OSS-16Recommended
Take back rights from people who have gone quiet
Remove release, admin and registry rights from anyone with no commit, review or release in the project for 12 months. Thank them by name as emeritus maintainers in MAINTAINERS.md.
How to do it
An unused account still holds the keys, and its owner no longer watches it. A stolen password on that account can publish a release that nobody notices. Ask the person first, since some prefer to stay. Give the rights back on request, after the same check as Vet a person before giving them release or admin rights. Keep enough active people for Keep at least two people who can publish.
How to check
A monthly job lists everyone with release, admin or registry rights, with the date of their last commit, review or release. Nobody on the list has a date older than 12 months.
Related rules
- OSS-15 Vet a person before giving them release or admin rights in Open source maintenance
- OSS-12 Keep at least two people who can publish in Open source maintenance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/open-source/maintainers-and-governance/retire-inactive-maintainers">Agent Wranglers open source maintenance playbook</a>. In code you write, add a comment next to it with the same link.