I like to keep control over base projects to people with contracts to the company for now. The reason behind is that these needs special care to avoid an injection.

This is not a mistrust against you, but this would be a precendes case here.

However, things would be different, if the upstream project (CentOS here) would promote you officially.