# Maintainers

This file is the canonical list of people who hold merge and release
rights on compose-lint. Promotion and removal procedures are in
[GOVERNANCE.md](GOVERNANCE.md). Continuity-of-access procedures are in
[docs/CONTINUITY.md](docs/CONTINUITY.md).

## Active maintainers

| Name        | GitHub                                                    | Areas                                                       |
|-------------|-----------------------------------------------------------|-------------------------------------------------------------|
| Todd Matens | [@tmatens](https://github.com/tmatens)                    | Repository admin, releases, security response, all areas    |

## Emeritus maintainers

_None yet._

## Responsibilities

Per [GOVERNANCE.md](GOVERNANCE.md), every active maintainer:

- Reviews and merges pull requests; triages issues within 14 days.
- Responds to security reports within 7 days per
  [.github/SECURITY.md](.github/SECURITY.md).
- Cuts releases per [docs/RELEASING.md](docs/RELEASING.md).
- Holds the credentials and access listed in
  [docs/CONTINUITY.md](docs/CONTINUITY.md).
- Signs commits and tags; their SSH signing key is listed in
  [.github/allowed_signers](.github/allowed_signers) so CI can verify
  release tags.

## Adding or removing a maintainer

See [GOVERNANCE.md](GOVERNANCE.md) §"Adding a maintainer" and
§"Removing a maintainer". Updates to this file are made via PR like any
other change.
