Dependency starkbank-ecdsa forces high-severity vulnerability

Github has alerted us that our project has a high-severity vulnerability `starkbank-ecdsa` version 1.1.1. The requirements file here forces us to install it (see `requirements.txt`):



```

starkbank-ecdsa>=1.0.0,<2.0.0

```



Please fix this so we don't have to install this library to use sendgrid.



From the github alert:



```

GHSA-9wx7-jrvc-28mm

high severity

Vulnerable versions: < 2.0.1

Patched version: 2.0.1



An attacker can forge signatures on arbitrary messages that 

will verify for any public key. This may allow attackers to 

authenticate as any user within the Stark Bank platform, and 

bypass signature verification needed to perform operations 

on the platform, such as send payments and transfer funds. 

Additionally, the ability for attackers to forge signatures may 

impact other users and projects using these libraries in different 

and unforeseen ways.

```



PS - what does it use this library anyway? Seems odd that an email library depends on bank software.

[]