Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: =?UTF-8?Q?Louis-Philippe_V=C3=A9ronneau?= Newsgroups: linux.debian.maint.python Subject: Re: Thoughts on removing access to the Python teams repositories to inactive members ? Date: Tue, 20 Jan 2026 20:00:01 +0100 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Tue Jan 20 18:53:09 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-108.01 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BODY_8BITS=1.5, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US Autocrypt: addr=pollo@debian.org; keydata= xjMEYEPdjBYJKwYBBAHaRw8BAQdA5yh8SOHhcvKeX/A4rv0/JTCL8Kgnnwy4/okKh1Htbs3N LExvdWlzLVBoaWxpcHBlIFbDqXJvbm5lYXUgPHBvbGxvQGRlYmlhbi5vcmc+wpYEExYKAD4C GwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCZb/f iAUJDuIDfAAKCRDh5UV8i61BEzdaAP0cGJp8CpkywzefhdaJjfK5/uAQLRg5Bk6yCWnyR8B4 wQEAxA4C39PJPsosgOVBMdfkzCPhGVynYBnujOyEcksX1w/OOARgQ+DlEgorBgEEAZdVAQUB AQdAgRLbDfS/6GLXd15qI9zHso9UwJQgDbme7pvL1Z9rkG4DAQgHwn4EGBYKACYCGwwWIQT2 TWHTIfPLSJFWdT3h5UV8i61BEwUCZb/fsAUJDuIASgAKCRDh5UV8i61BEwYaAQDhvbQQqmTD F/fdodzfiY45IWYckb9rCvKaVnfP6DOY9QEA/eeaEWmOq2NpOYpBesVjBZCLe8jKv1WPMfLL YOfDIAc= Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Debian-User: pollo X-Mailing-List: archive/latest/23635 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/4f81d58c-373c-4187-bc3d-371bfed96c33@debian.org Approved: robomod@news.nic.it Lines: 47 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Tue, 20 Jan 2026 13:52:02 -0500 X-Original-Message-ID: <4f81d58c-373c-4187-bc3d-371bfed96c33@debian.org> X-Original-References: Xref: csiph.com linux.debian.maint.python:17376 On 2026-01-16 06:10, Thomas Goirand wrote: > On 1/12/26 6:11 PM, Louis-Philippe Véronneau wrote: >> Hello! >> >> I'm frequently replying to people asking to join the Python Team and >> as per our policy, we are pretty liberal in granting access to our >> repositories :) >> >> That's great, but of course, the more people have access to the >> repositories, the more potential for abuse. >> >> There are currently 539 members of the team on Salsa and some of these >> members haven't been active in the team for a while. I was wondering >> what people thought of removing access to accounts that haven't been >> active between 2023 to 2026. >> >> I think a 3 years cutoff is fair? A quick look on Salsa lists around >> 75 accounts that would meet that criteria. >> >> Of course, people that would be removed could always ask to be added >> again, if they need access to a repository ;) >> >> Cheers, > > Hi, > > I agree with what's been said as reply: this is a very good idea, but > please exclude DDs and DMs from removal list. > > BTW, as a Salsa admin, I thought that maybe, we should do the same thing > globally: at least *lock* inactive accounts with the rule: > > - no activity for 3 years > - account created at least 6 months ago > - not a DD > > Any other criteria? > > Anyone to help me to write such a shell script? :) That would be great! I don't have any spoons for that, but it would indeed be a better idea than doing this at the team level. -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau ⢿⡄⠘⠷⠚⠋ pollo@debian.org / veronneau.org ⠈⠳⣄