On 16/01/26 4:40 pm, Thomas Goirand wrote:
On 1/12/26 6:11 PM, Louis-Philippe Véronneau wrote:
Hello!

I'm frequently replying to people asking to join the Python Team and as per our policy, we are pretty liberal in granting access to our repositories :)

That's great, but of course, the more people have access to the repositories, the more potential for abuse.

There are currently 539 members of the team on Salsa and some of these members haven't been active in the team for a while. I was wondering what people thought of removing access to accounts that haven't been active between 2023 to 2026.

I think a 3 years cutoff is fair? A quick look on Salsa lists around 75 accounts that would meet that criteria.

Of course, people that would be removed could always ask to be added again, if they need access to a repository ;)

Cheers,

Hi,

I agree with what's been said as reply: this is a very good idea, but please exclude DDs and DMs from removal list.

BTW, as a Salsa admin, I thought that maybe, we should do the same thing globally: at least *lock* inactive accounts with the rule:

- no activity for 3 years
- account created at least 6 months ago
- not a DD

Any other criteria?

Anyone to help me to write such a shell script? :)

Cheers,

Thomas Goirand (zigo)

Didn't follow the previous discussions but if it wasn't suggested before, I guess we could send something like a "ping" email to inactive users that fall into the above criteria a bit well in advance before they get their accounts locked so that they can respond and explain their absence and if they wish to continue contributions and want access to Salsa.

--
Regards,

Aryan Karamtoth,
Debian Maintainer

Homepage: https://spaceports.in
Matrix: @SpaciousCoder78:matrix.org
XMPP:[email protected]

GPG Fingerprint: 7A7D 9308 2BD1 9BAF A83B 7E34 FE90 07B8 ED64 0421

Attachment: OpenPGP_0xFE9007B8ED640421.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to