[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: debian group on salsa allowing any DD to upload packages hosted there (Was: Bits from the DPL)



Quoting Paul Gevers (2025-08-21 10:59:30)
> On 21-08-2025 10:51, Marc Haber wrote:
> > I really think that upload should be done by those persons in
> > Uploaders
> 
> Can we have an agreed content for the "debian team" in 
> Maintainer/Uploader? What I'm currently missing is the ability to say: 
> this package isn't QA maintained, but everybody is free to upload.
> 
> Maintainer: Debian <everybody@debian.org>
> Uploader: me and some others
> 
> Or ideally even without the Uploader field set, but currently that's a 
> policy violation.
> 
> Than this could become the opt-in way of saying this within the /debian 
> namespace.
> 
> I would love to set this on e.g. liferea and dbconfig-common.

Your suggestion involves multiple things.

I am in favor of your main proposal, but not how it pulls in other parts
(assuming I understood you correctly).

Yes, let's introduce a new maintenance team that consist of all Debian
developers.  But let's keep it distinct from the "debian" namespace on
Salsa, and let's not relax the notion of uploaders but strengthen it.

The "debian" namespace on Salsa has an existing definition which do not
include that everyone can upload, and it is wrong to "pull the rug" and
cause surprises for those not agreeing with redefined workflows.

I find that the Uploaders field becomes more important, not less, for
team-maintained packages compared to solo-maintained packages. An
example is how to recognize if a package is obsolete and best dropped
from Debian: Easy if the package is broken and noone fixes it for years,
but that's a horrible way to track that - in the years up until notices
the package is dead weight, and what about potential dead weight not
technically broken and therefore less easy to stumble upon? I like the
rule that is (or was, when I was part of it) upheld in the multimedia
team, that any team-maintained package need at least two uploaders - if
you care in particular for a package, then add yourself as uploader, and
when you stop caring then remove yourself - then it becomes easy to
notice when a package has lost interest within the team, before it falls
apart or causes burdening churn e.g to align with library SONAMEs.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: signature


Reply to: