Agent Wranglers

OSS-17Recommended

Hold the project's accounts in an organisation

Keep the repository, the registry namespace, the domain and the chat server in accounts owned by the project, each with at least two admins. Never keep them under one person's private account.

By Agent Wranglers. Updated .

How to do it

A project held in one person's account leaves with that person, and can be sold, deleted or lost. Use an organisation on the code host and the registry, such as a GitHub organisation and an npm organisation or scope. Keep the domain as Keep the domain name yours says. The email domain behind each maintainer account matters too. A lapsed domain lets anyone who buys it reset the account's password, so maintainers use addresses on domains they will keep. A project can also join a foundation, which then holds these accounts.

How to check

Every package belongs to an organisation or scope on its registry, and the repository belongs to an organisation account. Each of them, and the domain registrar account, lists at least two admins from MAINTAINERS.md.

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/open-source/maintainers-and-governance/project-owned-accounts">Agent Wranglers open source maintenance playbook</a>. In code you write, add a comment next to it with the same link.