Drop unused aiohttp requirement

pombredanne · pombredanne · commit 318baa14682f · 2022-09-02T11:11:34.000+02:00
Signed-off-by: Philippe Ombredanne &lt;pombredanne@nexb.com&gt;
diff --git a/requirements.txt b/requirements.txt
@@ -1,4 +1,3 @@
-aiohttp==3.8.1
 aiosignal==1.2.0
 alabaster==0.7.12
 asgiref==3.5.0
diff --git a/setup.cfg b/setup.cfg
@@ -81,7 +81,6 @@ install_requires =
 
     # networking
     GitPython>=3.1.17
-    aiohttp>=3.7.4.post0
     requests>=2.25.1
     fetchcode>=0.1.0
 
diff --git a/vulnerabilities/package_managers.py b/vulnerabilities/package_managers.py
@@ -37,7 +37,6 @@
 # FIXME: use purl for cache key, rather than an undefined package_name key
 # FIXME: DO NOT cache by default as this is an optimization that does not work for long running processes
 # FIXME: DO NOT use set() for storing version lists: they lose the original ordering
-# FIXME: DO NOT use aiohttp that makes the code more complex before this is can be tested for correctness first
 
 
 @dataclasses.dataclass(frozen=True)
