> Kastner said that he was "less concerned with regards to malicious litigation (although that is a valid concern)", but more with the day-to-day problems with not having a single organization where contributions can go and that can hold assets (e.g. hardware, copyrights) for the project directly.
I thought SPI was acting as an umbrella organization for this sort of thing.
The main issues aren’t about ownership (I’m not aware of any issues between Debian and the SPI; Debian members can be SPI members simply by asking, and many SPI directors are Debian members), but legal exposure: work done for Debian exposes the individual contributor, because there is no organisation.
I suppose, for example, there is nothing stopping SPI with walking off with Debian's assets.
@StephenKitt I thought SPI was also an umbrella for that, but I'm much more uncertain about that. I know the Software Conservancy has such a function for its members.