Re: Remove access from inactive maintainers

2017-06-06 Thread Donald Stufft
> On Jun 6, 2017, at 2:53 PM, Jason R. Coombs wrote: > > All fine by me. > > Any reason I shouldn’t be an owner of PyPA and Setuptools shouldn’t inherit > similar permissions to the other projects? I really don’t want it to be a > special snowflake. > > I don’t have a

Re: Remove access from inactive maintainers

2017-06-06 Thread Jason R. Coombs
All fine by me. Any reason I shouldn’t be an owner of PyPA and Setuptools shouldn’t inherit similar permissions to the other projects? I really don’t want it to be a special snowflake. On 6 Jun, 2017, at 04:50, Xavier Fernandez > wrote:

Re: Remove access from inactive maintainers

2017-06-06 Thread Xavier Fernandez
Fine with me also and xafer is my username. On Tue, Jun 6, 2017 at 12:24 AM, Paul Moore wrote: > On 5 June 2017 at 23:05, Donald Stufft wrote: > > Absent any objections, I’ll take these actions in the next couple of days > > (and I’ll need PyPI usernames

Re: Remove access from inactive maintainers

2017-06-05 Thread Carl Meyer
Fine by me! Thanks Donald. Carl On 06/05/2017 03:05 PM, Donald Stufft wrote: > Hi! > > I was talking to some people today about some attack vectors, and one > thing that got surfaced in that there are a few people able to cut a > release to PyPI for pip/virtualenv/etc who have stepped back from

Re: Remove access from inactive maintainers

2017-06-05 Thread Paul Moore
On 5 June 2017 at 23:05, Donald Stufft wrote: > Absent any objections, I’ll take these actions in the next couple of days > (and I’ll need PyPI usernames for Paul and Xavier). Fine with me (my PyPI username is pf_moore). Paul

Remove access from inactive maintainers

2017-06-05 Thread Donald Stufft
Hi! I was talking to some people today about some attack vectors, and one thing that got surfaced in that there are a few people able to cut a release to PyPI for pip/virtualenv/etc who have stepped back from being involved in the project. What I would like to do is remove access from these