---
schema_version: "1"
id: 51f7624c00eed5fecaac5830c6b0a558934ea60ed97c89ded01ec348171bfc04
title: Maintain Your Plugin
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/salesforcedx/sfcliplugin/guides/maintain/maintain.md
canonical_url: https://developer.salesforce.com/docs/platform/salesforce-cli-plugin/guide/maintain.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 0f6965effe4a907c0eeabbf05494949b874f8ade2de75a558c265b77d662f68c
products:
  - Salesforce CLI Plugin Developer Guide
  - salesforcedx
---
# Maintain Your Plugin

You decide how to maintain your plugin, and even what it _means_ to maintain your plugin. However, we have a few recommendations to get you started, based on what the Salesforce CLI developer team does.

## Dependencies

It's important to keep your dependency tree up to date. We use the [dependabot](https://github.com/dependabot/dependabot-core) Github integration, which automatically creates PRs to bump package dependency versions.

Here's an example of how we configure dependabot on our top-level `@salesforce/cli` repo: https://github.com/salesforcecli/cli/blob/main/.github/dependabot.yml

## Snyk

We use the [snyk code checker](https://snyk.io/lp/snyk-code-checker/) to scan pull requests for security and quality issues.