Hi, In the process of orphaning a few packages lately, I noticed that the user "cicku" (Christopher Meng) still had commit or admin privelidges on the package. That user hasn't been active for a couple of years, and I vaguely remember packages that he owned being orphaned. But, it seems like packages where he was co-maintainer had no changes. Is this desirable for inactive developers? What if their account became compromised? Would it be better if the inactive maintainer process removed priviliges across all packages, rather than only orphaning the packages they own?

On 20/09/2018 21:30, Jonathan Underwood wrote: > On Thu, 20 Sep 2018 at 18:17, Jonathan Underwood >> In the process of orphaning a few packages lately, I noticed that the >> user "cicku" (Christopher Meng) still had commit or admin privelidges >> on the package. That user hasn't been active for a couple of years, >> and I vaguely remember packages that he owned being orphaned. But, it >> seems like packages where he was co-maintainer had no changes. >> >> Is this desirable for inactive developers? What if their account >> became compromised? Would it be better if the inactive maintainer >> process removed priviliges across all packages, rather than only >> orphaning the packages they own?

> I forgot to add this ticket for the relevant non-responsive maintainer > ticket: https://pagure.io/fesco/issue/1542 Yeah, cicku has been inactive for some time, his last build succeeded more than two years ago. However, the ticket suggests, that the non-responsive maintainer process has not been followed correctly. Anyways, there was the FESCO decision to orphan his packages [1], it seems that didn't happen completely?