diff --git a/web/CODE_CONVENTIONS.md b/web/CODE_CONVENTIONS.md
index e1e8b68..e2d1c31 100644
--- a/web/CODE_CONVENTIONS.md
+++ b/web/CODE_CONVENTIONS.md
@@ -369,7 +369,7 @@ external keep its spelling (`Authorization`, CSS `color`).
   different code. The app's own dependencies use `^` ranges, held by the
   lock file.
 - A new or upgraded package is a release at least two weeks old, and is
-  added deliberately, in its own change.
+  added deliberately, in the same change as the code that needs it.
 
 ## Tests