Less bot more org

[fcollonval]

Related to #42, I created a PyPI organization - https://pypi.org/org/jupyterlab-contrib/ to ease right management on PyPI and drop the need for the bot account.

The end goal is to get one place per platform to manage rights on GitHub, PyPI and NPM (conda-forge being its own beast) and remove the use of a bot account (it is for now still needed for NPM and for GitHub when using the releaser).

Therefore I would like to align the roles by promoting @jtpio @krassowski @martinRenou and myself to be owners on the three platforms.

Other members will be invited to become members of the PyPI organization.

Here are my questions:

• Do Jeremy, Mike and Martin agree to become owner on the three platforms?
• Does someone else is interested by being granted more rights (we should keep the number of owners between 3 and 5 to avoid bottlenecks while limiting the number for security reasons)?

Jeremy, Mike and Martin, I'm gonna need your help to add some project to the PyPI organization as I don't have enough rights on:

• jupyterlab-pytutor,
• jupyterlab-spreadsheet-editor,
• jupyterlab-spellchecker,
• ipylgbst (migrated to another organization),
• jupyterlab-fileopen

---

cc @jupyterlab-contrib/members @bollwyvl @ianhi @marimeireles @mlhenderson @ocordes @wolfv @zacharyrs

[jtpio]

Thanks @fcollonval.

Do Jeremy, Mike and Martin agree to become owner on the three platforms?

Yes 👍

Happy to do the transfer of jupyterlab-pytutor after getting the rights.

For ipylgbst it will likely be moved to another org: jupyter-widgets-contrib#1

[fcollonval]

Thanks for the feedback and for the good news about jupyter-widget-contrib 🎉

GitHub and NPM rights have been updated for the four owners and owners should have received invitation to join the PyPI organization.

I would like also to ask all owners to activate 2FA on the three platforms (GitHub, NPM and PyPI).

[krassowski]

Can we enforce 2FA?

[fcollonval]

Thanks for the question. I'll open a separate discussion for this one.

[jtpio]

jupyterlab-pytutor has been transferred to the jupyterlab-contrib org on PyPI:

[fcollonval]

Thanks to all owners for moving the remaining packages to the new PyPI org. I'll close this one and open a separate thread about 2FA enforcement.