I worked last month on the package `zope.app.authentication` that is still very monolithic. As a first step to refactor it and in order to cut dependencies, I created and released the pluggable auth utility in a standalone package : http://pypi.python.org/pypi/zope.pluggableauth This package, now, has to be used by zope.app.authentication. I did that in a branch : http://svn.zope.org/repos/main/zope.app.authentication/branches/zope.pluggab... Everything work as expected. I only removed what now lies in zope.pluggableauth and used import to preserve the backward compatibility. I didn't remove or alter any tests, only to adapt the __repr__ of some classes that are now moved. Everything seems OK for a release. So, the following steps would be : merge the branch with the trunk, if there no complains. Then, release the new trunk as a 3.7.0 version. Any feedback or insight is welcome. If it's possible, I like to get the ownership on the zope.app.authentication so I can proceed with the release. Thank you - Souheil