Re: unmaintained packages hidden by team maintenance (was Re: Bits from the DPL)

Simon Josefsson <[email protected]> Thu, 05 Feb 2026 22:58:22 +0100
Newsgroups gmane.linux.debian.devel.project
Message-ID <[email protected]>
Fabian Grünbichler <[email protected]> writes:

> On Thu, Feb 5, 2026, at 7:21 PM, Colin Watson wrote:
>> On Thu, Feb 05, 2026 at 06:22:13PM +0100, Simon Josefsson wrote:
>>>Do you (or anyone else) update the Uploaders field?  In what way?
>>
>> I feel like I probably should in some way, but at the moment I basically 
>> don't unless I particularly feel inclined to take over primary 
>> maintenance of that particular package.
>
> The effective practice in the Rust team also matches this.
>
> Uploaders usually contains whoever first packaged a particular crate,
> and potentially people who expressed a particular interest in it after,
> if they bothered (enough) to add themselves.
>
> To pick a random example - rust-cargo's last non-team upload by someobdy
> in Uploaders was in 2021, the 27(!) uploads after were "Team uploads"
> (with all but one marked as such). I guess I should add myself to
> Uploaders with the next one ;) for rust-libc it's very similar (26 uploads
> since the last non-team-upload in 2021). Many crate packages might only
> have a single upload by the Uploader (the first one to NEW).

So if this is the de-facto situation for Python, Go and Rust team, I
wonder if we shouldn't make the 'Uploaders:' field optional to allow
team Maintainer: fields without any particular Uploaders: fields.

It seems to me that the Uploaders: fields doesn't really reflect any
relevant information, or at least none that is kept up to date.

Is there any reason we couldn't make this change to policy?

/Simon
signature.asc (application/pgp-signature, 1.2 KB)
-----BEGIN PGP SIGNATURE-----
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=FSub
-----END PGP SIGNATURE-----