Continuing the thread from July 2022
<https://lists.gnu.org/archive/html/bug-gnulib/2022-07/msg00035.html>.
Paul Eggert wrote:
> Since Gnulib is partially downstream from glibc I suggest also retaining
> people who have committed to glibc in the last four years. We want to
> encourage collaboration with Glibc, which is an essential low-level part
> of the GNU toolchain (and if they can commit there they can do even more
> damage anyway....). On those grounds I suggest keeping Dmitry V. Levin
> and Siddhesh Poyarekar, and not bothering to notify them.
OK. I did so.
So, the committers that I removed today are:
Assaf Gordon
Andreas Gruenbacher
Bruce Korb
Ludovic Courtès
Derek Robert Price
Eli Zaretskii
Gary V. Vaughan
Gerd Moellmann
Dmitry Selyutin
Sergey Poznyakoff
James Youngman
Joel E. Denny
Kamil Dudka
Stefan Monnier
Richard M. Stallman
Ralf Wildenhues
Stefano Lattarini
Daiki Ueno
Jeff Bailey
The mail I sent (loosely based on what Simon suggested) is as follows:
===============================================================================
Subject: your write access to GNU gnulib
Hi,
I'm writing to you as an admin of the GNU gnulib project on savannah.
You have write access to the GNU gnulib repository, but haven't made
use of it in more than one year. We miss your contributions!
To improve robustness against supply-chain attacks, and thus increase
our trustworthiness, we believe write permissions should be restricted
to those who use it regulary. We are therefore withdrawing your write
permissions to the GNU gnulib repository.
If you have a checkout of GNU gnulib, in order to successfully do a
"git pull" again, you will have to change the .git/config file,
replacing
url = ssh://<username>@git.savannah.gnu.org/srv/git/gnulib
or
url = <username>@git.savannah.gnu.org:/srv/git/gnulib.git
with
url = git://git.savannah.gnu.org/gnulib.git
or
url = https://git.savannah.gnu.org/git/gnulib.git
Nonetheless, we would continue to appreciate contributions of yours!
Whenever you contribute again, it will be a easy and smooth process
for us to re-establish your write permissions.
Best regards,
Bruno
(for the GNU gnulib savannah admins)
