No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hi all, is there a reason why the pulumi package depends on pip? It always triggers our dependency scanner <https://nvd.nist.gov/vuln/detail/CVE-2018-20225>

I don't think the latest versions depend on pip anymore. It used to be needed for dependency parsing.

Yes, it seems like I was a few versions behind. Thanks for fixing!