Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a new template for requesting a library to be added in package.json #31035

Merged
merged 3 commits into from
Nov 9, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/ISSUE_TEMPLATE/NewLibraryRequest.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
name: New Library Request
about: Use this when you want to propose adding a new library to package.json (dev-dependencies excluded)
labels: Weekly, AutoAssignerAppLibraryReview
---
In order to properly evaluate if a new library can be added to `package.json`, please fill out this request form. It will be automatically assigned someone from our review team that will go through and vet the library.

Note: This is only for production dependencies. While we don't want people to add packages to dev-dependencies willy-nilly, we recognize that there isn't as great of a need there to secure them.

# Name of library:

## Details
- Link to package:
- Problem solved by using this package:
- Number of stars in GH:
- Number of monthly downloads:
- Number of releases in the last year:
- Level of activity in the repo:
- Alternatives:
- Are security concerns brought up and addressed in the library's repo?
- How many dependencies does this lib use that will be brought into our code?
- What will the effect be on the bundle size of our code?
Loading