Mailman 3 September 2022 - PyPA-Committers

VOTE - Accept pip-audit and gh-action-pip-audit into the PyPA
by Dustin Ingram 22 Sep '22

22 Sep '22

I'd like to propose the transfer of the following projects to the PyPA org: - https://github.com/trailofbits/pip-audit/ - https://github.com/trailofbits/gh-action-pip-audit/ More background for these projects and the long-term plan for them is here: https://discuss.python.org/t/towards-a-pip-audit-subcommand-for-vulnerabili…. We are still hoping to more closely integrate pip-audit with pip, but for now, the PyPA is a much more appropriate home for these projects, and will join https://github.com/pypa/advisory-database, which they use. This would add two existing maintainers of these projects (William Woodruff and Alex Cameron) as PyPA committers, in addition to myself. Per PEP 609: > The proposal will be put to a vote on the PyPA-Committers mailing list, over a 7-day period. Each PyPA committer can vote once, and can choose one of +1 and -1. If at least two thirds of recorded votes are +1, then the vote succeeds.

19 19

VOTE: pipenv Tidelift revenue assignment
by Oz Tiram 06 Sep '22

06 Sep '22

Dear Pypa Committers, I am writing to you to ask for your vote on the following resolution: Please approve remitting pipenv Tidelift revenue net of Python Software Foundation's administrative fee to the pipenv page maintainer, Frost Ming from March 2021 to December 2021 and 50/50 to Oz Tiram and Matt Davis from January 2022 on until such time as the maintainer(s) changes. The PyPA will share the voting results of this resolution with Python Software Foundation. In case you have not noticed, after a long hiatus where pipenv wasn't maintained at all or solely maintained, the project is now live and active. We (GitHub handles @oz123, @matteius) have been fixing bugs, removing old code, answering questions and released multiple versions of pipenv in the last year. Although there are other tools that help Python users to manage their virtualenvs, pipenv remains used by many members of the community. We know this since there are many new contributors and bug reports in the period since we adopted this project from @frostming. On behalf of Matt Davis and me, Best regards Oz Tiram

10 13

VOTE: virtualenv Tidelift revenue assignment
by Bernat Gabor 02 Sep '22

02 Sep '22

I'm calling a vote for: The PyPA approves remitting virtualenv Tidelift revenue net of Python Software Foundation's administrative fee to the virtualenv project maintainer, Bernat Gabor, from March 2021 on until such time as the maintainer(s) changes. The PyPA will share the voting results of this resolution with the Python Software Foundation. Thanks, Bernat

10 10