Re: Thoughts on removing access to the Python teams repositories to inactive members ?

On 2026-01-16 06:10, Thomas Goirand wrote:
> On 1/12/26 6:11 PM, Louis-Philippe Véronneau wrote:
>> Hello!
>>
>> I'm frequently replying to people asking to join the Python Team and 
>> as per our policy, we are pretty liberal in granting access to our 
>> repositories :)
>>
>> That's great, but of course, the more people have access to the 
>> repositories, the more potential for abuse.
>>
>> There are currently 539 members of the team on Salsa and some of these 
>> members haven't been active in the team for a while. I was wondering 
>> what people thought of removing access to accounts that haven't been 
>> active between 2023 to 2026.
>>
>> I think a 3 years cutoff is fair? A quick look on Salsa lists around 
>> 75 accounts that would meet that criteria.
>>
>> Of course, people that would be removed could always ask to be added 
>> again, if they need access to a repository ;)
>>
>> Cheers,
> 
> Hi,
> 
> I agree with what's been said as reply: this is a very good idea, but 
> please exclude DDs and DMs from removal list.
> 
> BTW, as a Salsa admin, I thought that maybe, we should do the same thing 
> globally: at least *lock* inactive accounts with the rule:
> 
> - no activity for 3 years
> - account created at least 6 months ago
> - not a DD
> 
> Any other criteria?
> 
> Anyone to help me to write such a shell script? :)
That would be great! I don't have any spoons for that, but it would 
indeed be a better idea than doing this at the team level.