I’m confused about why it needs write access to code... if I were doing this 
for scikit-image I would possibly clone the code to a new repo.

> On 29 Aug 2019, at 8:03 am, Matti Picus <matti.pi...@gmail.com> wrote:
> 
> In PR 14378 https://github.com/numpy/numpy/pull/14378 I moved all our python 
> test dependencies to a test_requirements.txt file (for building numpy the 
> only requirement is cython). This is worthy since it unifies the different 
> "pip install" commands across the different CI systems we use. Additionally, 
> there are services that monitor the file and will issue a PR if any of those 
> packages have a new release, so we can test out new versions of dependencies 
> in a controlled fashion. Someone suggested Dependabot (thanks Ryan), which 
> turns out to be run by a company bought by github itself.
> 
> 
> 
> When signing up for the service, it asks for permissions: 
> https://pasteboard.co/IuTeWNz.png. The service is in use by other projects 
> like cpython. Does it seem OK to sign up for this service?
> 
> 
> 
> Matti
> 
> _______________________________________________
> NumPy-Discussion mailing list
> NumPy-Discussion@python.org
> https://mail.python.org/mailman/listinfo/numpy-discussion
_______________________________________________
NumPy-Discussion mailing list
NumPy-Discussion@python.org
https://mail.python.org/mailman/listinfo/numpy-discussion

Reply via email to