For packages which have multiple maintainers, they should at least offer the option to require another maintainer to approve each publish.