We are using pretty outdated deps. These should be upgraded, after all we don't want to be "vulnerable" . Unrelated: have requirement file separate dev dependencies.