Skip to main content
SourceTrustSign in

Help center

Guides for SourceTrust: Importing dependencies, reviewing licenses, external obligations, publishing attestation pages, billing, plain-language license explainers, and procurement-oriented explainers for common open-source licenses.

Comments on components

← All articles

Leave notes for teammates while reviewing a dependency. Comments stay inside the organization and never appear on the public attestation page or in exports.

On any package page, use Team notes to ask questions, record counsel decisions, or flag follow-ups. Notes are visible to teammates who can open the project inventory (not finance-only roles). They never appear on the public attestation page.

  • You can edit your own note for one hour after posting (typos). After that, Edit is gone; you can still delete.
  • Deleting a note removes the text but leaves a "Note deleted" placeholder with the author and original time, so the team can see something was there.
  • Authors can delete their own notes; admins and owners can delete any note.