#governance

Wiki 2

  • fsnotify Maintainer Dispute and Supply-Chain Concerns A maintainer-access dispute in fsnotify (321k dependents) read from the outside as a possible takeover; what actually happened, and why governance ambiguity is itself a supply-chain risk
  • Maintainer Governance Ambiguity When a project's maintainer roles and release authority are unclear, downstream users can't distinguish takeover from drama — and have to assume the worse possibility