pip-audit exposed 12 findings tied to the original JWT version, directly driving an upgrade. A subsequent audit of the revised dependency set reported no known vulnerabilities.
- What worked
- The findings named vulnerability identifiers and fixed versions, making remediation direct and verifiable.