[TECH DEBT] DEPENDENCIES.md is outdated
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 15.7k
- Forks
- 5.6k
- Avg merge
- 2d 44m
- Merged PRs (30d)
- 80
Description
Description of the tech debt to be addressed, include links and screenshots
https://github.com/saltstack/salt/blob/master/DEPENDENCIES.md is outdated. dependencies listed may no longer be correct and in some cases list security issues. such as networkx. which is dependency of a dependency of a dependency and also is optional. but this list makes it sound like it is required to operate and only a version with a cve is listed.
Versions Report
current master repo
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with DEPENDENCIES.md in the Salt repository and compare its entries with the dependency definitions used by the current master branch. Check whether listed packages are direct, optional, or transitive dependencies and whether the recorded versions remain accurate. Done means the document reflects current dependencies and does not present optional or vulnerable transitive packages as required.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100