Non-responsive maintainer check for Igor Raits (ignatenkobrain)

[Ben Beasley]

I have opened a bug on python-parameterized, 
https://bugzilla.redhat.com/show_bug.cgi?id=2117916, initiating a 
non-responsive maintainer check for Igor Raits, FAS ignatenkobrain. Does 
anybody know how to contact Igor, or whether they are still actively 
maintaining Fedora packages? I have sent an email to the email address 
listed at https://accounts.fedoraproject.org/user/ignatenkobrain/.

It looks like Igor’s last login in FAS was 2021-03-31, and their last 
package update in Bodhi was 2022-06-18. On 
https://src.fedoraproject.org/user/ignatenkobrain, the last activity was 
in mid-June. This would not be too concerning by itself, except that 
Igor is primary or sole maintainer on a large number of packages, many 
of which need attention.

Igor, if this message reaches you, I value and appreciate your 
significant contributions to Fedora. It seems like your time for package 
maintenance is oversubscribed. Please consider identifying packages that 
you don’t have time to take care of—especially those without other 
active maintainers—and either orphaning them or soliciting new 
co-maintainers.

As recommended by 
https://docs.fedoraproject.org/en-US/fesco/Policy_for_nonresponsive_packa...,

I am including links to other bug reports on apparently-neglected 
packages. I apologize in advance for any errors or omissions in this 
list, which was tabulated by hand.

– Ben Beasley

----------------------------------------

angelscript: sole maintainer, new version available for almost three 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1754292

ansible-collection-ansible-netcommon: sole maintainer (plus @infra-sig): 
new major version available 
(https://bugzilla.redhat.com/show_bug.cgi?id=2089526), PRs to update 
minor releases in old major version ignored for three months 
(https://src.fedoraproject.org/rpms/ansible-collection-ansible-netcommon/p..., 
https://src.fedoraproject.org/rpms/ansible-collection-ansible-netcommon/p...), 
EPEL9 branch request ignored 
(https://bugzilla.redhat.com/show_bug.cgi?id=2033029).

cln: primary maintainer, new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1773485, PR ignore for four 
months: https://src.fedoraproject.org/rpms/cln/pull-request/1

colm: primary maintainer, new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1825150

cppcodec: sole maintainer, FTBFS since F36: 
https://bugzilla.redhat.com/show_bug.cgi?id=2045280

eegdev: sole maintainer, FTBFS since F36: 
https://bugzilla.redhat.com/show_bug.cgi?id=2045334, PR ignored for two 
years: https://src.fedoraproject.org/rpms/eegdev/pull-request/1#

eegview: sole maintainer, PR ignored for two years: 
https://src.fedoraproject.org/rpms/eegview/pull-request/1

git-archive-all: sole maintainer, new version available for over two 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1771112

git-fame: primary maintainer, new version available for two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1853884

jwn: sole maintainer, new version available for nine months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2021057, PR’s ignored for 
two years: https://src.fedoraproject.org/rpms/jwm/pull-request/2, 
https://src.fedoraproject.org/rpms/jwm/pull-request/1

kyua: primary maintainer, PR ignored for a year with multiple status 
checks: https://src.fedoraproject.org/rpms/kyua/pull-request/1

libgit2: primary maintainer; update available for six months, no 
response to NEEDINFOs: https://bugzilla.redhat.com/show_bug.cgi?id=2054093

libnitrokey: sole maintainer; FTBFS since F36: 
https://bugzilla.redhat.com/show_bug.cgi?id=2045819; update available 
for two years: https://bugzilla.redhat.com/show_bug.cgi?id=1870893

libxml2: primary maintainer; multilib conflict bug open without response 
for four months: https://bugzilla.redhat.com/show_bug.cgi?id=2071836

mcpanel: sole maintainer; new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1795359

nitrokey-app: sole maintainer; new version available for two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1856549

parzip: sole maintainer; new version available for three years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1718070

protobuf-c: primary maintainer; new version available for a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1961967

python-aiofiles: sole maintainer; new version available for nine months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2027053

python-aiohttp-socks: primary maintainer; new version available for over 
a year: https://bugzilla.redhat.com/show_bug.cgi?id=2025292; no response 
to NEEDINFO and PR 
(https://src.fedoraproject.org/rpms/python-aiohttp-socks/pull-request/4) 
for 20+ days

python-argopt: sole maintainer; new version available for over three 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1697394

python-arpy: primary maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1915744

python-canonicaljson: sole maintainer; new version available for nine 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2016434

python-cerberus: primary maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1948312

python-django-cors-headers: sole maintainer; new version available for 
three years: https://bugzilla.redhat.com/show_bug.cgi?id=1697417

python-django-rq: sole maintainer (plus @python-sig); new version 
available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1944934

python-django-taggit: sole maintainer (plus @python-sig); new version 
available for nine months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2023817

python-django-timezone-field: sole maintainer (plus @python-sig); new 
version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1980091

python-django3: sole maintainer; high-severity CVE bug open for over a 
month without comment: https://bugzilla.redhat.com/show_bug.cgi?id=2105212

python-drf-yasg: sole maintainer;  five CVE bugs open for 2-5 months 
without without comment: 
https://bugzilla.redhat.com/show_bug.cgi?id=2090579 
https://bugzilla.redhat.com/show_bug.cgi?id=2077117 
https://bugzilla.redhat.com/show_bug.cgi?id=2077106 
https://bugzilla.redhat.com/show_bug.cgi?id=2061827 
https://bugzilla.redhat.com/show_bug.cgi?id=2092722

python-frozendict: sole maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1956108; EPEL9 request 
ignored for eight months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2037141; PRs ignored for 1-6 
months: 
https://src.fedoraproject.org/rpms/python-frozendict/pull-request/1 
https://src.fedoraproject.org/rpms/python-frozendict/pull-request/2

python-hamcrest: sole maintainer; new version available for over two 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1788673; EPEL9 branch 
request ignored for six months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2054176

python-hpilo: sole maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1885695

python-httptools: sole maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1953151

python-ifaddr: sole maintainer; new version available for over two 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1844746, one update 
done by provenpackager

python-ldap3: primary maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1920127

python-mako: primary maintainer; new version available for a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1996163

python-ns1-python: sole maintainer; new version available for five 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2070219

python-parse: primary maintainer; EPEL8 request and co-maintainer offer 
ignored for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1885568; PR ignored for two 
years: https://src.fedoraproject.org/rpms/python-parse/pull-request/3

python-parse_type: sole maintainer; new version available for seven 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2070219; EPEL8 
request and co-maintainer offer ignored for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1885569; PR ignored for two 
years: https://src.fedoraproject.org/rpms/python-parse_type/pull-request/4

python-parsel: sole maintainer; new version available for three years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1742642

python-phabricator: sole maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1897562

python-prov: sole maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1893550

python-ptyprocess: primary maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1911334

python-py-gfm: sole maintainer; Python 3.11 FTBFS bug ignored for four 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2074531

python-pynacl: primary maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1911334

python-pytaglib: sole maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1815705

python-pywt: primary maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1911334

python-requests_ntlm: primary maintainer; FTBFS bug ignored since F36: 
https://bugzilla.redhat.com/show_bug.cgi?id=2046908; EPEL8 request 
ignored for over a year: https://bugzilla.redhat.com/show_bug.cgi?id=1934226

python-rq: sole maintainer (with @python-sig); new version available for 
over a year: https://bugzilla.redhat.com/show_bug.cgi?id=1851741

python-signedjson: sole maintainer; new version available for five 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2070052

python-sqlacodegen: sole maintainer; new version available for over two 
years: https://bugzilla.redhat.com/show_bug.cgi?id=1697447

python-tmuxp: sole maintainer; PRs ignored for 1-5 months: 
https://src.fedoraproject.org/rpms/python-tmuxp/pull-request/1 
https://src.fedoraproject.org/rpms/python-tmuxp/pull-request/3

python-whatever: sole maintainer; Python 3.11 FTBFS bug ignored for 
eight months: https://bugzilla.redhat.com/show_bug.cgi?id=2033213

python-winrm: primary maintainer; new version available for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=1959212

rtfilter: sole maintainer; new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1795446; PR ignored for two 
years: https://src.fedoraproject.org/rpms/rtfilter/pull-request/1

rust-abomonation: sole maintainer (with @rust-sig); CVE bug ignored for 
eight months: https://bugzilla.redhat.com/show_bug.cgi?id=2039788

rust-brotli-sys: primary maintainer; CVE bug ignored for eight months: 
https://bugzilla.redhat.com/show_bug.cgi?id=2034890

rust-nix: sole maintainer (with @rust-sig); CVE bug ignored for seven 
months: https://bugzilla.redhat.com/show_bug.cgi?id=2039785

(I have omitted bug reports for Rust packages that are merely 
out-of-date since these are often updated by SIG members rather than 
individual maintainers.)

scram: primary maintainer; FTBFS bug ignored since F36: 
https://bugzilla.redhat.com/show_bug.cgi?id=2047001

spandsp: primary maintainer; new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1758264

systemd-bootchart: primary maintainer; new version available for over a 
year: https://bugzilla.redhat.com/show_bug.cgi?id=1908543

tipl: sole maintainer; new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1771163

xdiffileio: sole maintainer; new version available for over two years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1795464; PR ignored for two 
years: https://src.fedoraproject.org/rpms/xdffileio/pull-request/1

xmlrpc-c: sole maintainer; new version available for over three years: 
https://bugzilla.redhat.com/show_bug.cgi?id=1694044; CVE bugs ignored 
for 5-6 months: https://bugzilla.redhat.com/show_bug.cgi?id=2057433 
https://bugzilla.redhat.com/show_bug.cgi?id=2057432 
https://bugzilla.redhat.com/show_bug.cgi?id=2057431 
https://bugzilla.redhat.com/show_bug.cgi?id=2057430 
https://bugzilla.redhat.com/show_bug.cgi?id=2057429; FTBFS bug ignored 
since F36: https://bugzilla.redhat.com/show_bug.cgi?id=2047128; broken 
package bug reports ignored for over a year: 
https://bugzilla.redhat.com/show_bug.cgi?id=2010890 
https://bugzilla.redhat.com/show_bug.cgi?id=2009098

[Fabio Valentini]

On Fri, Aug 12, 2022 at 6:12 PM Ben Beasley <code(a)musicinmybrain.net&gt; wrote:
>  
(snip)

> rust-abomonation: sole maintainer (with @rust-sig); CVE bug ignored for
> eight months: https://bugzilla.redhat.com/show_bug.cgi?id=2039788
>  
> rust-brotli-sys: primary maintainer; CVE bug ignored for
eight months:
> https://bugzilla.redhat.com/show_bug.cgi?id=2034890
>  
> rust-nix: sole maintainer (with @rust-sig); CVE bug
ignored for seven
> months: https://bugzilla.redhat.com/show_bug.cgi?id=2039785
>  
> (I have omitted bug reports for Rust packages that are
merely
> out-of-date since these are often updated by SIG members rather than
> individual maintainers.)

I actually had those CVE bugs on my radar, but didn't have the time to
do a full investigation.
I've closed the first two, since they actually can no longer affect
any Fedora packages (no application depends on the problematic crates,
or they don't enable the affected features).

The third one could only have affected some really old builds on
Fedora 35, since rust-nix had been updated for that CVE problem some
time before the Fedora 36 mass rebuild. And the f35 packages that I
spot checked had all been rebuilt for some reason or updated at some
point, so none of them were affected, either. And even if some package
that I happened to miss had its last build at the Fedora 35 mass
rebuild, it is unlikely that it actually used the affected API.

Fabio