Enrolling more aio-libs projects to Tidelift

[webknjaz]

So Tidelift is a project that lets us collect some $$$ from the commercial users of open source. They try to track and distribute some funds based on what their subscribers use.
The idea is that maintainers subscribe and perform tasks that show up in their dashboard and for that, there's some monthly compensation. This is tied to individuals who are called "lifters". If several maintainers sign up, the funds can be distributed among them (can be equal or any other percentage-based agreement). Each lifter has to sign some agreement to join and once eligible, they use a Hyperwallet service to forward money to your bank account or PayPal. The tasks are mostly related to verifying that the metadata is correct (licenses, versioning) and confirming things like CVEs. They can also help with coordinating vulnerability reporting and disclosures (this is opt-in).

I submitted a few of the aio-libs projects there but it'd be great if there were more lifters, from those who maintain said projects more actively/regularly. Y'all know that I mostly do organizational stuff / docs / packaging / CI maintenance these days, but I'd also like to enable people who do other types of maintenance work get some of those donations too.

I really hope more of you could join me in this endeavor! AMA — I've been lifting many other projects for the past few years.

cc @achimnol @bdraco @Dreamsorcerer @hellysmile @jettify @mjpieters @Nothing4You @pohmelie @samuelcolvin @aio-libs/admins

P.S. Let me know which projects you want to join on Tidelift — they usually coordinate talking to maintainers through email threads so I'll need to tell them about you or confirm otherwise.

---

Some packages I applied to lift (the marked ones do receive income):

• 💰 aiohttp
• 💰 async-lru
• 💰 frozenlist
• 💰 idna_ssl
• 💰 multidict
• 💰 pytest-aiohttp
• 💰 yarl
• aiocassandra
• aioelasticsearch
• aioftp
• aioga
• aiohttp-devtools
• aiohttp-jinja2
• aiohttp-session
• aiojobs
• aiomonitor
• aiomysql

[pohmelie]

The only project (from list above) I have strong expertise in is aioftp, so, if someday it will be «checked», then I can try this role.

[webknjaz]

It'll be checked upon approval by Tidelift, but it seems it doesn't generate money as of today. Still, it's possible to apply now so it's listed in your dashboard. I only marked things they approved earlier.

[webknjaz]

UPD: Tidelift folks approved the projects. I marked the ones that generate income currently, in the list above.
Again, if anybody wants to join — make sure to let me know so you could be added on Tidelift.

[Dreamsorcerer]

Yep, I got the same. Just need to find a printer/scanner to complete this tax form before I can withdraw it, seems nobody owns one these days...

[webknjaz]

Personally, I started using arbitrary electronic signing software. The first one found online allows me to draw a signature and put it onto a PDF which I than send. But if you just have a printer and no scanner, using mobile apps like Google Drive can do reasonable scans and outputs PDFs.

I know that apple devices (iPad?) have PDF apps where you can save a signature and store it for future use, putting it on any PDF whenever.

[Dreamsorcerer]

I already tried submitting a digital one (you can draw directly in Firefox/pdf.js these days), apparently you need the signature to be timestamped with an approved timestamp server, which they charge money for. I literally don't understand what the purpose is either, you can easily just submit the same signature to be timestamped again at a later date so it doesn't prove the signature didn't exist earlier, and they only accept documents dated in the last 5 days so there's no need to prove that it wasn't created at a later date. Completely pointless, and done in a way that has multiple points of possible corruption (compared with the free opentimestamp.org which is completely trustless).

[webknjaz]

Oh, I didn't even do a "digital signature" thing (in the asymmetric crypto sense). So it's just a picture, which would be equivalent to printing, drawing a signature with a pen and scanning that.

[Dreamsorcerer]

Yeah, I guess the question is how realistic it looks in order for them to not notice. Found a printer I can use at the weekend, so I'll just do "correctly".