Hi, I think this idea is good security hygiene. A 3+ years list would help in a way because it can bring up corner cases or problems wirh the filtering method, such as:
On Tue, 13 Jan 2026, 8:06 am Louis-Philippe Véronneau, <[email protected]> wrote: > > 1. It's inactivity _in the Debian Python team_ only. That doesn't mean > these people aren't active members of the Debian community :) > > 2. That info is already public: > > https://salsa.debian.org/groups/python-team/packages/-/group_members?sort=oldest_last_activity The first item doesn't match the second there. If the intent is to remove people from the Python team due to not doing anything with the Python team for (say) 3 years you'll need to look for that info elsewhere. That list is sorted by any salsa activity. For example it says my last activity was 6 Jan 2026, which it was for the Debian project. My last Python activity was February 2025. Now on that list for 3+ years means they've done nothing on Salsa anywhere so definitely they've not done anything in the Python project, so its a good start but won't meet the full goal. - Craig
