On Thu, Feb 10, 2022 at 03:01:25AM +0000, Gary Buhrmaster wrote:
On Wed, Feb 9, 2022 at 5:05 PM Mattia Verga via devel
<devel(a)lists.fedoraproject.org> wrote:
> That is referring to provenpackagers only. I'd like this to be extended
> to users in packagers group also.
Ben,
since you have the script handy, could you check how many (non-pp)
packagers would be reported as inactive pretty please? Maybe with the
inactivility threshold raised to 1 year instead of 0.5 y.
I think that if we disabled completely inactive accounts after a year
or two, this would be reasonable from security perspective. There are
many many packages which are now maintained by other people so packagers
can effectively maintain co-ownership without committing to a package
for years.
Zbyszek