{"repo":"NousResearch/hermes-agent","public_id":"119364","display_label":"Guard lazy dependency installs in live venv","summary":"These issues and PRs concern a risk where lazy dependency installation runs inside the active process's own virtual environment, potentially disrupting live packages. The work involves adding guards to prevent or refuse such installs in that context.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":119364,"title":"lazy_deps installs into the running process's own venv with no guard: uv pip install uninstalls the existing copy under a live process","url":null,"state":"open"},{"kind":"pr","number":119372,"title":"fix(tools): guard lazy installs in live venv","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#119364","number":119364}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":127416,"title":"fix(tools): refuse lazy installs into the live venv","url":null,"state":"closed","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}