tiingo==0.15.6 urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability