Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add and sync DEPENDENCY_POLICY.md #20

Closed
yada opened this issue Sep 23, 2024 · 2 comments
Closed

Add and sync DEPENDENCY_POLICY.md #20

yada opened this issue Sep 23, 2024 · 2 comments
Assignees

Comments

@yada
Copy link
Member

yada commented Sep 23, 2024

Reason/Context

Describe Microcks External Dependency Policy
Needed for #16

Description

The DEPENDENCY_POLICY.md file in a CNCF (Cloud Native Computing Foundation) project outlines the guidelines and rules for managing dependencies within the project. Its primary purposes include:

Clarity on Dependency Management: It provides clear instructions on how dependencies should be added, updated, or removed, ensuring that all contributors follow a consistent approach.

Versioning Guidelines: It specifies which versions of dependencies are acceptable, helping maintain compatibility and stability across the project.

Security Practices: The document may include security considerations, such as how to handle vulnerable dependencies or the process for auditing them regularly.

Contribution Process: It may detail how contributors can propose changes to dependencies, including review processes or approval requirements.

Licensing Compliance: It helps ensure that all dependencies comply with the project's licensing requirements, avoiding legal issues down the line.

Overall, the DEPENDENCY_POLICY.md fosters a robust and secure dependency management strategy, contributing to the overall health and sustainability of the project.

Implementation ideas

Ref: https://github.com/microcks/microcks-testcontainers-go/blob/main/DEPENDENCY_POLICY.md

@yada yada self-assigned this Sep 23, 2024
@yada
Copy link
Member Author

yada commented Sep 23, 2024

Update table (sync repos details) for Dependency Policy in issue #16
👉 #16 (comment)

yada added a commit that referenced this issue Sep 23, 2024
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
yada added a commit that referenced this issue Sep 23, 2024
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
@yada
Copy link
Member Author

yada commented Sep 23, 2024

Sync and merged ✅

@yada yada closed this as completed Sep 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant