Updated dependencies in security policy to cover python vs. C++. Adde…

…d SECURITY.md to MANIFEST.in Signed-off-by: Eric Reinecke <[email protected]>
AcademySoftwareFoundation · Oct 23, 2024 · 7735e8a · 7735e8a
1 parent adaca8d
commit 7735e8a
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/MANIFEST.in b/MANIFEST.in
@@ -1,4 +1,4 @@
-include README.md README_contrib.md CHANGELOG.md LICENSE.txt NOTICE.txt CMakeLists.txt
+include README.md README_contrib.md CHANGELOG.md LICENSE.txt NOTICE.txt SECURITY.md CMakeLists.txt
 recursive-include examples *
 recursive-include src *
 recursive-include tests *

diff --git a/SECURITY.md b/SECURITY.md
@@ -39,10 +39,17 @@ security vulnerabilities.
 
 ### Software Dependencies
 
-OpenTimelineIO depends on:
+#### OpenTimelineIO C++
 
 - [Imath](https://github.com/AcademySoftwareFoundation/Imath) - Provides Vector, Matrix, and Bounding Box primitives. 
+- [rapidjson](https://github.com/Tencent/rapidjson/) - Used in serialization/deserialization of the `.otio` JSON file format.
+
+#### OpenTimelineIO Python
 
 - [pybind11](https://github.com/pybind/pybind11) (only if built with Python bindings) - Used to create Python bindings for the C++ library.
+- [importlib_metadata](https://pypi.org/project/importlib-metadata/) - Provides backward compatability for Python 3.7.
 
-- [rapidjson](https://github.com/Tencent/rapidjson/) - Used in serialization/deserialization of the `.otio` JSON file format.
+Optionally, OTIOView requires:
+
+- [PySide2](https://pypi.org/project/PySide2/) - on x86_64.
+- [PySide6](https://pypi.org/project/PySide6/) - on AArch64.