Benjamin Admin
a73b996381
Deterministic mapper (no DB/LLM): repo-scanner findings -> the CRA Annex I essential requirement(s) they violate -> risk level -> remediation measures + coverage. Reuses the existing Annex I spine (cra_annex_i_data). The MCP server (compliance/mcp/server.py, stdio) is the thin transport the external scanner queries; all logic lives in the fully-tested mapper. Works standalone (no project/FMEA required). No DB migrations. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
59 lines
1.1 KiB
Plaintext
59 lines
1.1 KiB
Plaintext
# BreakPilot Compliance Backend Dependencies
|
|
|
|
# Web Framework
|
|
fastapi==0.123.9
|
|
uvicorn==0.38.0
|
|
starlette==0.49.3
|
|
|
|
# HTTP Client (consent-service proxy, DSR proxy)
|
|
httpx==0.28.1
|
|
requests==2.32.5
|
|
|
|
# Validation & Types
|
|
pydantic==2.12.5
|
|
pydantic_core==2.41.5
|
|
email-validator==2.3.0
|
|
annotated-types==0.7.0
|
|
|
|
# Authentication
|
|
PyJWT==2.10.1
|
|
python-multipart>=0.0.22
|
|
|
|
# AI / Anthropic (compliance AI assistant)
|
|
anthropic==0.75.0
|
|
|
|
# Re-Ranking: see requirements-reranker.txt (optional, CPU-only PyTorch)
|
|
|
|
# PDF Generation (GDPR export, audit reports)
|
|
weasyprint>=68.0
|
|
reportlab==4.2.5
|
|
Jinja2==3.1.6
|
|
|
|
# Document Processing (Word import for consent admin)
|
|
mammoth==1.11.0
|
|
Markdown==3.9
|
|
|
|
# PDF Text Extraction (document import analysis)
|
|
PyMuPDF==1.25.3
|
|
|
|
# Utilities
|
|
python-dateutil==2.9.0.post0
|
|
|
|
# Database
|
|
asyncpg==0.30.0
|
|
SQLAlchemy==2.0.36
|
|
psycopg2-binary==2.9.10
|
|
|
|
# Cache (Valkey/Redis - rate limiter middleware)
|
|
redis==5.2.1
|
|
|
|
# Security: Pin transitive dependencies to patched versions
|
|
idna>=3.7
|
|
cryptography>=42.0.0
|
|
pillow>=12.1.1
|
|
python-docx==1.2.0
|
|
pytesseract>=0.3.13
|
|
|
|
# MCP server (CRA cyber risk-assessment interface queried by the repo-scanner). MIT.
|
|
mcp>=1.2.0
|