[Nix-dev] Limiting access to only maintained packages and ensuring core packages are maintained

[Peter Hoeg]

>> Many meta.maintainers do not have commit access, that's the main
>> bottleneck that causes hours/days/weeks/months delay.
>
>This should not be so. A "maintainer" that does not have commit
>access cannot maintain and is thus not actually a maintainer.

I'm currently listed as maintainer (15 packages) or co-maintainer (1 package) and I do not have commit access. Generally, the guys with commit access are very quick to respond and turn things around.

Even if I had direct commit access, in the vast majority of cases, a change would still involve a public PR to solicit feedback (and the feedback is normally very constructive).

Exceptions are obviously security sensitive fixes.

>Disclaimer: I'm coming from from the world of Debian which has a
>drastically different maintenance model. I don't really understand
>how NixOS's model works and am not confident that anyone does.

A public statement on the maintenance model (security issues) might not
be a bad idea.

/Peter