Creating GSF organisation account for language package repositories (PyPI/NPM/Crates)

[Willmish]

Is your feature request related to a problem? Please describe. Currently projects under GSF cannot release packages under centrally managed package index/registry - e.g. PyPI for Pyhon, NPM for JS-related languages, Crates for Rust - please add in comments if I missed any.

Describe the solution you'd like Create GSF organisation accounts for each, allow project maintainers to submit new packages (@Sealjay mentioned using a single account for PyPI and giving access keys to maintainers - maybe that is also possible for other package indexes/registries?)

@jawache mentioned keeping a concise name for the organisation - GSF. I suggest:

• If the organisation name is NOT required to download/install a package (e.g. Python's pip tool) keep the full organisation name : Green Software Foundation.
• If the organisation name IS required to download install a package (possibly js? not sure) - shorten organisation name to GSF

However I would still consider keeping the full name regardless, to ensure Green Software Foundation is not confused with any other organisation

Package registries /indexes for which I propose GSF creates accounts for:

• PyPI - Python : https://pypi.org/
• NPM - JavaScript and friends : https://www.npmjs.com/
• Crates.io - Rust : https://crates.io/
• Others ?? Please submit requests below

Describe alternatives you've considered Releasing language specific packages for languages with package indexes/registires as github packages, to manually integrate in the project. Issues with this approach:

• Software engineers using these languages will expect that they have packages in those registries
• Might reduce adoption of libraries/packages released by GSF for those languages
• incetivises others to release "unofficial" GSF packages under their own name, or just reupload our packages to those indexes/registires

Additional context Please submit further language package registry requests under this issue

[Willmish]

@seanmcilroy29 I dont have permissions to assign anyone in this repo, could you assign yourself for this issue, if you can work on it? Thanks!

[Sealjay]

My suggestion would be that Sean create an account for each of these repositories, with a GSF specific email address, and then individual users can be added as maintainers. For example, if you look at the way the Azure package is published on PyPi:

https://pypi.org/project/azure/

There is a Microsoft Corporation user with the email of azpysdkhelp@microsoft.com - and then other users are added as maintainers.

[YaSuenag]

NPM - JavaScript and friends : https://www.npmjs.com/

GitHub Packages supports npm: https://github.com/features/packages

I think it is better to use GitHub Packages if we can use as possible due to maintenance cost. However I know it is better to publish libraries for other languages (e.g. Python, Rust), so I agree to use other repositories for them.

GitHub planned to support Python on GitHub Packages, but it seems to be cancelled: https://github.com/github/roadmap/issues/94 Very disappointed...

[Willmish]

Thanks for the input @YaSuenag ! Thats good to know - one language group we can already take care of. Too bad about python.

[jawache]

If there is a namepsace/org question (ike npm) can we use use gsf if it's available and not green-software-foundation allows us to use large fonts and make demo code snappy.

[Sealjay]

@seanmcilroy29 - will follow up on this one with you

[Sophietn]

@jmcook1186 updated us at OSWG that on NPM we now have @grnsft We've got lastpass details for the login

[Sophietn]

I checked in with @seanmcilroy29 - he will create accounts for PyPl and Crates, and then share the login details with me.

[seanmcilroy29]

@Sophietn - crates.io approved as a Third-Party application in the GSF repo

[seanmcilroy29]

@Willmish - Copilot has been added, and you've been allocated a seat. This has a cost associated per person / per month, so @Sophietn is going to lead with who can have access.

[seanmcilroy29]

@Willmish - PyPI account has been created. @Sophietn has the details

[Sophietn]

Thanks @seanmcilroy29, perfect!

[Sophietn]

Closing as we now have accounts for the requested indexes. Please contact me for login details.