Hi, Let's identify the real issues and tackle them asap. From http://en.opensuse.org/Contrib#Open_issues_and_packages: # Security - perhaps Novell security guys can give us basic guidelines. This has two parts 1) The hard part - monitoring upstream changelogs, bugtraq and the like to identify security bugs. Should be probably maintainers' responsibility. 2) Fixing security bugs: As not every package maintainer has to be a programmer, we should allow version updates where it makes sense. === # Upstream vs. patched. (easy example: KVM from Alexander Graf, or from Sourceforge.net - difference is big) That should really be up to the package maintainer. If he is willing to maintain the patches, there should be no problem. -> not an issue === # Bugzilla integration (we need another discussion on that topic) This is not specific to contrib, better bugzilla integration would be beneficial for any build service project. For now, let's stick to <person role="bugowner" userid="xxx"/>. -> not an issue === # Who will be allowed to do what, see #Permissions It seems that everybody agreed on the reviewers/maintainers model (at least, I heard no objections) -> not an issue === # What about updates for single packages in that repository? If the repository is frozen after the release, we need an additional repository just for packages containing bugfixes and security fixes. Who will maintain this additional repository? Who will review the packages submitted there? Should there be patches like for the official openSUSE packages available? Related: [opensuse-factory] Contrib: Progress Patches are not possible right now, having two repositories is not a good idea. Let's just update packages in the repository. === # Forks ( fork is similar to duplicate packages; Think of Cinepaint and GIMP. Should we allow forks? ) As long as the package follows the rules (esp. the one about no conflicts with Factory packages), I see no problem here. -> not an issue === I'll remove the non-issues from the wiki page and try to write some rules about post-release updates, which is what the remaining two issues are about (but we should be able to start even without these rules in place). Michal -- To unsubscribe, e-mail: opensuse-contrib+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-contrib+help@opensuse.org