Skip to content

How project moderators handle requests to be project owner or maintainer

Warning

This documentation page is for project moderators. It is not intended for people who post requests to become project owner or maintainer.

Info

To understand exactly which maintainers need to be contacted, see Terminology.

Info

Requests for projects which have non-resolved security issues are not handled by project moderators, who need to let the Drupal Security Team handle them. In these cases, a comment should be added letting the person who made the request know that.

When a request to become project owner or maintainer of a project hosted on drupal.org is created in the Drupal.org project maintainership queue, project moderators will:

Info

In the case the project page reports that the project owner leaves it up to project moderators to decide who to add as maintainers, there is no need to contact the project maintainers.

  1. Verify the project is not a sandbox project.
  2. For projects that opted into security advisory policy, verify the person who makes the request can opt projects into security advisory coverage, except in the case the person who made the request is a maintainer who needs more permissions. Maintainers who cannot opt projects into security advisory coverage will not be made project owners.
  3. Verify the issue contains the link to the project and to the issue created in the project issue queue.
  4. Verify the link for the issue in the project queue is for an issue which was kept in the project issue queue at least fourteen (14) days.
  5. Verify the issue created in the project issue queue contains the project name in the title.
  6. Verify that the person who posted the issue in the Drupal.org project maintainership queue is the person who created the issue in the project issue queue.
  7. For requests to be maintainer, verify the issue reports the required permissions, and those permissions match the ones requested in the issue created in the project queue.
  8. Verify there are no other requests open for the same project (even in the project issue queue).

The request is not handled in these cases:

  • The project is a sandbox project and the request is to be the project owner
  • The issue in the project queue does not contain the project name in the title
  • One or more of the conditions 2, 3, 4, 6, and 7 are not met

For requests that are handled, project moderators will then:

  • Check if the project maintainers are still active on drupal.org, by either looking at when the last comment or post was created or at the last time the project maintainer logged in on drupal.org
  • If the project maintainers are still active on drupal.org, contact the project maintainers who are still active; after fourteen (14) days without any reply, a comment will be left asking the person who made the request if there is still interest in the done request
  • If project maintainers have not logged in in the past 365 days (or more), project moderators will accept the request directly
  • Before changing the project owner or maintainers, project moderators will verify the person who did the request is still interested