wehub/yao-meta-skill
1
0
Fork 0
Code Issues Pull Requests Actions Deployments Models Agent Notes Packages Projects Releases Wiki Activity
Files
main
yao-meta-skill/security/dependency_policy.md
T
wehub-resource-sync 9e1b5784b8
test / test (push) Has been cancelled
Details
chore: import upstream snapshot with attribution
2026-07-14 10:24:00 +08:00

370 B
Raw Permalink Blame History

Dependency Policy

Runtime dependencies should be pinned for CI and release gates.

Current v0 policy:

  • Python CI dependencies belong in requirements-ci.txt.
  • Release-critical dependencies should use exact pins.
  • Generated packages should avoid fetching code during normal execution.
  • Any future package manager lockfile should be included in the trust report.
Reference in New Issue View Git Blame Copy Permalink