You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Right now other people can add repos under their name and set themself as maintainer.
If somebody adds a package but is not the person who owns the repository the owner should be allowed to take it back.
This could be done by a simple check against the repository. If you're a member of that repo or organization you can claim it and Packagist sets this user as maintainer.