Define whose needs are we trying to satisfy

[dgkf]

Migrating cards from our meeting discussion

Identify: Whose needs are we trying to satisfy. This could be repository consumers, package users, package contributors.

[kkmann]

My two cents: Stakeholders are package users (all, not just regulators/company employees!), package maintainers, repository maintainers, regulated companies, and regulating agencies.

I would like to add repository maintainers since there is otherwise little trade-off preventing an overly complex and hard to maintain approach.