On 1/12/26 6:11 PM, Louis-Philippe Véronneau wrote:
Hello!
I'm frequently replying to people asking to join the Python Team and as
per our policy, we are pretty liberal in granting access to our
repositories :)
That's great, but of course, the more people have access to the
repositories, the more potential for abuse.
There are currently 539 members of the team on Salsa and some of these
members haven't been active in the team for a while. I was wondering
what people thought of removing access to accounts that haven't been
active between 2023 to 2026.
I think a 3 years cutoff is fair? A quick look on Salsa lists around 75
accounts that would meet that criteria.
Of course, people that would be removed could always ask to be added
again, if they need access to a repository ;)
Cheers,
Hi,
I agree with what's been said as reply: this is a very good idea, but
please exclude DDs and DMs from removal list.
BTW, as a Salsa admin, I thought that maybe, we should do the same thing
globally: at least *lock* inactive accounts with the rule:
- no activity for 3 years
- account created at least 6 months ago
- not a DD
Any other criteria?
Anyone to help me to write such a shell script? :)
Cheers,
Thomas Goirand (zigo)
