Nemo

Latest version: v6.0.3

Safety actively analyzes 693883 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 23

3.15.0

Not secure
Upgrade notes
- For the new automatic alert creation for Closures and reminder emails on last occurrence to work, a daily cron job must be added, calling either `docker exec -it nemo django-admin create_closure_alerts` or by sending an http request to `/create_closure_alerts`

New features
- Added Staff status, a new feature on the status dashboard displaying whether staff are in/out:
- Leave type can be customized (sick leave, annual leave, parental leave etc.)
- Staff working days and typical hours can be set, as well as staff categories (second shift, user office etc.)
- Only facility managers can add/edit staff absences and see the details (sick leave, annual leave etc.)
- Regular user and staff users only see in/out status
- Facility managers can also export the calendar
- Customizations available: show/hide weekends, display staff status only to other staff members, start week on Sunday/Monday
- Week/Month view
- Renamed PhysicalAccessException to Closure and massively updated the feature:
- A closure can now have multiple dates (to set Labor day for multiple years in advance for example)
- A closure can triggered an automatic alert a certain number of days prior to the closure. (5 days before Labor day for example, informing users that buddy system will be in place etc.)
- Staff can be marked as absent in the Staff status page during a closure (optional)
- A reminder email can be sent on the last occurrence of a closure reminding facility managers to add more if needed. (In case you set Labor day 5 years in advance and then forget to add more dates)

Bug fixes
- Fixed a bug preventing XLSX export in API
- Fixed a bug requiring the identity service to be set in settings for qualifications to work. Thanks rmwhite85 for reporting this!
- Fixed reservation details on Mobile and Kiosk only displaying times which would make it very confusing when reservations span over multiple days. Thanks nsieb for bringing this up!
- Fixed reservations losing their reservation questions when moving/resizing them. Fixes 104. Thanks jat255 for reporting it!

Libraries
- Django 2.2.26 -> 2.2.27 (vulnerability)
- drf-renderer-xlsx 0.4.4 -> 0.4.5 (fixes broken XLSX with manytomany fields)

3.14.1

Not secure
Bug fixes
* Fixed a wrong template name used in usage event details in calendar
* Fixed another bug in custom task status. Thanks rmwhite85 once more!
* Fixed date format issues in user creation and abuse pages

3.14.0

Not secure
Upgrade Notes
* NEMO now requires Python 3.7 since security support for 3.6 ended last month.
* The `LAB_MANAGERS` list in `settings.py` has been replaced by a permission on users called `is_facility_manager`. If you were using the LAB_MANAGERS setting, go to Detailed Administration -> Users and set the facility managers there after updating NEMO. Also please note that you need at least one facility manager to enable the new Access request feature.
* The `qualified` checkbox is now enabled by default when recording training sessions. Make sure to double check before confirming.
* The access request weekend access feature (more on this below) requires a cron job to be set hourly, calling `docker exec -it nemo django-admin send_email_weekend_access_notification` or sending a request to `/email_weekend_access_notification`

New Features
* Added temporary access. This allows admins to give users access for a limited time. For example, giving someone weekend cleanroom access for one weekend. It is available through in Detailed Administration only.
* Added user access requests:
* Grouping Access Requests and Buddy Requests under one common "Requests" menu item.
* Access requests (after-hours requests) need to be enabled by checking the "allow user request" box on a "Physical Access Level" in Detailed administration and by setting at least one Facility manager.
* Added customizations for tab title, description message, minimum number of buddies, maximum number of requests to display, weekend access emails and cutoff day and time (more on this below)
* Once enabled, users can submit access requests by selecting a start and end time, an access level (if multiple are enabled) and a list of buddies. Facility managers (see below) are then notified and can approve/deny the request in NEMO. Upon approval, a corresponding temporary access will be created for all users in the request.
* The request creator and buddies will receive a confirmation email, and buddies/facility managers will have a notification badge in NEMO on the requests tab indicating there is something new.
* Facility managers can approve/deny a request and have the opportunity to update it before approving. This allows them to change the dates, update the description etc. before approving. This is useful if for example the request can only be approved for one day due to lack of staff on the second day, etc.
* A "weekend access" customizable email can be sent to a list of emails set in customization on the cutoff day and time set. If the email template is set, the email will be sent the within an hour of the first approved request that includes weekend time with a `weekend_access` value of `True`. If no access requests that include weekend time are approved by the cutoff day and time, the same email will be sent with a `weekend_access` value of false. The latter will not be sent if the cutoff day and time is not set.
* Added the facility manager role in Detailed administration -> Users to replace the `LAB_MANAGERS` settings. Facility managers receive all tasks related updates and approve/deny access requests.
* Added "Charge note". This is a text area field that can be set and updated after creating a Staff Charge. It will be displayed in "My usage", "Project billing" and "Remote work" pages as well as in the API.
* The project selection name can now be customized in the "Customization" page. It will use the Django templating engine, allowing the use of things like "{{ project.account.name }} - {{ project.name }}" which would display the account name followed by the project name. This is limited to project selection lists (in reservations, logging in an area, kiosk etc.)
* A standalone reservation view was added for linking from outside of NEMO, available at `/event_details/reservation/<reservation_id>/`. Thanks jat255 for the contribution!
* Email templates to be used in customizations were added in the [resources folder](https://github.com/usnistgov/NEMO/tree/master/resources/emails). Feel free to adapt them to your needs.

Improvements
* Date and time formats have been made more consistent across NEMO and follow django's format from settings.py instead of being hardcoded in certain places. Make sure `DATETIME_FORMAT`, `SHORT_DATETIME_FORMAT`, `DATE_FORMAT`, `SHORT_DATE_FORMAT` and `TIME_FORMAT` are set to your liking in `settings.py` otherwise Django's default will be used.
* Added an `EXPORT_DATE_FORMAT` and `EXPORT_TIME_FORMAT` to `settings.py` to allow a custom format to be used in filenames when exporting (in API, My Usage, Tool Usage Data etc.). If not set, they will default to `m_d_Y` and `h_i_s` respectively.
* Supplies/consumables withdrawals are now allowed in group post usage questions.
* Project information can now be shown and exported in "Tool Usage Data History" through a checkbox (unchecked by default).
* The `qualified` checkbox when recording a training session is now checked by default.
* Fixed styling issues in the `Email logs` feature in the detailed administration, and also updated Customization to open the content preview in a separate tab.

Bug fixes
* Fixed a bug dating back to 2018 in custom task status using `primary_tool_owner` instead of `primary_owner`. Thanks rmwhite85 for noticing!
* Fixed a bug when exporting usage where it would use UTC dates in the CSV file.
* Fixed a bug when user having back-to-back reservations would have one of them marked as missed when they were in fact already logged in to the area (from the prior reservation).
* Updated the misleading message when selecting projects for reservation. It will now only mention missed reservation fees if the `missed_reservation_threshold` field is set on the tool/area and the message will mention what the threshold actually is.
* Fixed issue when billable items would not show up in API when crossing over the period. i.e. if a charge started before the end of the month and finished the next month, it would not show up. Changed the logic to show billables by end date only.

Libraries
* Updated Django to 2.2.26
* Updated django-filter to 21.1
* Updated djangorestframework to 3.13.1
* Updated django-mptt to 0.13.4
* Updated cryptography to 36.0.1
* Updated drf-flex-fields to 0.9.7
* Updated drf-renderer-xlsx to 0.4.4
* Updated python-dateutil to 2.8.2
* Updated ldap3 to 2.9.1
* Updated requests to 2.27.1
* Updated Pillow to 9.0.0

3.13.3

Not secure
Bug fix
- fixed a bug when reservations would be marked as missed when the user was logged in from before its reservation (back-to-back reservations scenario)

3.13.2

Not secure
Bug fix
* Fixed email broadcast error when sending to users having access to an area or when sending to all users

3.13.1

Not secure
Bug fix
* Fixed issue with mobile reservations breaking when the user has only one project

Page 8 of 23

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.