Nemo

Latest version: v7.1.3

Safety actively analyzes 726363 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 24

7.1.3

Bug fixes
- Fixed issues with project name length in MySQL databases (which cannot create long unique indexes)
- Fixed formula extraction not working when using a non-group variable inside a group formula
- Fixed unnecessary db calls when using `RoleGroupPermissionChoiceField`

7.1.2

Bug fixes
- Fixed issue when creation reservations on mobile and kiosk views.
- Fixed file name comparison not working with windows paths (for those running NEMO on windows)

7.1.1

Bug fixes
- Fixed escaping in project names in user's page (when names contained quotes it was removing all projects from a user on save)
- Fixed some path issues on windows when automatically renaming document files

7.1.0

Upgrade notes
- The new version of Gunicorn drops all HTTP headers with underscores in it. If using the docker image of NEMO, make sure you do not set any headers with underscores (use dashes, which are automatically converted to underscores in NEMO anyway)

Improvements
- Organized all inactive projects under a separate section for an account. Thanks `USC Nanofab` for the contribution!
- Added handling of checked status for required checkboxes in Dynamic forms. Also making them slightly visible (transparent, 1x1 boxes) to better handle validation.
- introduced "auto_resize" option for text areas in Dynamic forms.
- Updated Tool usage counters to work with either pre or post usage questions (or both). Thanks `MIT.nano` for the contribution!
- Added new option in Customization -> remote work to assume work on behalf of another user is **never** remote. These options are now more clear: `always`/`never` considered remote, or `ask explicitly`. Thanks `MIT.nano` for the contribution!
- Reordered impersonate checks to avoid extra db call on most requests.
- Changed loading spinner behavior to hide on page unload instead of pageshow. Now the spinner can be used in ajax requests like adjustment requests.
- Slightly improved adjustment requests loading time.
- Added more options in Landing Page Choice view permissions. Icons can now be shown to anyone or specific roles/groups of people allowing a lot of flexibility.
- Added option to unlock door on area logout. Thanks `MIT.nano` for the contribution!
- Added "read_only" option for text fields in Dynamic forms.
- Added "show_formula_preview" option for Dynamic form Formula field which will display the formula result as readonly field on the form.
- Updated Dynamic form events to automatically handle add/remove of group questions and showing/hiding enable and disable tool buttons. Dynamic form changes now trigger `dynamic-form-group-changed` and `dynamic-form-field-changed` js events.
- Added `GenericRemoteUserAuthenticationBackend` and `GenericBasicAuthenticationHeaderAuthenticationBackend` to handle remote user without removing and everything after.
- Added support for pre-filling description in adjustment request (with GET parameter `description`)

Bug fixes
- In detailed admin, fixed the permission issues preventing someone from using the autocomplete to find related objects. For example if a user had Staff Charge creation permission, they wouldn't be able to select a user unless they also had view permissions on all users. This fix guarantees they can select them if they have creation or change permissions on the parent object.
- Fixed leftover "date" field preventing reservation from being made on kiosk and mobile devices.
- Fixed an error when displaying run data in usage in the calendar view.
- Fixed error being thrown when kiosk plugin is installed but not area access.
- Fixed a bug in area access tablets where project validation would not happen if the user had only one project and that project had area restrictions (derived from tool restrictions). This is an edge case unlikely to affect many users.
- Fixed buffer days for automatic user deactivation which was reversed. Users were deactivated days before instead of days after their access expiration date.
- Fixed landing page link automatic prepending of `SCRIPT_NAME` (when deploying NEMO on a subpath) which should only happen for relative links.
- Fixed Dynamic form group questions not working for pre usage questions.

Libraries
- Django 4.2.19 -> 4.2.20
- cryptography 44.0.1 -> 44.0.2
- drf-excel 2.5.2 -> 2.5.3

7.0.2

Improvements
- Updated to use `python3 -m` instead of `pip` in Dockerfile
- Replaced `var` with `let` for variable declarations to enhance code consistency and modernity in a few places
- Now automatically loading customization email templates when there is a `customization_<customization_key>_templates.html` file (helpful for plugins)
- Updated customization template loading to work from `templates/<plugin_name>/customizations/` too instead of being forced to use the global templates directory (also helpful for plugins)

API
- Added tests for API lists
- Added staff assistance requests endpoint to API

Bug fixes
- Removed direct dependency on admin app for interlocks to avoid issues when the admin app is not installed
- Fixed issue with personal schedule checkbox showing in the calendar when not applicable
- Fixed hybrid reservation and use feed not working properly when there are both reservations and use events

Libraries
- gunicorn 20.1.0 -> 23.0.0

7.0.1

Improvements
- Added Training email category
- Updated tool credential detailed admin list to include password
- Restricted list of staff that can be allowed to view tool credentials to only "active" staff

Bug fixes
- Fixed username display in tool freed time notification
- Fixed a few html/js/css display issues
- Fixed old reference to NEMO 6.1.0 (instead of 7.0.0)
- Fixed help text on document display order

Page 1 of 24

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.