Re: removing permissions for long unused accounts, take 2

[Bruno Haible]

Continuing the thread from July 2022
<https://lists.gnu.org/archive/html/bug-gnulib/2022-07/msg00035.html>.

Paul Eggert wrote:
> Since Gnulib is partially downstream from glibc I suggest also retaining 
> people who have committed to glibc in the last four years. We want to 
> encourage collaboration with Glibc, which is an essential low-level part 
> of the GNU toolchain (and if they can commit there they can do even more 
> damage anyway....). On those grounds I suggest keeping Dmitry V. Levin 
> and Siddhesh Poyarekar, and not bothering to notify them.

OK. I did so.

So, the committers that I removed today are:

  Assaf Gordon
  Andreas Gruenbacher
  Bruce Korb
  Ludovic Courtès
  Derek Robert Price
  Eli Zaretskii
  Gary V. Vaughan
  Gerd Moellmann
  Dmitry Selyutin
  Sergey Poznyakoff
  James Youngman
  Joel E. Denny
  Kamil Dudka
  Stefan Monnier
  Richard M. Stallman
  Ralf Wildenhues
  Stefano Lattarini
  Daiki Ueno
  Jeff Bailey

The mail I sent (loosely based on what Simon suggested) is as follows:

===============================================================================
Subject: your write access to GNU gnulib

Hi,

I'm writing to you as an admin of the GNU gnulib project on savannah.
You have write access to the GNU gnulib repository, but haven't made
use of it in more than one year. We miss your contributions!

To improve robustness against supply-chain attacks, and thus increase
our trustworthiness, we believe write permissions should be restricted
to those who use it regulary.  We are therefore withdrawing your write
permissions to the GNU gnulib repository.

If you have a checkout of GNU gnulib, in order to successfully do a
"git pull" again, you will have to change the .git/config file,
replacing
        url = ssh://<username>@git.savannah.gnu.org/srv/git/gnulib
or
        url = <username>@git.savannah.gnu.org:/srv/git/gnulib.git
with
        url = git://git.savannah.gnu.org/gnulib.git
or
        url = https://git.savannah.gnu.org/git/gnulib.git

Nonetheless, we would continue to appreciate contributions of yours!
Whenever you contribute again, it will be a easy and smooth process
for us to re-establish your write permissions.

Best regards,

         Bruno
         (for the GNU gnulib savannah admins)