On Mon, Sep 21, 2015 at 8:41 AM, Chris Steipp csteipp@wikimedia.org wrote:
On Sep 19, 2015 11:15 AM, "bawolff" bawolff+wn@gmail.com wrote:
maintain is an ambiguous word. WMF has some responsibility to all the extensions deployed on cluster (imo). If Devunt (and any others who were knowledgeable of the Josa extension) disappeared, WMF would default to becoming responsible for the security and critical issues in the extension (However, I wouldn't hold them responsible for feature requests or minor bugs).
LDAP is used on wikitech, and some similar services. It would be nice if teams that most directly interact with the extension (I suppose that's labs, maybe security) help with maintenance [Maybe they already do]. I don't necessarily think they have a responsibility to (beyond critical issues, security, etc), but if the teams in question aren't too busy, it is always nice to give back to projects that we use.
Ideally the security team would take on this extension. Unfortunately we just don't have the capacity to address anything except significant security issues right now.
For the most part, this is likely all that's needed. Security updates and compatibility with MediaWiki. I know someone is working on an auth framework update, so I'm sure there'll be some changes necessary for that too.
- Ryan