Add shadowing warning to supplemental source docs

python-poetry · Dec 4, 2023 · 72b6184 · 72b6184
1 parent 0578ed8
commit 72b6184
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/docs/repositories.md b/docs/repositories.md
@@ -232,6 +232,14 @@ poetry source add --priority=supplemental https://foo.bar/simple/
 
 There can be more than one supplemental package source.
 
+{{% warning %}}
+
+Take into account that someone could publish a new package to a primary source
+which matches a package in your supplemental source. They could coincidentally
+or intentionally replace your dependency with something you did not expect.
+
+{{% /warning %}}
+
 
 #### Explicit Package Sources