There are definitely some cases where a package owner/maintainer abandons a package, but is still available to transfer things over to a new maintainer; I've done that myself. I used to use Arch, and maintained a few AUR packages, but when I stopped using Arch a couple years ago, I marked them as orphaned, and a new maintainer has since picked them up; there was no need for me to do anything to give him access under the AUR's system, but I could have if it were necessary, and I was available to help him set things up. (Of course, this doesn't inherently help with trust; I didn't know the new maintainer before this, and while I can see that he's been maintaining the packages reliably now, I had no way of verifying this originally.)
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。