PyPI project transfer under NatLibFi organization

[juhoinkinen]

Nowdays PyPI supports organizations, so we could create an organization account for NatLibFi and a team for Annif, and then transfer Annif project under it/them.

Motivation for the organization accounts as stated in PyPI docs:

Organization account features are the first step in proving the provenance of a package. Organization accounts offer PyPI users a unique brand for their packages. At an operational level, organization accounts make setting permissions and publishing packages easy.

An and-user can verify that a project is owned by an organization on the project page (from project certifi):

Apparently creating an organization needs a manual verification on PyPI staff, and there can be a long queue for this: pypi/warehouse#14972

Also Annif-client project could be transferred.

This does not require changes in Annif codebase.

[osma]

Other projects that we could transfer under the organization account in PyPI:

• finna-client
• skosmos-client
• skosify

The discussion on the queue issue linked above makes me wonder if verifying the organization account will ever happen...though the last comments on this issue seem to indicate that the queue is indeed moving forward!

[juhoinkinen]

I just sent a request to NatLibFi's support services to create a PyPI organization account.

Seems like there has been essentially no request-review queue since this spring: https://discuss.python.org/t/state-of-pypi-organizations/33764/54

[osma]

We might have some trouble with the verification process because our email domain (helsinki.fi) doesn't match the website domain for NatLibFi:

There is a bit of spam, but the largest issue is what @EWDurbin said here:

The #1 thing you can do to help us process faster—is if at all possible—is to add and verify and email address to your account that matches the domain of the URL provided during application.

There are many, many applications for organizations that have names with corresponding domains, but the user that requested it just has a @gmail.com email address on their account. Since this doesn’t prove any affiliation with the given organization, we must follow up with the user to get them to add and verify an email address with a matching domain, if possible, which is time consuming.

source

I wonder what actions we should take to make the process as smooth as possible?