| 6 Oct 2025 |
|  lovesegfault changed their profile picture. | 17:32:56 |
| lovesegfault changed their profile picture. | 17:33:43 |
| 7 Oct 2025 |
 djacu | Hey Infra Team
Would you be able to create an npmjs account? @avocadoom and I would like to have so we can publish branding assets and then use them with npm-like tooling. It would be more ergonomic if we had an npm/yarn dependency rather than trying to shim the branding assets into the homepage via Nix. We also are considering other teams might want access to this in the future so we are coming to you all.
Thanks! | 04:14:43 |
 Vladimír Čunát | If someone else understands this, no need for me to, but otherwise... it's like filling https://www.npmjs.com/signup with an @nixos.org e-mail and putting that into vault.nixos.org? | 06:19:19 |
 Mic92 | nixos already seems to be used as a name, we got nixos-marketing? | 08:13:24 |
 tgerbet | I have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...)
I fine with adding members of a team to it and dropping my access afterwards | 09:46:56 |
| tgerbet | * I have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...)
I'm fine with adding members of a team to it and dropping my access afterwards | 10:11:46 |
 hexa | djacu: What is the idea behind infra managing that account? | 11:42:38 |
| hexa | not that I'd be opposed, just wondering | 11:42:48 |
| djacu | In reply to @hexa:lossy.network
not that I'd be opposed, just wondering Honestly I don't know what the process is for creating accounts. I thought this was an Infrastructure Team responsibility since you all provided the Vault Warden account.
Could the Marketing Team create the account, add it to the vault, and if other teams need access in the future then it gets shared? | 15:38:41 |
| hexa | yep | 15:38:56 |
| djacu | In reply to @tgerbet:matrix.org
I have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...)
I'm fine with adding members of a team to it and dropping my access afterwards That last part was more hypothetical for the future accounts. This sounds like the way to go. @tgerbet:matrix.org: I'll ask @avocadoom to reach out and work with you to do the hand off | 15:42:10 |
