Distribution
Open-source
The SDK MUST be open-source and hosted on a public GitHub repository in the IBM organization. The repository name SHOULD follow the pattern of <service>-<language>-sdk (for example,
platform-services-node-sdk). The SDK SHOULD be discoverable through simple GitHub and Google searches. The SDK SHOULD use the Apache 2.0 license.
Package management
The SDK SHOULD be distributed using the most popular package management systems for the language. See package management for the recommended package managers by language and their respective requirements.
Package dependencies
The SDK SHOULD use the common dependency management system for declaring its dependencies, including "lock" files wherever supported to specify checksummed versions of dependencies used in an SDK release. Dependency versions should be specified with a fixed major version to avoid incompatible changes that might occur in major version updates.
Semantic versioning
The SDK MUST use semantic versioning for SDK releases (this requirement is enforced by some package management systems).