On Tue, Jul 21, 2015 at 2:29 PM, Bryan Davis bd808@wikimedia.org wrote:
Migrate the origin repository to the Wikimedia gerrit hosting where the MediaWiki developer community has access to fix security issues and I'll be glad to make sure that Packagist integration is setup properly from there. You are of course free to publish your extension under your own vendor prefix, but if you want to take advantage of the MediaWiki vendor prefix the MediaWiki community needs to be be able to assert some measure of control over the published package.
That could also be done via a Wikimedia organization on GitHub, if we don't want to force specific workflows on developers. Although it certainly makes life easier if all "official" extensions share the same code review and CI infrastructure.