frostbyte_neo/yao-meta-skill
1
0
Fork 0
Code Issues Pull Requests Actions Deployments Models Agent Notes Packages Projects Releases Wiki Activity
Files
00a0a1f0c68117192e31bb084e842c949cbb7db0
yao-meta-skill/security/dependency_policy.md
T
yaojingang 30ecd9b993 Add Skill OS 2.0 foundations
2026-06-13 12:34:19 +08:00

370 B
Raw Blame History

Dependency Policy

Runtime dependencies should be pinned for CI and release gates.

Current v0 policy:

  • Python CI dependencies belong in requirements-ci.txt.
  • Release-critical dependencies should use exact pins.
  • Generated packages should avoid fetching code during normal execution.
  • Any future package manager lockfile should be included in the trust report.
Reference in New Issue View Git Blame Copy Permalink