diff options
author | Darcy Clarke <darcy@darcyclarke.me> | 2021-04-08 21:17:06 +0300 |
---|---|---|
committer | Ruy Adorno <ruyadorno@hotmail.com> | 2021-04-08 22:38:11 +0300 |
commit | 90b61eda9b41af108ed69fc0c43a522a92745047 (patch) | |
tree | 6b1e1cc50cd28e26049dd63ceb5611179bb38bb9 /CONTRIBUTING.md | |
parent | 13843f489401d918e7f1a41ed1ff636fc3feb603 (diff) |
chore: update contributing.md to explicitely outline dep updatesdarcyclarke-patch-1
PR-URL: https://github.com/npm/cli/pull/3053
Credit: @darcyclarke
Close: #3053
Reviewed-by: @ruyadorno
Diffstat (limited to 'CONTRIBUTING.md')
-rw-r--r-- | CONTRIBUTING.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 4116f4e71..6821da895 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -51,6 +51,10 @@ We've set up an automated [benchmark](https://github.com/npm/benchmarks) integra You can learn more about this tool, including how to run & configure it manually, [here](https://github.com/npm/benchmarks) +## Dependency Updates + +It should be noted that our team does not accept third-party dependency updates/PRs. We have a [release process](https://github.com/npm/cli/wiki/Release-Process) that includes checks to ensure dependencies are staying up-to-date & will ship security patches for CVEs as they occur. If you submit a PR trying to update our dependencies we will close it with or without a reference to these contribution guidelines. + ## Reporting Bugs When submitting a new bug report, please first [search](https://github.com/npm/cli/issues) for an existing or similar report & then use one of our existing [issue templates](https://github.com/npm/cli/issues/new/choose) if you believe you've come across a unique problem. Duplicate issues, or issues that don't use one of our templates may get closed without a response. |