On Tue, Jul 21, 2015 at 2:29 PM, Bryan Davis <bd808(a)wikimedia.org> wrote:
Migrate the origin repository to the Wikimedia gerrit
hosting where
the MediaWiki developer community has access to fix security issues
and I'll be glad to make sure that Packagist integration is setup
properly from there. You are of course free to publish your extension
under your own vendor prefix, but if you want to take advantage of the
MediaWiki vendor prefix the MediaWiki community needs to be be able to
assert some measure of control over the published package.
That could also be done via a Wikimedia organization on GitHub, if we don't
want to force specific workflows on developers. Although it certainly makes
life easier if all "official" extensions share the same code review and CI
infrastructure.