From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from resqmta-h1p-028596.sys.comcast.net (resqmta-h1p-028596.sys.comcast.net [IPv6:2001:558:fd02:2446::4]) by sourceware.org (Postfix) with ESMTPS id D17773858D20 for ; Fri, 4 Nov 2022 13:06:12 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org D17773858D20 Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=acm.org Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=acm.org Received: from resomta-h1p-028517.sys.comcast.net ([96.102.179.206]) by resqmta-h1p-028596.sys.comcast.net with ESMTP id qwMAodu2I7xFxqwObo0zy4; Fri, 04 Nov 2022 13:06:05 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcastmailservice.net; s=20211018a; t=1667567165; bh=VO2X+DHlxiKfp1iOIEzO3rZRsK9c6H3iCFY8YU0Kl3E=; h=Received:Received:Message-ID:Date:MIME-Version:Subject:To:From: Content-Type:Xfinity-Spam-Result; b=srYXEsL51IB539FWc92B5sD2Ifi7rpT/BA4vPK+QjUePDmaIYyaYHWNMnJE/ptaHU qE2jVgXZdz7oTl37KDfA/xjuXUHSo+6gf7PZUVxZORVgt8qsLsFtqdLZGAT7EtAoDd LWfk9eWSCCIUG9ZwJQ8Eih8eXdbIFl5UCT02EtQAUIO66V3fQ0HhYmzeNZ+dmakWEN 9fpJCGarExh/DsJAhDP11ekX4AqE72cEQIeq2/h7oWzGjx/NwYdKMIK9foDxjA71Y6 JT8rjW0iS0SHAef7nn5CDh0V1/V4iFgrwT3JXyZJT1vaaSW/dnYHkUV8cHu3+HU9it WInSyrMjuMSoQ== Received: from [128.2.147.196] ([128.2.147.196]) by resomta-h1p-028517.sys.comcast.net with ESMTPSA id qwOMoVvmntdmSqwONoU3VU; Fri, 04 Nov 2022 13:06:03 +0000 X-Xfinity-VAAS: gggruggvucftvghtrhhoucdtuddrgedvgedrvddugdeghecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucevohhmtggrshhtqdftvghsihdpqfgfvfdppffquffrtefokffrnecuuegrihhlohhuthemuceftddunecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefkffggfgfuvfhfhfgjtgfgsehtjeertddtfeejnecuhfhrohhmpeevhhgrugcuffhouhhghhgvrhhthicuoegtrhgusegrtghmrdhorhhgqeenucggtffrrghtthgvrhhnpeelgfegffeiiedukeeitefgtddttdfhieeuudeludejvdelffeuleegjeevueefgeenucfkphepuddvkedrvddrudegjedrudelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhephhgvlhhopegluddvkedrvddrudegjedrudeliegnpdhinhgvthepuddvkedrvddrudegjedrudeliedpmhgrihhlfhhrohhmpegtrhgusegrtghmrdhorhhgpdhnsggprhgtphhtthhopeefpdhrtghpthhtohepjhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhdprhgtphhtthhopegrtggvsehsvgiinhgrmhdrtgiipdhrtghpthhtoheptgihghifihhnqdgrphhpshestgihghifihhnrdgtohhm X-Xfinity-VMeta: sc=-100.00;st=legit Message-ID: Date: Fri, 4 Nov 2022 09:05:49 -0400 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.4.1 Subject: Re: How does a package become orphaned? (was Re: Attn maintainer: python-paramiko) Content-Language: en-US To: Jon Turney , Libor Ukropec , "cygwin-apps@cygwin.com" References: <3fdca14d-95fa-0398-46a9-6d5291ceae96@gmail.com> <0282d084-b2b2-132f-1e82-4159a4d1de05@gmail.com> <36a5d2b5-41f7-52a4-c95f-d9f2e4f12e96@dronecode.org.uk> From: Chad Dougherty In-Reply-To: <36a5d2b5-41f7-52a4-c95f-d9f2e4f12e96@dronecode.org.uk> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,KAM_DMARC_NONE,NICE_REPLY_A,SPF_HELO_PASS,SPF_SOFTFAIL,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 2022-11-04 08:34, Jon Turney wrote: > The second is not so clear: A package is orphaned if it's maintainer > is not responsive to queries as to if they still want to be the > maintainer of the package. > > It's undefined how many times we should ping, or how long we should wait > for a response, but I think that the ~10 months that's elapsed here is > more than enough! > If the prospective adopter is also proposing an update that addresses security vulnerabilities in the old package, I suggest that that, and the severity and impact of those vulnerabilities be factored into the timeout decision. -- -Chad