itsdangerous in version 1.0.0 has been pulled from PyPI, which lets dependeny resolution fail. https://palletsprojects.com/blog/itsdangerous-1-1-0-released/ Library authors do not expected incompatible changes.