Potential dependency conflicts between artem and urllib3

[NeolithEra]

Hi, as shown in the following full dependency graph of artem, artem requires urllib3 * ， while the installed version of requests(2.22.0) requires urllib3 <1.26,>=1.21.1.

According to Pip's “first found wins” installation strategy, urllib3 1.25.7 is the actually installed version.

Although the first found package version urllib3 1.25.7 just satisfies the later dependency constraint （urllib3 <1.26,>=1.21.1), it will lead to a build failure once developers release a newer version of urllib3.

Dependency tree--------

artem - 3.0.1
| +- apiai(install version:1.2.3 version range:*)
| | +- numpy(install version:1.17.4 version range:*)
| +- certifi(install version:2019.9.11 version range:*)
| +- chardet(install version:3.0.4 version range:*)
| +- idna(install version:2.8 version range:*)
| +- metadate(install version:0.5.74 version range:*)
| | +- enum-compat(install version:0.0.3 version range:*)
| | | +- enum34(install version:1.1.6 version range:*)
| | +- python-dateutil(install version:2.8.1 version range:*)
| +- numpy(install version:1.17.4 version range:*)
| +- protobuf(install version:3.11.0 version range:*)
| +- requests(install version:2.22.0 version range:*)
| | +- certifi(install version:2019.9.11 version range:>=2017.4.17)
| | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | +- urllib3(install version:1.25.6 version range:<1.26,>=1.21.1)
| +- setuptools(install version:42.0.1 version range:*)
| +- six(install version:1.13.0 version range:*)
| +- sortedcontainers(install version:2.1.0 version range:*)
| +- urllib3(install version:1.25.6 version range:*)
| +- vk-api(install version:11.6.1 version range:*)
| | +- enum34(install version:1.1.6 version range:*)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.9.11 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.6 version range:<1.26,>=1.21.1)
| | +- six(install version:1.13.0 version range:*) 

Thanks for your attention.
Best,
Neolith

[NeolithEra]

Suggested Solution

1. Fix your direct dependencies to be urllib3 <1.26.
2. Ask your upstream project request to losse the version range of urllib3 to be >=1.21.1.

@Tgjmjgj Which solution do you prefer, 1 or 2?
Please let me know your choice. May I pull a request to solve this issue?