Define SLA for open source packages

[lukekarrys]

The recent push to get everything we maintain on template-oss has uncovered packages we maintain but no longer use. These packages might not make sense to convert to template-oss which currently requires a semver major update and will turn on dependabot, etc. These might not be worth it to take on for packages we no longer use.

For packages like those, we should define our SLA as different than everything else we maintain.

[ljharb]

Do you have a list of such packages?

[lukekarrys]

This is not exhaustive, but these are the ones identified so far (and probably will be the most downloaded ones out of any others we find).

Name	Org	Downloads/mo
dezalgo	npm	26M
wrappy	npm	166M
inflight	npm	160M
infer-owner	npm	58M
gentle-fs	npm	1M