diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index bf966a4..ae4511d 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -2,10 +2,6 @@ We love your input! We want to make contributing to this project as easy and transparent as possible. -## Contribution recogniton - -We plan to use [All Contributors](https://allcontributors.org/docs/en/specification) specification to handle recognitions. - ## Summary of the contribution flow The following is a summary of the ideal contribution flow. Please, note that Pull Requests can also be rejected by the maintainers when appropriate. diff --git a/DEPENDENCY_POLICY.md b/DEPENDENCY_POLICY.md index ef82c33..525fc1b 100644 --- a/DEPENDENCY_POLICY.md +++ b/DEPENDENCY_POLICY.md @@ -26,7 +26,7 @@ of this policy which we will be addressing over time, they do not provide ground |Criteria|Requirement|Mnemonic|Weight|Rationale| |--------|-----------|--------|------|---------| -|Cloud Native Computing Foundation (CNCF) [approved license](https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist)|MUST|License|High|| +|Cloud Native Computing Foundation (CNCF) [approved license](https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md#approved-licenses-for-allowlist)|MUST|License|High|| |Dependencies must not substantially increase the binary size unless they are optional (i.e. confined to specific extensions)|MUST|BinarySize|High|Microcks Uber is sensitive to binary size. We should pick dependencies that are used in core with this criteria in mind.| |No duplication of existing dependencies|MUST|NoDuplication|High|Avoid maintenance cost of multiple utility libs with same goals (ex: JSON parsers)| |CVE history appears reasonable, no pathological CVE arcs|MUST|SoundCVEs|High|Avoid dependencies that are CVE heavy in the same area (e.g. buffer overflow)