On 29/06/2022 20:32, Stephen Smoogen wrote:
Yes, they can. So can a lot of other people and things in Fedora.
Only proven-packagers in limited situations or people who have been granted access by the package owner.
This isn't other distros where a package maintainer is a defacto dictator of the package they put into the OS. There is a give and take in what can happen with a package.
But it is. The package owner has full control over the package and can add or remove co-maintainers as they see fit.
But now we see that someone can add other people to co-maintainers. This is terrible.