Governance#

Pimpo is free and open source, and it should outlive any one person.

Roles#

• Contributors: anyone who opens an issue or a pull request.
• Maintainers: can merge. Someone becomes a maintainer after reviewing well for three months, when two existing maintainers propose it and nobody objects within a week.
• Security team: the maintainers who receive private reports (see Reporting a vulnerability).

Decisions#

• Day-to-day decisions happen in pull requests, by consensus of the reviewers.
• Safety, data format or governance changes go through an RFC (see Contributing).
• If consensus fails, maintainers vote. A simple majority wins; changes to this document need two thirds.

Healthy project#

The goal is at least three maintainers besides the founder, each reviewing ten or more pull requests a month, so no single person is required for releases, reviews or security fixes. Release and signing keys are held by at least two maintainers.

Money#

Pimpo stays free: no paid tier, no telemetry, no hosted service required. Donations, if any, go to infrastructure and audits, and are reported publicly.

Conduct#

Everyone follows the Code of Conduct.

This page is built from the repository's documentation. Improve it on GitHub.