoid a vulnerability