Python cryptography, Rust, and Gentoo [LWN.net]

Python cryptography, Rust, and Gentoo

Posted Feb 11, 2021 7:01 UTC (Thu) by tiran (guest, #94212)
Parent article: Python cryptography, Rust, and Gentoo

Christian Heimes here.

the article has two factual errors:

1) I'm not a developer of PyCA cryptography and don't have the commit bit. I'm merely a contributor, supporter, and packager for Fedora & RHEL. Alex and Paul call the shots.

2) The developers have NOT decided to create a 3.3 LTS release yet. So far it's just a proposal I made to appease users. Alex is strongly anti-LTS, but still open to being persuaded.

to post comments

Python cryptography, Rust, and Gentoo

Posted Feb 11, 2021 14:31 UTC (Thu) by jake (editor, #205) [Link] (1 responses)

Sorry for the factual errors, Christian ...

> I'm not a developer of PyCA cryptography and don't have the commit bit.

When I looked at your entry in the comment stream on the bug (hovered over "tiran"), it said "Committed to this repository in the last week", so I thought that made you one of the developers of the code. Are we perhaps disagreeing over what "developer" means here?

jake

Python cryptography, Rust, and Gentoo

Posted Feb 12, 2021 15:38 UTC (Fri) by t-v (guest, #112111) [Link]

Even if you disregard official associations (which in my experience will show up as "member" or "collaborator" or somesuch), I think it is useful to distinguish developer and contributor.
A better way to assess involvement would be

https://github.com/pyca/cryptography/graphs/contributors

This seems to indicate that Christian is 19 commits (at the time of writing this), which would make him a somewhat regular contributor.
At least I would not consider myself "a developer of ..." unless I'd be more heavily involved. (Of course, there are also contributions outside commits, but if you chose that metric, the above stats page seems a better source than the "committed..." line in the hover.)
One caveat is that it seems to only work with Name matches or github ids or so, so I've seen it being quite off when people switch (work, typically) email.