Hello, I don't mean to jump in the midle here, and I am just tossing out an idea for consideration that doesn't address security issues pointed out really, but does discuss the non-responsive main maintainer. I note there is a difficulty in defining the criteria for determining when an (apparently) inactive packager should be removed from the packager group. Perhaps a different POV is required. What is the problem trying to be solved? Removal of inactive packagers? Or the demotion of said packager in favour for the one(s) who are supporting the package to be promoted to main. Perhaps the automation should do just that, demote primary packager (from owner to co-maintainer) if inactive for over a year and promote the main supporter for the year to be the owner from co-maintainer. Doesn’t something like that satisfy the inactivity requirement and also prevent alienating some packagers? Just bike shedding here. Stephen On Wed, 2022-02-16 at 11:48 +0100, Vitaly Zaitsev via devel wrote: > On 16/02/2022 11:32, Björn Persson wrote: > > Loss of an email address does not imply loss of a FAS passphrase, > > so in > > most cases they would just log in as usual. > > We're talking about potentially hacked accounts, right? If the hacker > has the password, they can easily restore this account. That's why we > need another way to verify maintainer's identity. > > -- > Sincerely, > Vitaly Zaitsev (vitaly@xxxxxxxxxxxxxx) > _______________________________________________ > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: > https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure