For nm.debian.org, at 2024-08-21: For the past 2 years, I have worked with David Heidelberg on webp-pixbuf-loader. For this past work, David Heidelberg sent mails using the email address david@ixit.cz which is the one he’s using on nm.debian.org, and he signed his work and email using a GPG key with fingerprint D77A 09CF EEDC 2BBD 53A7 0474 6002 3FC4 D349 2072. I've made sure that his is able to decrypt encrypted messages sent to this key and that he’s able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that David Heidelberg as he presents himself on nm.debian.org is the rightful owner of both email david@ixit.cz and GPG key D77A 09CF EEDC 2BBD 53A7 0474 6002 3FC4 D349 2072. I also support David Heidelberg <david@ixit.cz>'s request to become a Debian Maintainer. I have worked with David Heidelberg on his package and I consider his as having sufficient technical competence. During our interactions regarding his work on webp-pixbuf-loader in recent times, I rarely needed to contribute anything, and I was generally happy with his work as it was, and uploaded it with no changes. I also know David is passionate about Debian (and free software in general), he’s attended DebConf and MiniDebConfs, he’s becoming a more active member of the community. I have personally worked with David Heidelberg <david@ixit.cz> (key D77A09CFEEDC2BBD53A7047460023FC4D3492072) for 2 years, and I know David Heidelberg can be trusted to have upload rights for their own packages, right now.
For nm.debian.org, at 2024-08-04: During Cambridge Mini-DebConf 2023, I met David Heidelberg. We worked at the same company in different time, so we spent some time together, this has developed into a friendly relation of trust. I was able to share time with David again at DebConf24 and he also told me that took part of DebConf23. David has been doing upstream software project contributions, such: - - https://gitlab.freedesktop.org/mesa/mesa/-/commits/main?search=David+Heidelberg - - https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/log/?qt=author&q=David+Heidelberg - - https://salsa.debian.org/dh David Heidelberg sent mails using the email address david@ixit.cz which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint D77A 09CF EEDC 2BBD 53A7 0474 6002 3FC4 D349 2072. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that David Heidelberg as they present themselves on nm.debian.org is the rightful owner of both email david@ixit.cz and GPG key D77A 09CF EEDC 2BBD 53A7 0474 6002 3FC4 D349 2072. I have told David may need to show more contributions to join the project, which he acknowledged, but we leave to your consideration if he can get assigned an application manager to become a DD (in the upcoming months or years).