F-Droid server doesn't fetch pip dependencies directly from mercurial/hg repositories. So https://data.safetycli.com/v/62044/f17/ is not affecting us. Hence we can ingore it.
* https://security-tracker.debian.org/tracker/CVE-2023-40267