[FFmpeg-devel] [RFC] dormant git accounts

[compn]

On Wed, 13 Nov 2024 10:44:29 -1000
compn <ff at hawaiiantel.net> wrote:
> the server admins know who has access. the access list isnt a public
> document. some developers want it to be a public document.
> i dont particularly care if the list is public or not.
> 
> i am curious to know why this is now an important issue, though.

to answer my own question it might come from this soverign tech fund
program from last year (or a similar guideline). in that its a
good idea to document FOSS project infrastructure and behind-the-scenes
stuff.

https://www.sovereign.tech/programs/challenges#more-about-the-challenges

>3. FOSS Infrastructure Documentation
>
>The FOSS Infrastructure Documentation Challenge invites participants
>to create comprehensive documentation for the most critical and
>widely-used FOSS infrastructure projects.
>
>Documentation is an essential part of any software project, but
>especially for FOSS projects, as it can be a significant barrier to
>entry for new users and contributors if it is not well written and
>organized.
>
>The goal of this challenge is to make FOSS projects more accessible to
>new users and contributors through improved documentation and better
>knowledge management. Participants will improve the documentation for a
>FOSS infrastructure project of their choice and ensure that it is
>clear, concise, up-to-date, and accurate.

although that might apply more to other projects it also applies to
ffmpeg.

more info for securing your FOSS project:
https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-engineering-takeovers-of-open-source-projects/

-compn