Giter Club home page Giter Club logo

Comments (4)

wooorm avatar wooorm commented on May 26, 2024 2

the releasers to more specific organizations

Releasers are per organization already!

or even repositories/packages?

That would help you, with eslint-mdx. True. A couple of other people also request similar things.
In my experience, typically, those people aren’t very active for very long. You’re an exception here!

With 500+ repos, it is very hard to get security right. I strongly believe that the best way to manage security, is as few people and tools as possible that have access.

Over the years, many tools we have used have had security problems: Coveralls for example. GitHub a couple of times. These services and many more leaked tokens.
This didn’t affect really us, because we don’t give tools publish access.

Having different people with different access per repo makes it hard to understand who does what: who has credentials? Who is responsible?


I also hope that working on orgs instead of repos brings a different level of commitment: that maintainers care for the whole group of things rather than one project.
I’d love to have more people on different organizations, solving issues, fixing PRs, cutting releases!

from collective.

wooorm avatar wooorm commented on May 26, 2024 1

Added. Within the next 24 hours, tooling will add you with the correct permissions to each of the above orgs.

On releasing, see: https://github.com/unifiedjs/collective/blob/main/members.md#request-to-become-a-releaser.

Note that releasers have a lot of rights. On GitHub. On npm. (See: https://github.com/unifiedjs/collective/blob/main/permissions.md). This group should remain small. I am not sure it is a good idea.

from collective.

JounQin avatar JounQin commented on May 26, 2024 1

OK then, let's just keep it as-is.


Also, are we considering splitting the releasers to more specific organizations or even repositories/packages?

from collective.

JounQin avatar JounQin commented on May 26, 2024

I just realized that I want to be a releaser of eslint-mdx/vscode-mdx, etc. Should I post a new nomination for myself afterwards or it can just be included here?

cc @wooorm

from collective.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.