At Thu, 10 Sep 2009 11:26:27 +0200, Stephan Kulow wrote:
Am Donnerstag 10 September 2009 schrieb Takashi Iwai:
At Thu, 10 Sep 2009 11:09:33 +0200,
Henne Vogelsang wrote:
Hi,
Pavol Rusnak wrote:
Takashi Iwai wrote:
OK, will do. But, what should we do really for security issues...?
We probably should start thinking about creating a Community Security Team ...
We did and have already volunteers. See the thread,
[opensuse-factory] openSUSE 11.2 and maintenance http://lists.opensuse.org/opensuse-factory/2009-08/msg00372.html
So, actually there is no problem to keep the maintainer and bugowner of OBS devel packages empty in practice?
Of course there is a problem - if there is a bug with it, it needs evaluation. For most of your "can be dropped from Factory", this wouldn't change anything as people can report bugs also when the package is from multimedia:libs :)
That's true - but then at least the bug doesn't belong only to the package maintainer but all project maintainers. And, OBS packages are basically non-official unless they are on FACTORY. So, if you have any problems, it's free to drop immediately at worst. That's why dropping from FACTORY can be a "safer" option for orphaned packages.
For those old ones that "can be dropped", I would prefer to see them really dropped if there is no user of it that is able to maintain it. But for things that are really adding value to the distribution I don't want to see them dropped _NOW_ because noone stepped up for 3 days.
Don't worry, maybe the target to drop will be 11.3, judging from the timeline. As I mentioned, the post was a sort of provocation :) But, the questions regarding the package maintainer is still quite open. One typical example is M17N repo. Since Mike left, we have no people working on this area. So I eventually volunteered to fix / improve the issues. But, if really no one takes care any more? The situation of maintenance isn't so trivial right now in many areas; even though many packages are even on SLES. This is my honest and serious concern... thanks, Takashi -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org