Policies and Practices

Version support policy for dependencies

PlasmaPy generally follows the time-based policy for dropping dependencies as recommended in SPEC 0. SPEC 0 recommends a common dependency support policy across the scientific Python ecosystem. This policy balances reducing maintenance burden with the need to support older versions of dependencies.

The specific recommendations are that:

1. Support for Python versions be dropped 3 years after their initial release.

2. Support for core package dependencies be dropped 2 years after their initial release.

Support for dependencies may be dropped sooner than what SPEC 0 recommends if a more recent release of a dependency contains critical bug fixes or includes important new features.

Dependency groups used for code development activities such as running tests and building documentation are excluded from this policy because they are not intended for use by end users of PlasmaPy.

Security policy

PlasmaPy’s security policy is maintained within its GitHub repository. Please use this link to privately report a security vulnerability.