it should contain information like: - repo name - repo link - package link (e.g. npm package) - version - which principles does it follow - which principles it does not follow (and justification/trade-off)