diff doc/features.txt @ 8174:5ea419c1d571

add security advantage of depending on core library. After reading about NPM supply chain attacks, emphasize core functions of Roundup are available without reaching out to PyPi.
author John Rouillard <rouilj@ieee.org>
date Tue, 03 Dec 2024 10:53:32 -0500
parents b1ff8c0e3e1d
children 5145ad81970a
line wrap: on
line diff
--- a/doc/features.txt	Mon Dec 02 13:53:23 2024 -0500
+++ b/doc/features.txt	Tue Dec 03 10:53:32 2024 -0500
@@ -26,6 +26,9 @@
 - Can be run in a container like Docker or kubernetes.
 - Deploy in your network as a standalone web server or `through
   various methods`_ like WSGI, FastCGI, plain CGI, etc.
+- Essential tracking features depend on the Python standard
+  library. Supplementary packages from PyPI are optional and can be
+  tailored to fit your unique threat model and security needs.
 
 **Issue Tracking and Management**
 

Roundup Issue Tracker: http://roundup-tracker.org/