Re: Thoughts on removing access to the Python teams repositories to inactive members ?

On 1/12/26 6:11 PM, Louis-Philippe Véronneau wrote:
> Hello!
> 
> I'm frequently replying to people asking to join the Python Team and as 
> per our policy, we are pretty liberal in granting access to our 
> repositories :)
> 
> That's great, but of course, the more people have access to the 
> repositories, the more potential for abuse.
> 
> There are currently 539 members of the team on Salsa and some of these 
> members haven't been active in the team for a while. I was wondering 
> what people thought of removing access to accounts that haven't been 
> active between 2023 to 2026.
> 
> I think a 3 years cutoff is fair? A quick look on Salsa lists around 75 
> accounts that would meet that criteria.
> 
> Of course, people that would be removed could always ask to be added 
> again, if they need access to a repository ;)
> 
> Cheers,

Hi,

I agree with what's been said as reply: this is a very good idea, but 
please exclude DDs and DMs from removal list.

BTW, as a Salsa admin, I thought that maybe, we should do the same thing 
globally: at least *lock* inactive accounts with the rule:

- no activity for 3 years
- account created at least 6 months ago
- not a DD

Any other criteria?

Anyone to help me to write such a shell script? :)

Cheers,

Thomas Goirand (zigo)