On Thu, 21 Aug 2025 at 17:35:37 +0200, Andrea Pappacoda wrote:
On Thu Aug 21, 2025 at 3:23 PM CEST, Simon McVittie wrote:
On Thu, 21 Aug 2025 at 11:22:57 +0200, Simon Josefsson wrote:
Uploaders: Debian <debian-devel@lists.debian.org>
I think *this* (Uploaders, not Maintainer!) would be a good way to
spell "anyone can do a 'Team upload' of this package" without
generating a lot of extra email to debian-devel.
Wouldn't emails to packagen...@packages.debian.org still go to devel?
I don't think Uploaders automatically get these emails just by being
Uploaders, only if they explicitly subscribe? (But I could be wrong!)
Tracker emails are for teams, not single packages, right?
I thought they were both, but it looks like I was wrong.
If so, would one have to create a team for each package?
That's clearly not a desirable thing to require.
Why not using @packages.d.o?
I thought it might be deprecated in favour of something per-package in
the tracker.d.o namespace, but it seems like I was wrong and
packagen...@packages.debian.org is the (only) recommended thing for this
purpose.
For packages not part of any specific team, maybe we can start
recommending setting the maintainer field to packagename@packages.d.o,
with regular human uploaders in the Uploaders field, to signal that
there's no strong ownership for the package.
So that would look like this?
Package: example
Maintainer: Example maintainers <exam...@packages.debian.org>
Uploaders: Minnie Mouse <...>, Donald Duck <...>
It isn't obvious (to me at least) that Minnie and Donald intended this
to mean "no strong ownership"; they might equally have meant "we're
using exam...@packages.debian.org as a convenient contact address that
goes to both of us, but we have very specific expectations for this
package and do not want changes that we didn't approve".
But if we see
Package: example
Maintainer: Example maintainers <exam...@packages.debian.org>
Uploaders: Minnie Mouse <...>, Donald Duck <...>, Debian <debian-devel@...>
then I think that makes it a lot more obvious that the two maintainers
are saying, at least, "any Debian developer is welcome to join our team"
(and perhaps also welcoming 0-day uploads from anyone).
I think I've seen that somewhere already.
adduser, isc-dhcp and some older versions of util-linux are using their
packages.debian.org addresses as a contact point. It isn't obvious to me
whether their maintainers intended these packages to be collectively
maintained by everyone.
smcv