Path: csiph.com!server.example.net!news.nntp4.net!news.hispagatos.org!srl.newsdeef.eu!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Nicholas D Steeves Newsgroups: linux.debian.maint.python Subject: Re: Thoughts on removing access to the Python teams repositories to inactive members ? Date: Sat, 17 Jan 2026 23:50:01 +0100 Message-ID: References: X-Original-To: Thomas Goirand , "debian-python@lists.debian.org" X-Mailbox-Line: From debian-python-request@lists.debian.org Sat Jan 17 22:42:52 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.51 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Debian-User: sten X-Mailing-List: archive/latest/23628 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/87ecnnlv3k.fsf@digitalmercury.freeddns.org Approved: robomod@news.nic.it Lines: 58 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sat, 17 Jan 2026 17:42:23 -0500 X-Original-Message-ID: <87ecnnlv3k.fsf@digitalmercury.freeddns.org> X-Original-References: Xref: csiph.com linux.debian.maint.python:17371 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Thomas! Thomas Goirand writes: > Hi, > > I agree with what's been said as reply: this is a very good idea, but=20 > please exclude DDs and DMs from removal list. > > BTW, as a Salsa admin, I thought that maybe, we should do the same thing= =20 > globally: at least *lock* inactive accounts with the rule: > > - no activity for 3 years > - account created at least 6 months ago > - not a DD > > Any other criteria? > > Anyone to help me to write such a shell script? :) Maybe base it on the GNOME project's Gitlab script? As a one-off contributor to upstream GNOME (three years ago, I think) I just received a deactivation email, which also said this: > To reactivate your account, sign in to GitLab at https://gitlab.[foo].org. So maybe a check-in with a team somewhere to revalidate the credentials socially (ie the web of trust vis =C3=A0 vis the supply chain thing)? Best, Nicholas --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4qYmHjkArtfNxmcIWogwR199EGEFAmlsEFMQHHN0ZW5AZGVi aWFuLm9yZwAKCRBaiDBHX30QYZ4ZD/9byEt15d/k3Mf1ktiYBCRh6uITM3gbWmsj Kk9rcz/8qlTzb2QaOgwUSuBBhmkc1Vff4rV75tgSDLgneBqgJiI866D8TdBGGmLx BCJHZf8CJ+sTnvtlbQF0l6C1PE2zGGpZ5JEHn5bpJgTmu03xy8YZWfjymzZCb3nK rP4j5mnjylbFMHGOEvhQs7MGjtI39mTBVYp0LI3Fgrdo0+ToorOYoFSbTTeo5RRG FMAKWBPPbYZyiSTxOBENKKFheDUv4iDcR/BZMeQgXKQ473kHI4NM1GChQd1KYROH YzwR/hQVhbLRKvtPFi2ODwBdlh21FBuHUIaywmL+8hrnUh6iLQ2jgt23eh9qnF/3 DmD/l1J+BMcKCFql/p3R+GZREaZqSvLQkHjy/Z2+v/XHuU2AnEyd+4uPkf1Ehu7R jdUbKqU6v39b8oBzwRovi1j/m/KODaO1y4BuhNq+8bX0dTxB5FEcCoXQdGxEkwb4 7qxrqRq6eIF8pT+mYfu7+5Zm11E/N35V1SQ+gpEKuoyB42MoKRFpfIM7T1yC2oua 8ek1+CquBGaeBnBeG3pt5DIRY9OrwDL/ZbQ2x9QpovmrvT8Dlxgaeo9LobHI+nDD CTR1HOM0Nu+2CXiEBjQk5FTArlVcw1u5TchcUUeAzXeYSnrVDm8FcHHLdupOgdv4 pv6KBNkCrg== =K5kK -----END PGP SIGNATURE----- --=-=-=--