Open mjlbach opened 2 years ago
This guidance should also include what we expect package managers to do about verifying external dependency versions.
It's hard, because we can't enforce the versioning scheme (it could be calver or something-not-semver). I'm not sure what the best generic way to check against versions is. We could allow specifying comparator rules, regex matches on version, etc. Not sure.
Yeah, I'm not sure what we can require that isn't too onerous for plugin managers.
Personally, I think we should defer this and omit it from the initial release.
Some dependencies are runtime, some are build time. The specification may want to distinguish these, as the latter could cause the plugin to fail installation.