[maemo-developers] Maemo extras repository package uploader/maintainer verification?

[From: Simon Pickering]

> > What checks there are in place to verify that the package 
> > uploader and
> > the package maintainer field (shown to people who install 
> > the packages)
> > match?
> 
> I think Niels has a check for that in the QA software he has 
> written, in fact, I am certain of it. :) This check does not 
> currently default to stopping the incorrect uploader / 
> maintainer from uploading the package. It is possible to 
> change this behavior and I think in the future this check 
> will default to stopping package uploads that do not have the 
> correct maintainer information.

I'd suggest that the autobuilder checks to see that the uploader's email
address is included in one of the *Maintainer fields; but there is the
slight problem of what happens when someone is uploading someone else's
package (e.g. as a favour when they are away from a build machine)?

I'd also be tempted to move the existing Maintainer field to
XSBC-Maintainer and substitute the uploader's name/email automatically
if they are not already in the Maintainer field, though again this
suffers from the "uploading package for a friend" problem.

Cheers,


Simon