-
Notifications
You must be signed in to change notification settings - Fork 23
Description
When the transfer of iconv-lite was made, the question arose again whether captains should have admin access to their own repositories.
This is something that really should be given to captains, since a captain should be able to manage their repository’s settings without depending on a TC member. configuring branch rules, tag rules, and accessing the security reports for the repository they maintain.
If there is concern that a captain could delete or change the visibility of the repository, there are configurations that prevent those actions for admins and give them only to owners (I believe this is already applied in the three organizations):

Furthermore, the idea of captains is to delegate authority over the package to them. If there is worry about the potential damage a captain could do, they already have access to the package on npm. Allowing them to modify branch rules and view security reports in the repository shouldn’t be a big issue, Also, becoming a captain takes time, and the existing captains of the package need to believe that it’s time for the person to become a captain
I’m opening this so it isn’t forgotten in the meeting and to help captains depend less on TC members, until today, this is the first time a package has captains outside of the TC