> Which is OK, as long as all PMC members have access; how an individual PMC does this is up to them. Note it could be stored in a PMC-only repo, but that’s not the only way of doing it. But if the credentials are not stored anywhere, the question is: how does a new PMC member get access?
Based on my experience of maintaining crates.io releases, we allow any PMC member to self-request to be added as a crate owner. I once proposed to the INFRA about setting up a PMC members team for each PMC, but it was rejected [1]. This is more of a technical issue. [1] https://issues.apache.org/jira/browse/INFRA-25487 Best, tison.
