I maintain a package that requires numpy. Recently, a vulnerability has been reported, which is resolved in numpy versions higher than 1.22.0. However, I cannot use these safe versions of numpy for python versions <=3.7, because numpy 1.22.2 requires Python >=3.8. And, since python 3.7 is the default for services like google colab, I prefer not to deprecate my package for python version 3.7.
Are there any solutions for maintaining python packages with numpy dependencies in python 3.7 without compromising security?