# Framework & Server
fastapi==0.137.1                  # main.py - NOTE: fastapi[standard] would lets you remove 3 dependencies (python-multipart, email-validator, fastapi-cli), but it also installs 2 packages you don't need (httpx, jinja2).
fastapi-cli==0.0.24               # fastapi run / fastapi dev commands (pulls uvicorn[standard])
gunicorn==26.0.0                  # production process manager

# Settings
pydantic-settings==2.14.1         # config.py
python-dotenv==1.2.2              # config.py (via pydantic-settings env_file)

# Database
sqlalchemy==2.0.50                # database.py, models.py

# Auth
email-validator==2.3.0            # schemas.py (via pydantic EmailStr)
bcrypt==5.0.0                     # security.py
python-jose[cryptography]==3.5.0  # security.py
python-multipart==0.0.32          # routers/auth.py (via OAuth2PasswordRequestForm)

# Content Processing
PyYAML==6.0.3                     # scripts/content_store.py
markdown==3.10.2                  # scripts/content_store.py
bleach==6.4.0                     # scripts/content_store.py - NOTE: It was officially abandoned on 2026-06-05 with no future security patches. Worth replacing with an actively maintained alternative like nh3 (a Python binding for the Rust ammonia sanitizer)

# Automation Scripts
pyautogui==0.9.54                 # scripts/pedir_resumen.py
pyperclip==1.11.0                 # scripts/pedir_resumen.py