The Apache Software Foundation Board of Directors Meeting Minutes January 19, 2022 1. Call to order The meeting was scheduled for 22:00 UTC and began at 22:02 when a sufficient attendance to constitute a quorum was recognized by the chair. Other Time Zones: https://timeanddate.com/s/42eg The meeting was held via teleconference, hosted by the Secretary via Zoom. The #asfboard channel on the-asf.slack.com was used for backup. 2. Roll Call Directors Present: Bertrand Delacretaz Roy T. Fielding Justin Mclean Sam Ruby Craig L Russell Roman Shaposhnik Sander Striker Sheng Wu Directors Absent: Sharan Foga Executive Officers Present: David Nalley Matt Sicker Ruth Suehle Executive Officers Absent: Myrle Krantz Guests: Carl Marcum Chris Wells Daniel Gruno Dave Fisher Drew Foulks Gavin McDonald Greg Stein Henri Yandell Joe Brockmeier Paul Angus Sally Khudairi Shane Curcuru 3. Minutes from previous meetings Published minutes can be found at: http://www.apache.org/foundation/board/calendar.html A. The meeting of December 15, 2021 See: board_minutes_2021_12_15.txt Approved by General Consent. 4. Executive Officer Reports A. Board Chair [Sander] As can be read from the officer reports, there have been several topics that needed attention since December. The Log4j issue has triggered numerous conversations and engagements. I want to express my gratitude to those who have been contributing their time and expertise, including over the holidays. I cannot stress enough that the ASF is full of competent and qualified individuals that one way or another donate their time to help deliver software for the public good. This is an impressive reality for well over 20 years. The ASF continues to scale, and enable collaboration. 2022 will undoubtedly be one of more challenges, but I am confident the Foundation will grow because of it. B. President [David] It's been a busy month. Following the log4j CVEs, I've met with the Director of US CyberSecurity and Infrastructure Security Agency, Jen Easterly. I and a number of others (Roy Fielding, Mark Cox, Sam Ruby, and Mark Thomas) have spent a good deal of time prepping for the meeting with the Deputy National Security Advisor for Cybersecurity & Emerging Threats, Anne Neuberger to discuss open source security. Mark Thomas and I also helped manage a response to the FBI regarding the log4j issue. I've also had a Senate committee staffer reach out to the Logging PMC. I responded to the request and have learned that they are planning on holding a hearing about log4j. Because this is more directly focused on Apache, and specifically around log4j, how the ASF manages open source, handles security responses, etc. I am building a team of folks to help support this effort, much like the WH effort. That will include folks both inside the ASF as well experts who are used to handling matters before Congress. I'll keep the board apprised of material updates as this moves forward. Additionally, please see Attachments 1 through 8. C. Treasurer [Myrle] The budgeting process in operations is beginning and the Treasurer’s office is supporting by providing budget and expenditure numbers from the current and previous fiscal year. We have hit a minor, temporary obstacle in this process, caused by personnel transitions: We have a new accountant at IgniteSpot Our Treasurer, and Assistant Treasurer are swapping positions This will slow us down a bit, but only a few days. Over the holiday period, we had several unexpected last minute sponsorships and donations, related to the end of the year. Because some of the needs to support these sponsorships came up after our accountant was already off for Christmas, our volunteers supported those efforts by issuing estimates and providing adjustments to existing invoices on Christmas Eve. Fortunately, because we have access to our own data in Quickbooks Online, we were able to provide this support. D. Secretary [Matt] In December, the secretary received 73 ICLAs, 4 CCLAs, and 2 software grants. E. Executive Vice President [Ruth] Ops team meeting today discussed upcoming FY budget. There's still a lot of uncertainty around events, which also accounts for some significant chunk of the budget. We intend to plan for things to happen and adjust as necessary rather than coming up short. (Rather relevantly!) I would like the board to discuss whether it is comfortable with the risk of a return to in-person events. We had asked you to officially say no to any events until we return to an in-person ApacheCon in New Orleans (due to the terms of that contract). An in-person event in the fall is likely to be US-only, or at least largely US attendees. There is certainly a degree of financial risk in beginning to plan for such an event. After several discussion on various lists and private interactions over the last nearly two years, I have asked the Infra team to start including in their monthly report the status of replacing the term "slave." This is a new request, so I don't expect to see it until the February meeting. F. Vice Chair [Shane] No particular activities this month. Executive officer reports approved as submitted by General Consent. 5. Additional Officer Reports A. VP of W3C Relations [Andy Seaborne / Roy] See Attachment 9 B. Apache Legal Affairs Committee [Roman Shaposhnik] See Attachment 10 C. Apache Security Team Project [Mark J. Cox / Sander] See Attachment 11 @Sander: follow up with PMCs about the role of the security team D. VP of Jakarta EE Relations [Rob Tompkins / Bertrand] No report was submitted. Additional officer reports approved as submitted by General Consent. 6. Committee Reports Summary of Reports The following reports required further discussion: # APISIX [striker] # Arrow [striker] # Security Team [clr] # Struts [clr] A. Apache Accumulo Project [Ed Coleman / Justin] See Attachment A B. Apache ActiveMQ Project [Bruce Snyder / Roman] See Attachment B C. Apache Airavata Project [Suresh Marru / Sharan] See Attachment C D. Apache APISIX Project [Ming Wen / Sam] See Attachment D E. Apache Aries Project [Christian Schneider / Sheng] See Attachment E F. Apache Arrow Project [Wes McKinney / Craig] See Attachment F G. Apache AsterixDB Project [Till Westmann / Justin] See Attachment G H. Apache Attic Project [Herve Boutemy / Sharan] See Attachment H I. Apache Avro Project [Ismaël Mejía / Sam] See Attachment I J. Apache Bloodhound Project [Gary Martin / Sheng] No report was submitted. K. Apache Calcite Project [Haisheng Yuan / Bertrand] See Attachment K L. Apache CarbonData Project [Liang Chen / Sander] See Attachment L M. Apache Celix Project [Pepijn Noltes / Roy] No report was submitted. N. Apache CXF Project [Daniel Kulp / Craig] See Attachment N O. Apache DataFu Project [Eyal Allweil / Roman] See Attachment O P. Apache DB Project [Bryan Pendleton / Roman] See Attachment P Q. Apache Directory Project [Shawn McKinney / Sander] See Attachment Q R. Apache DolphinScheduler Project [Lidong Dai / Bertrand] See Attachment R S. Apache Druid Project [Gian Merlino / Sharan] No report was submitted. T. Apache Dubbo Project [Ian Luo / Sheng] See Attachment T U. Apache Fineract Project [Awasum Yannick / Justin] See Attachment U V. Apache Fluo Project [Keith Turner / Roy] See Attachment V W. Apache Geronimo Project [Romain Manni-Bucau / Craig] See Attachment W X. Apache Griffin Project [William Guo / Sam] See Attachment X Y. Apache Hadoop Project [Wei-Chiu Chuang / Sander] See Attachment Y Z. Apache HAWQ Project [Lei Chang / Sheng] See Attachment Z AA. Apache HBase Project [Duo Zhang / Craig] See Attachment AA AB. Apache Hive Project [Ashutosh Chauhan / Sam] See Attachment AB AC. Apache Hop Project [Bart Maertens / Justin] See Attachment AC AD. Apache Incubator Project [Justin Mclean] See Attachment AD AE. Apache Isis Project [Johan Doornenbal / Sharan] See Attachment AE AF. Apache James Project [Benoit Tellier / Roman] See Attachment AF AG. Apache jclouds Project [Andrew Gaul / Roy] See Attachment AG AH. Apache Jena Project [Andy Seaborne / Bertrand] See Attachment AH AI. Apache JMeter Project [Bruno Demion / Roman] See Attachment AI AJ. Apache Johnzon Project [Romain Manni-Bucau / Roy] See Attachment AJ AK. Apache JSPWiki Project [Juan Pablo Santos Rodríguez / Sheng] See Attachment AK AL. Apache Kudu Project [Andrew Wong / Sander] See Attachment AL AM. Apache MADlib Project [Aaron Feng / Sam] See Attachment AM AN. Apache Mahout Project [Trevor Grant / Craig] See Attachment AN AO. Apache Maven Project [Robert Scholte / Justin] See Attachment AO AP. Apache Mesos Project [Qian Zhang / Bertrand] See Attachment AP AQ. Apache MINA Project [Guillaume Nodet / Sharan] See Attachment AQ AR. Apache MyFaces Project [Bernd Bohmann / Justin] See Attachment AR AS. Apache NiFi Project [Joe Witt / Sander] See Attachment AS AT. Apache Nutch Project [Sebastian Nagel / Roy] See Attachment AT AU. Apache OODT Project [Imesha Sudasingha / Craig] No report was submitted. AV. Apache OpenJPA Project [Mark Struberg / Bertrand] No report was submitted. AW. Apache OpenMeetings Project [Maxim Solodovnik / Sam] See Attachment AW AX. Apache OpenNLP Project [Jeff Zemerick / Roman] See Attachment AX AY. Apache OpenOffice Project [Carl B. Marcum / Sheng] See Attachment AY AZ. Apache ORC Project [Dongjoon Hyun / Sharan] See Attachment AZ BA. Apache Parquet Project [Xinli Shang / Sheng] See Attachment BA BB. Apache PDFBox Project [Andreas Lehmkühler / Bertrand] See Attachment BB BC. Apache Petri Project [Dave Fisher / Justin] See Attachment BC BD. Apache Pig Project [Koji Noguchi / Roy] See Attachment BD BE. Apache Pivot Project [Roger Lee Whitcomb / Craig] No report was submitted. BF. Apache Ranger Project [Selvamohan Neethiraj / Sharan] No report was submitted. BG. Apache Ratis Project [Tsz-wo Sze / Sander] See Attachment BG BH. Apache Rya Project [Adina Crainiceanu / Roman] See Attachment BH BI. Apache Samza Project [Yi Pan / Sam] No report was submitted. BJ. Apache SkyWalking Project [Sheng Wu] See Attachment BJ BK. Apache Steve Project [Daniel Gruno / Roy] See Attachment BK BL. Apache Streams Project [Steve Blackmon / Roman] See Attachment BL BM. Apache Struts Project [René Gielen / Bertrand] See Attachment BM BN. Apache Synapse Project [Isuru Udana / Craig] See Attachment BN BO. Apache Tapestry Project [Thiago Henrique De Paula Figueiredo / Sander] See Attachment BO BP. Apache Tcl Project [Georgios Petasis / Sam] See Attachment BP BQ. Apache Tez Project [László Bodor / Sharan] See Attachment BQ BR. Apache Thrift Project [Jens Geyer / Sheng] See Attachment BR BS. Apache Tika Project [Tim Allison / Justin] See Attachment BS BT. Apache TinkerPop Project [Stephen Mallette / Justin] See Attachment BT BU. Apache Traffic Server Project [Bryan Call / Bertrand] See Attachment BU BV. Apache Web Services Project [Daniel Kulp / Craig] See Attachment BV BW. Apache Zeppelin Project [Lee Moon Soo / Sharan] See Attachment BW Committee reports approved as submitted by General Consent. 7. Special Orders A. Change the Apache Hop Project Chair WHEREAS, the Board of Directors heretofore appointed Bart Maertens (bartmaer) to the office of Vice President, Apache Hop, and WHEREAS, the Board of Directors is in receipt of the resignation of Bart Maertens from the office of Vice President, Apache Hop, and WHEREAS, the Project Management Committee of the Apache Hop project has chosen by vote to recommend Hans Van Akelyen (hansva) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Bart Maertens is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Hop, and BE IT FURTHER RESOLVED, that Hans Van Akelyen be and hereby is appointed to the office of Vice President, Apache Hop, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7A, Change the Apache Hop Project Chair, was approved by Unanimous Vote of the directors present. B. Change the Apache Avro Project Chair WHEREAS, the Board of Directors heretofore appointed Ismaël Mejía (iemejia) to the office of Vice President, Apache Avro, and WHEREAS, the Board of Directors is in receipt of the resignation of Ismaël Mejía from the office of Vice President, Apache Avro, and WHEREAS, the Project Management Committee of the Apache Avro project has chosen by vote to recommend Ryan Skraba (rskraba) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Ismaël Mejía is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Avro, and BE IT FURTHER RESOLVED, that Ryan Skraba be and hereby is appointed to the office of Vice President, Apache Avro, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7B, Change the Apache Avro Project Chair, was approved by Unanimous Vote of the directors present. C. Change the Apache Calcite Project Chair WHEREAS, the Board of Directors heretofore appointed Haisheng Yuan (hyuan) to the office of Vice President, Apache Calcite, and WHEREAS, the Board of Directors is in receipt of the resignation of Haisheng Yuan from the office of Vice President, Apache Calcite, and WHEREAS, the Project Management Committee of the Apache Calcite project has chosen by vote to recommend Ruben Q L (rubenql) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Haisheng Yuan is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Calcite, and BE IT FURTHER RESOLVED, that Ruben Q L be and hereby is appointed to the office of Vice President, Apache Calcite, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7C, Change the Apache Calcite Project Chair, was approved by Unanimous Vote of the directors present. D. Change the Apache TinkerPop Project Chair WHEREAS, the Board of Directors heretofore appointed Stephen Mallette (spmallette) to the office of Vice President, Apache TinkerPop, and WHEREAS, the Board of Directors is in receipt of the resignation of Stephen Mallette from the office of Vice President, Apache TinkerPop, and WHEREAS, the Project Management Committee of the Apache TinkerPop project has chosen by vote to recommend Florian Hockmann (florianhockmann) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Stephen Mallette is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache TinkerPop, and BE IT FURTHER RESOLVED, that Florian Hockmann be and hereby is appointed to the office of Vice President, Apache TinkerPop, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7D, Change the Apache TinkerPop Project Chair, was approved by Unanimous Vote of the directors present. E. Change the Apache Arrow Project Chair WHEREAS, the Board of Directors heretofore appointed Wes McKinney (wesm) to the office of Vice President, Apache Arrow, and WHEREAS, the Board of Directors is in receipt of the resignation of Wes McKinney from the office of Vice President, Apache Arrow, and WHEREAS, the Project Management Committee of the Apache Arrow project has chosen by vote to recommend Kouhei Sutou (kou) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Wes McKinney is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Arrow, and BE IT FURTHER RESOLVED, that Kouhei Sutou be and hereby is appointed to the office of Vice President, Apache Arrow, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7E, Change the Apache Arrow Project Chair, was approved by Unanimous Vote of the directors present. F. Governmental Affairs WHEREAS, the Apache Software Foundation has been in contact with numerous government agencies with regard to open source security and security incident handling, including outreach from the US Federal Government in the form of law enforcement, the US Senate, the Cybersecurity and Infrastructure Security Agency, the Executive Office of the President/National Security Council; and, WHEREAS the Apache Software Foundation anticipates that significant additional effort and resources are needed to handle the educational, political, and legal response to these matters; and, WHEREAS the Apache Software Foundation wishes to reduce (as much as possible) the impact this might have on individual project volunteers. THEREFORE, BE IT RESOLVED, that the President is charged with preparing for additional policy interactions in the future, outside the scope of our development communities, to anticipate the needs of State, Federal, and International governing agencies for better understanding of the ASF's open source practices, policies, and procedures; and, RESOLVED, that an additional budget category be created for "Governmental Affairs" to be used for expenses related to travel, preparation, and participation in such activities, as will be called upon from time to time, and for improving our public-facing educational resources accordingly; and, RESOLVED, that an initial budget of $100,000 be allocated for Governmental Affairs. Special Order 7F, Governmental Affairs, was approved by Unanimous Vote of the directors present. G. Terminate the Apache Ambari Project WHEREAS, the Project Management Committee of the Apache Ambari project has chosen by vote to recommend moving the project to the Attic; and WHEREAS, the Board of Directors deems it no longer in the best interest of the Foundation to continue the Apache Ambari project due to inactivity; NOW, THEREFORE, BE IT RESOLVED, that the Apache Ambari project is hereby terminated; and be it further RESOLVED, that the Attic PMC be and hereby is tasked with oversight over the software developed by the Apache Ambari Project; and be it further RESOLVED, that the office of "Vice President, Apache Ambari" is hereby terminated; and be it further RESOLVED, that the Apache Ambari PMC is hereby terminated. Special Order 7G, Terminate the Apache Ambari Project, was approved by Unanimous Vote of the directors present. 8. Discussion Items A. Officer Positions Myrle Krantz is resigning as Treasurer[1]. Craig McClanahan has been proposed for the role of Treasurer. Craig has indicated he's willing to take the role. He would appreciate Myrle to take the Assistant Treasurer role, as she has offered. Myrle has served as Treasurer since Oct 2019, and has brought significant change to the office. I'd like to express our gratitude for all the time and effort she put into fulfilling this role at the Foundation. [1] https://s.apache.org/vpgzi The board appoints Craig McClanahan as treasurer and Myrle Krantz as assistant treasurer by general consent. B. Project Support Projects at times receive a spike in interest beyond their control. How do we envision the foundation to support these types of events? @David: what do we do when SHTF? 9. Review Outstanding Action Items * Bertrand: Board Agenda Tool transition to ASF Infra [ Unfinished Business 2021-08-18 ] Status: DONE - [gstein:] Infra has picked up this project and will start planning and development. See #agenda-tool on Slack, and https://github.com/apache/infrastructure-agenda I would suggest Bertrand's action item is "Done". * Justin: follow up on BT SIG [ Mynewt 2021-09-15 ] Status: In progress * Roman: reach out to ComDev about alternative communication channels for [ President 2021-10-20 ] Status: I am really sorry, but I sort of lost the context on this AI. Can somebody please remind me? 10. Unfinished Business 11. New Business 12. Announcements 13. Adjournment Adjourned at 22:56 UTC ============ ATTACHMENTS: ============ ----------------------------------------- Attachment 1: Report from the VP of Brand Management [Mark Thomas] Covering the period December 2021 * ISSUES FOR THE BOARD None * OPERATIONS Responded to the following queries, liaising with projects as required: - declined to sign a copyright release for a book and pointed the publisher to the terms of the ALv2 - approved a request to use the SPARK logo on a company's internal team t-shirt - provided advice to an external party regarding how to correctly refer to our products on their website including logo use - approved a t-shirt design using ASF logos intended to be given away at a meetup - one request to approve an event using ASF marks * REGISTRATIONS Provided advice to the DORIS podling on how to transfer previously registered marks to the ASF. Worked with counsel to complete paperwork necessary to maintain registrations for CTAKES, TOMCAT, HBASE, MANIFOLDCF. Working with BEAM PMC to identify a suitable description of goods for their in progress trademark application. * INFRINGEMENTS The KAFKA PMC responded to a query regarding a potential infringement. It was a false alarm. The KAFKA PMC continues to work to resolve a number of infringements that were reported previously. ----------------------------------------- Attachment 2: Report from the VP of Fundraising [Bob Paulin] 1) ASF Sponsors: we wrapped the calendar year with much activity surrounding individual and corporate contributions, new Sponsorships, and several Sponsorship renewals. We have renewed 4 Platinum, 3 Gold, 3 Silver, and 3 Bronze Sponsors, and are pursuing 2 Bronze renewals. We welcomed one new Platinum and one Bronze Sponsor. An incoming Gold Sponsorship has been delayed several months due to an issue with our onboarding onto their vendor payment system. One Gold Sponsor will not be renewing for the 2022 sponsorship year. We received payment from one Platinum, one Gold, one Silver, and 3 Bronze Sponsors. 2) Targeted Sponsors: we are onboarding several new Targeted Sponsors who are donating services towards a handful of Apache projects. We also facilitated a new Targeted Sponsorship to benefit ASF Diversity & Inclusion. 3) Sponsor Relations: standard outreach continues, with New Year outreach forthcoming. 4) Event Sponsorship: we await final payment from the last remaining event sponsor. 5) Individual Donations and Corporate Giving: we continued to promote Individual Giving and Corporate Giving programs, and earned $39K in December over 178 donations via donate.apache.org. This includes $12.7K in individual donations, plus corporate donations from new and repeat donors, as well as several organizations wishing to direct their contributions to benefit Apache Logging Services. Additionally, we received contributions from various Corporate Giving programs from Fortune 50 concerns, charitable organizations, Donor-Advised Funds, and Retirement Equities Funds, among other contributors. 6) Administrivia: we are working with the Treasury and Accounting on some ongoing workflow issues that require rapid response as well as onboarding onto Sponsor vendor payment portals. These are particularly pressing during the latter part of the calendar year. ----------------------------------------- Attachment 3: Report from the VP of Marketing and Publicity [Joe Brockmeier] == Overview It should not be a shock to hear we've been busy. Log4j has gotten most of our attention over the last month or so. Press attention to Log4j vulnerabilities seems to have died down, but M&P continues to be involved in follow-on activities stemming from the Log4j attention. A partial list of coverrage is available here: https://s.apache.org/ey27t == Budget - We've discontinued Meltwater service ($10K per year). - We are now paying by release instead of a pre-paid contract with GlobalNewswire. We're still getting a 20% discount, but we only pay for what we actually use. We did not use the full package last year, so if we keep to a similar number of press releases we'll save north of $3K. - Working on next year's budget and hope to have done by end of this week (January 23). == Blogs published on blogs.apache.org: - Apache Log4j CVEs https://s.apache.org/ix9v5 - Apache Month in Review – November 2021 https://s.apache.org/November2021 - Apache Software Foundation statement on White House Open Source Security Summit https://s.apache.org/v9gkf - Apache in 2021 - By The Digits https://s.apache.org/6vw7p - Apache Software Foundation Security Report: 2021 https://s.apache.org/51gli == Press Releases: we issued no press releases (wire) during this timeframe Informal Announcements: we published 6 items on the ASF "Foundation" Blog, including 4 Apache News Round-ups and 1 monthly overview, totalling 416 news summaries published to date. We tweeted 14 items to 62.7K followers on Twitter, and posted 14 items to 56.5K followers and generated 970.9K post impressions on LinkedIn. The ASF’s YouTube channel had 16.1K views, and 11K subscribers. Future Announcements: the Q1 FY2022 Report is three months behind schedule due to missing Financial Statement as well as Treasury and Infrastructure reports. Media Relations: we responded to 35 media queries and provided rapid response crisis communications services for the duration of the Log4j situation. ----------------------------------------- Attachment 4: Report from the VP of Infrastructure [David Nalley] General ======= Infrastructure is operating as expected, but has one issue to escalate to the Board: - Two projects have been unresponsive for many months to our inquiries and missives to migrate them away from the Apache Content Management System (CMS). We have already disabled the CMS for one, and are hoping to hear back from the other before we disable them, too. The Infra team is not impacted when we disable a site -- it simply means their website becomes frozen, and no further edits are possible. The project will be impacted on the day they try to update their website. The Infra concern is whether these projects have enough energy as an ongoing project (not really our concern), or are simply ignoring queries from Infra (which is a problem for us). Highlights ========== - Our new hire began work on January 3rd. - mail-archives.a.o and mail-private/mail-search.a.o were retired in favor of lists.a.o. Redirections were put in place to handle any outside long/short links to the old services. Finances ======== - FY23 budget planning is about to begin. Infra has a pretty steady (if large) set of expenses, so should be able to produce a draft budget in short order. - The altered payroll bumped our monthly expenditures. We anticipated the bump on one system, but missed another. That was easily corrected, and everything looks to be flowing properly. We should see stability after a few payrolls, which can then feed into the budget planning. Short Term Priorities ===================== - Complete the minotaur.a.o decommission (Jan 31, 2022). - Complete the cms.a.o decommission (Jan 31, 2022). Long Range Priorities ===================== - Complete email system migration to our new Ubuntu-based system. Short-term work includes moving some @infra mailing lists to the new system ("eat our own dogfood"). General Activity ================ - Updating our onboarding documentation. - Lots of log4j assistance, along with remediation on a few of our Java-based services. Some project VMs were turned off, pending the projects' availability to upgrade/correct those systems. - Preparation for upgrading our LDAP servers/system. A compatibility problem was found, so the upgrade was deferred to February. - Crowd is being upgraded and will provide a replacement for the id.apache.org service for changing passwords and basic name fields in the LDAP records. - Standing up Jenkins nodes as part of a new, donated testing cluster for Apache HBase. - Backfilling many archives at lists.a.o, primarily from private lists that had not been initially provided. - Lots of migration of projects using CMS and Buildbot 0.8 to our newer systems, so we can turn those off. - Much work on the redirection service was completed, particularly with the contributions of an Infrastructure volunteer. - Continued progress on Gitbox v2. - Migration from BB0.8 to BB3.2, including Windows nodes. - Some migration of systems from old Ubuntu and Puppet v3, so that we can decommission our v3 server. ----------------------------------------- Attachment 5: Report from the VP of Conferences [Rich Bowen] We hope to begin planning the 2022 event schedule this month. However, with the continued uncertainty regarding in-person events, as well as the uncertainty of international travel, we remain ambivalent about whether we will attempt to have in-person events or remain virtual/online for this year. ----------------------------------------- Attachment 6: Report from the Apache Travel Assistance Committee [Gavin McDonald] Current Events ============== No current events Future Events ============= None Currently Short/Medium Term Priorities ===================== In person events are starting to pop up and TAC is keeping an eye out for suitable events. Foss Backstage is a hybrid event, but only 1 day of in person, with the current health situation in Europe I think it wise to skip this event Still to be discussed are additional questions that could/should be added around Covid Passports etc. Budget ====== Almost budget time, will open discussions on the mailing list. Mailing List Activity ===================== None Membership ========== No changes to the membership this month. ----------------------------------------- Attachment 7: Report from the VP of Diversity and Inclusion [Katia Rojas] ## Description: - The Diversity and Inclusion VP works in collaboration with a team that contributes towards generating a current description of the D&I landscape in the industry and for the foundation. The team also focuses on developing resources the projects can leverage to increase diversity and inclusion in their communities. ## Issues: Unclear process for contract review and approval for D&I projects: after signing the "Google Project Sponsorship Agreement" with Google, for the project User Experience Research on new contributors, we had to make a second review with Fundraising and Marketing which should've been done at an earlier stage. The issue was addressed and we initiated extensive discussions during November and December with Google to include Fundraising and Marketing considerations. Thank you so much to Bob Paulin, Joe Brockmeier, Aizhamal Nurmamat Kyzy, Edd Wilder-James, and everyone that contributed to the review of the contract, the amendment, and the successful submission of the amendment. We received on January 18th, confirmation of the successful completion of the contract. ## Activity: *** Project: Internships for underrepresented groups (Outreachy) *** We entered week 7 of the round "December 2021 to March 2022". We have 5 ongoing projects with 5 different interns, one per project. Progressing as expected. [1] Round "May to August 2022" is opened [2]. Community applications should be submitted before February 25, 2022, at 4pm UTC. We have one month to look for new funds for this round. Anyone interested in the project please reach out. You will find a generic presentation about Outreachy here [3]. *** Project: User Experience Research on new contributors *** Google Project Sponsorship Agreement was signed with Google on October 27th, 2021. The contract was amended on January 18th, 2022. Google has provided funding of 145K USD for our research project. Content of the project: The Apache Software Foundation (ASF) will program manage and analyze the status of Diversity & Inclusion within the Foundation and its community of users, members, and committers. The two main tasks are to (i) re-run the contributor survey with minor changes, and (ii) implement an improvement and learn from it using scientific methods. To execute the project, we will work with Bitergia. I shared the contract with Fundraising, treasurer, Joe, Sally, and Bob on December 13th, 2021, for their review and feedback. I am sending a reminder on January 18th with additional information. I will work with Matt Sicker on the documentation repository for the project, we have scheduled a meeting on January 19. *** Project: EDI Website No updates - no volunteers [4] *** Operations no updates. ## Committee members changes: No new members. ## References [1] https://www.outreachy.org/outreachy-december-2021-internship-round/ [2] https://www.outreachy.org/blog/2022-01-10/may-2022-call-for-mentoring-communities/ [3] https://cwiki.apache.org/confluence/display/EDI/Outreachy+program+sponsorship [4] https://issues.apache.org/jira/browse/DI-11 ----------------------------------------- Attachment 8: Report from the VP of Data Privacy [Christian Grobmeier] Data Privacy is currently in the process of finishing the webpage privacy statement. We are currently working in feedback and try to find a way to roll out the new policy. The board can expect more on this in the next two, three weeks. According to the austrian and german DSB (data privacy agencies), Google Analytics is no longer allowed in the EU because it is not compliant to the GDPR: https://gdprhub.eu/index.php?title=DSB_(Austria)_-_2021-0.586.257_(D155.027) For this reason, I believe it is necessary to remove Google Analytics from our websites. There is a proposal to use Matomo, which is compliant. The current idea is to add ASF volunteers to a privacy committee, which is responsible for maintaining and supporting a VM running Matomo for the whole ASF. Apart from these next steps, there is only "business as usual". Some requests for data removal, all of them not valid were made. A higher level of spam was observed with moderation. ----------------------------------------- Attachment 9: Report from the VP of W3C Relations [Andy Seaborne] Nothing to report this month. ----------------------------------------- Attachment 10: Report from the Apache Legal Affairs Committee [Roman Shaposhnik] Past month has been pretty calm. Committee members took good care of resolving most issues on time. After resolving a handful of LEGAL issues, we are flat with 17 outstanding issues compared to last month. The biggest area of focus for the committee has been the fallout from log4j vulnerability and reaction to it by various government and commercial entities. We have spent some time working with the members of the security team in preparation for the The White House meeting and also responding to the official government inquiries. Our friends at DLA Piper recommended that we explore relationship with the Matau Legal Group to augment the number of pro-bono legal help available to us. The conversation has started but nothing to report back yet. Some of our members have expressed interest in signing the Lifter agreement at the PMC/Foundation level with Tidelift. The consensus on the committee side so far has been that we shouldn't be doing that at that level, however individuals may choose to do so. Since the discussion was no longer a legal one it was moved to the ComDev. ----------------------------------------- Attachment 11: Report from the Apache Security Team Project [Mark J. Cox] Continued work on incoming security issues, keeping projects reminded of outstanding issues, and general oversight and advice. We were invited, and will attend, a forum to discuss open source software security with the NSC at the White House in January 2022. Details are being discussed on our public security-discuss@community.apache.org list. A vulnerability in Log4J 2 (CVE-2021-44228, "Log4Shell"), allowed remote attackers to achieve remote code execution in a default and likely installation. The issue was widely exploited, starting the day before a release with a fix was published. After the fixed release a few subsequent Log4J vulnerabilities were also fixed, but none had the same impact or default conditions. This event triggered a large number of enquiries and vulnerability reports as can be seen by the metrics below. The security team worked to help the Logging PMC on this issue before, during, and after its disclosure. Stats for Dec 2021: 32 [license confusion] 111 [support request/question not security notification] Security reports: 83 (last months: 44, 36, 47) 14 [logging] 6 [httpd] 5 [commons] 4 [tomcat] 3 [cassandra], [infrastructure], [openoffice] 2 [dubbo], [hadoop], [nifi], [sling], [solr], [superset] [zeppelin] 1 [activemq], [airflow], [apisix], [archiva], [beam], [camel], [cayenne], [cocoon], [druid], [eventmesh], [flink], [freemarker], [guacamole], [hive], [ignite], [jackrabbit], [james], [jspwiki], [kafka], [maven], [multiple], [ofbiz], [ozone], [pdfbox], [portals], [shardingsphere], [shenyu], [skywalking], [spark], [storm], [struts], [trafficcontrol], [unomi] In total, as of 1st Jan 2022, we're tracking 107 (last month: 89) open issues across 47 projects, median age 62 (last month: 90) days. 49 of those issues have CVE names assigned. 6 (last month: 5) of these issues, across 3 projects, are older than 365 days. ----------------------------------------- Attachment 12: Report from the VP of Jakarta EE Relations [Rob Tompkins] ----------------------------------------- Attachment A: Report from the Apache Accumulo Project [Ed Coleman] ## Description: The Apache Accumulo is a robust, scalable, distributed key/value store with cell-based access control and customizable server-side processing. ## Issues: There are no new issues requiring board attention. The trademark issue with http:www.accumulodata.com is still open and there has been no change since the last report. The core of the issue is the domain owner does not have access to the domain registration, the domain appears to have automatically renewed, and the expiration is now 2022-06-28. Email from the private list discussing this are at [1], [2] and [3]. No action has been required and allowing the domain to expire was deemed a viable option by Brand Management VP in Jan-2021 (private)[4] to minimize volunteer efforts. ## Membership Data: Apache Accumulo was founded 2012-03-21 (10 years ago) There are currently 40 committers and 40 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Dominic Garguilo on 2021-07-29. - No new committers. Last addition was Dominic Garguilo on 2021-07-29. ## Project Activity: - The current development branch is up to date with the latest log4j2 release. Previous versions do not use log4j2 and are not impacted by the latest reported vulnerabilities. - No new releases this reporting period. Project activity on the next release remains active with significant improvements to the current baseline. The remaining issues are being actively worked. Last release dates: - accumulo-2.0.1 was released on 2020-12-24. - accumulo-1.10.1 was released on 2020-12-22. ## Community Health: Overall community health is good and GitHub activity remains consistent. - Accumulo participated in the Hacktoberfest 2021. - Community participation remains healthy with discussions on the mailing lists and GitHub issues and pull-requests. - Accumulo continues to transition from Jira to GitHub issues. Jira activity reflects transition to using GitHub issues as obsolete issues are closed and open issues are transitioned to GitHub issues. ----------------------------------------- Attachment B: Report from the Apache ActiveMQ Project [Bruce Snyder] ## Description: Apache ActiveMQ is a popular and powerful open source message-oriented middleware. Apache ActiveMQ is fast, supports many cross language clients and protocols, comes with easy to use enterprise integration patterns and many advanced features while fully supporting JMS 2.0, AMQP 1.0, MQTT, Stomp and REST. ## Issues: None ## Membership Data: Apache ActiveMQ was founded 2007-01-16 (15 years ago) There are currently 63 committers and 25 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Jean-Baptiste Onofré on 2019-12-17. - No new committers. Last addition was Domenico Francesco Bruscino on 2020-06-29. ## Project Activity: * ActiveMQ ** ActiveMQ development is moving forward: ** ActiveMQ 5.16.4 release is preparation, fixing several issues identified from 5.16.3 ** ActiveMQ 5.17.0 release is planned for end of Jan/beginning of Feb, with major updates * ActiveMQ Artemis ** ActiveMQ Artemis 2.20.0 released on Dec 18 2021 ** Outreachy intern working on ActiveMQ Artemis for a contribution around Open Telemetry * ActiveMQ NMS ** Apache NMS AMQP 2.0.0 was released on 2021-10-27 this is the first client using the enhanced NMS 2.0 API (bringing .NET NMS API up to date with JMS 2.0) ** Work is ongoing with NMS OpenWire to implement NMS 2.0 PR's are currently open and being reviewed * Fallout from Log4Shell (i.e. CVE-2021-44228) ** Updated website with a clear description of the impact of Log4Shell (i.e. none). ** Lots of mailing list discussion around its impact (or lack thereof). ## Community Health: The community has held steady. Through the end of the year, things have slowed down as they normally do. ----------------------------------------- Attachment C: Report from the Apache Airavata Project [Suresh Marru] ## Description: The mission of Apache Airavata is the creation and maintenance of software related to executing and managing computational jobs on distributed computing resources including local clusters, supercomputers, national grids, academic and commercial clouds. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Airavata was founded 2012-09-18 (9 years ago) There are currently 42 committers and 25 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. A new PMC vote was conducted but we did not receive a decision from the proposed candidate, will remind. Community changes, past quarter: - No new PMC members. Last addition was Sudhakar Pamidighantam on 2019-12-19. - No new committers. Last addition was Dinuka DeSilva on 2021-07-22. ## Project Activity: Last release was on March 24th 2019. Finalizing our release has slowed again with holiday season. We hope to wrap up this quarter. ## Community Health: The mailing lists and GitHub issues and pull requests are active. Following the usual pattern, we hope early year activity to ramp up. ----------------------------------------- Attachment D: Report from the Apache APISIX Project [Ming Wen] ## Description: The mission of Apache APISIX is the creation and maintenance of software related to a cloud-native microservices API gateway ## Issues: There is no issue. ## Membership Data: Apache APISIX was founded 2020-07-15 (a year ago) There are currently 43 committers and 25 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - Zeping Bai was added to the PMC on 2021-12-26 - Bisakh Mondal was added as committer on 2021-12-18 - Shivam Singh was added as committer on 2021-11-17 ## Project Activity: Apache APISIX solves 2 dashboard-related security vulnerabilities, and released 2 hotfix versions. apisix-dashboard-2.10.1 was released on 2021-12-23. apisix-dashboard-2.10.0 was released on 2021-12-15. 2.11.0 was released on 2021-11-29. 2.10.2 was released on 2021-11-19. apisix-dashboard-2.9.0 was released on 2021-10-08. ## Community Health: Apache APISIX has co-meetups with Apache projects such as SkyWalking and RocketMQ. Apache APISIX has more than 260 contributors in the GitHub main library, and keep a diverse Community. dev@apisix.apache.org had a 35% increase in traffic in the past quarter (574 emails compared to 424) 741 commits in the past quarter (-13% change) 97 code contributors in the past quarter (3% increase) 581 PRs opened on GitHub, past quarter (-7% change) 592 PRs closed on GitHub, past quarter (-5% change) 420 issues opened on GitHub, past quarter (-4% change) 395 issues closed on GitHub, past quarter (-3% change) ----------------------------------------- Attachment E: Report from the Apache Aries Project [Christian Schneider] ## Description: Apache Aries software is a set of pluggable Java components enabling an enterprise OSGi application programming model. ## Issues: No current issues that need board attention. ## Membership Data: Apache Aries was founded 2010-12-15 (11 years ago) There are currently 57 committers and 41 PMC members in this project. The Committer-to-PMC ratio is roughly 4:3. Community changes, past quarter: - No new PMC members. Last addition was Carlos Sierra Andrés on 2018-07-03. - No new committers. Last addition was Romain Manni-Bucau on 2020-01-29. ## Project Activity: We mainly had a 3 bugfix releases. Project activity is quite low. Recent releases: proxy-impl-1.1.12 was released on 2022-01-05. rsa-1.16.1 was released on 2021-09-21. cdi-1.1.4 was released on 2021-09-16. ## Community Health: Community activity is very low. We had only 3 mails on the user list. Mail on dev list seems comparatively high but most are automated mails like from dependabot. ----------------------------------------- Attachment F: Report from the Apache Arrow Project [Wes McKinney] ## Description: The mission of Apache Arrow is the creation and maintenance of software related to columnar in-memory processing and data interchange ## Issues: * https://github.com/apache/arrow-julia is blocked by Infra on CI: * https://issues.apache.org/jira/browse/INFRA-22676 isn’t triaged. * https://github.com/apache/arrow-julia wants to run CI before merging pull requests. ## Membership Data: Apache Arrow was founded 2016-01-19 (6 years ago) There are currently 67 committers and 38 PMC members in this project. The Committer-to-PMC ratio is roughly 9:5. Community changes, past quarter: - Daniël Heres was added to the PMC on 2021-12-20 - Joris Van den Bossche was added to the PMC on 2021-11-21 - Yibo Cai was added to the PMC on 2022-01-03 - Alessandro Molina was added as committer on 2022-01-04 - Rémi Dettai was added as committer on 2021-12-07 ## Project Activity: Recent releases: * RS-6.5.0 was released on 2021-12-29. * RS-6.4.0 was released on 2021-12-14. * RS-6.3.0 was released on 2021-11-29. * 6.0.1 was released on 2021-11-18. * RS-DF-6.0.0 was released on 2021-11-17. * RS-6.2.0 was released on 2021-11-15. * RS-6.1.0 was released on 2021-11-03. * 6.0.0 was released on 2021-10-26. * RS-6.0.0 was released on 2021-10-17. Planned releases: * 7.0.0 in mid-January ## Community Health: * Apache Arrow Julia was re-donated https://s.apache.org/arrow-jl-donation * We’ve created a repository for collaborative prototyping + algorithms / performance research https://github.com/apache/arrow-experiments * Discussions around adding new columnar memory layouts to Arrow (in-memory, IPC, C ABI) * Discussions around community maintained extension repos for Apache Arrow Datafusion https://github.com/datafusion-contrib * We’ll rotate the PMC chair in 2022-01 * We’ve started Apache Arrow Cookbook to accept more new users. We’ll create similar documentation for new contributors. https://arrow.apache.org/cookbook/ * Rust continues releases every other week and is trying to balance open group collaboration and fast iterations: https://github.com/apache/arrow-rs/issues/1120 * Rust Arrow2 project, https://github.com/jorgecarleitao/arrow2, implementation of Arrow developed outside ASF, continues to generate community questions about if/when it will be brought into ASF. ----------------------------------------- Attachment G: Report from the Apache AsterixDB Project [Till Westmann] Description: Apache AsterixDB is a scalable big data management system (BDMS) that provides storage, management, and query capabilities for large collections of semi-structured data. Activity: - A quick point release was done to update log4j to 2.15 because of the log4shell vulnerability. - Development and discussions are active, the community continues to be healthy and engaged. - A number of new features, improvements and fixes have been merged into the master branch and are set to be in the next release. Issues: There are no issues that require the board's attention at this time. PMC/Committership changes: - Glenn Galvizo was added as a committer on 2021-06-04. - The last committer added was Glenn Galvizo on 2021-06-04. - The last PMC member added was Xikui Wang on 2018-02-02. Releases: - Apache AsterixDB 0.9.7.1 was released on 2021-12-13. - Apache Hyracks 0.3.7 was released on 2021-12-13. ----------------------------------------- Attachment H: Report from the Apache Attic Project [Herve Boutemy] ## Description: The mission of Attic is the creation and maintenance of a home for dormant projects. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Attic was founded 2008-11-19 (13 years ago) There are currently 19 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Herve Boutemy on 2015-07-19. - No new committers. Last addition was Herve Boutemy on 2016-01-27. ## Project Activity: Attic retired 2 projects: Joshua and Usergrid . ## Community Health: Last projects retirement done using our documentation and automation: it is efficient, it requires reasonably low efforts. ----------------------------------------- Attachment I: Report from the Apache Avro Project [Ismaël Mejía] ## Description: Apache Avro is a data serialization system with a compact binary format. It is used for storing and transporting schema driven serialized data. The unique features of Avro include automatic schema resolution - when the reader's expected schema is different from the actual schema with which the data was serialized the data is automatically adapted to meet reader's requirements. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Avro was founded 2010-04-21 (12 years ago) There are currently 36 committers and 24 PMC members in this project. The Committer-to-PMC ratio is 3:2. Community changes, past quarter: - No new PMC members. Last addition was Ryan Skraba on 2020-09-14. - Martin Tzvetanov Grigorov was added as committer on 2022-01-04 ## Project Activity: Apache Avro 1.11.0 was released on 2021-10-27 This release keeps the expected pace of releases every 3-6 months discussed by the community. It updated many dependencies and fixed issues across the several languages supported. For more details see the announcement: https://s.apache.org/avro-1.11.0-announce For the first time, the 1.11.0 release includes experimental support for Rust. Work is continuing on this donated SDK, but we have not versioned and published official artifacts for this release. ## Community Health: For those who prefer metrics: Mailing Lists: - dev@avro.apache.org had 1109 emails (36% increase) - user@avro.apache.org had 34 emails (88% decrease) - issues@avro.apache.org had 259 emails (22% increase) JIRA: - 62 issues opened (8% increase) - 61 issues closed (no change) Code Repository: - 168 commits in the past quarter (46% increase) - 18 code contributors in the past quarter (-33% change) GitHub: - 79 PRs open (-7% change) - 91 PRs closed (5% increase) Community participation remains stable in terms of mail, JIRA and code contributions. We have invited another committer, which has increased engagement and provided some much-needed attention to some of the outstanding pull requests. Improving the time it takes to review and merge PRs is a good focus for the project in the next quarters to avoid discouraging contributions. The PMC will continue to identify and recognize contributors for committership. Although we've improved the release cadence for Avro over the last few years, there is still some confusion around the way the artifacts are versioned and maintained. This has been discussed on the mailing list, but we have not made any changes or policy at this time. There has been some interesting discussion on the mailing list with respect to modernizing the website to improve communication with Avro users. ----------------------------------------- Attachment J: Report from the Apache Bloodhound Project [Gary Martin] ----------------------------------------- Attachment K: Report from the Apache Calcite Project [Haisheng Yuan] ## Description: Apache Calcite is a highly customizable framework for parsing and planning queries on data in a wide variety of formats. It allows database-like access, and in particular a SQL interface and advanced query optimization, for data not residing in a traditional database. Avatica is a sub-project within Calcite and provides a framework for building local and remote JDBC and ODBC database drivers. Avatica has an independent release schedule and its own repository. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Calcite was founded 2015-10-21 (6 years ago) There are currently 56 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. We are rotating the PMC chair, continuing our annual rotation tradition. Community changes, past quarter: - No new PMC members. Last addition was Ruben Q L on 2020-08-09. - Alessandro Solimando was added as committer on 2021-12-17. - Xiong Duan was added as committer on 2021-10-18. ## Project Activity: Calcite 1.28.0 was released on 2021-10-19, with new features including the UNIQUE sub-query predicate, the MODE aggregate function, PERCENTILE_CONT and PERCENTILE_DISC inverse distribution functions, an Exasol dialect for the JDBC adapter, and improvements to materialized view recognition. Calcite 1.29.0 was released on 2021-12-26, which upgrades log4j2 to 2.17.0 to fix security vulnerabilities. Calcite Avatica 1.19.0 was released on 2021-10-11, which adds support for BIT and NULL data types, fixes issues with values of type ARRAY. Calcite Avatica 1.20.0 was released on 2021-12-13, which upgrades Log4j2 to version 2.15.0 (to address CVE-2021-44228), and makes the SPNEGO protocol much more efficient. ## Community Health: The overall activity in the community has increased slightly in the past few months, specifically 20% more commits, 8% more closed PRs on GitHub. There are some discussions about the proposal of changing workflow, e.g. github issues vs JIRAs, merging Avatica with Calcite, people argued with different opinions, some of the discussions reached consensus, others merely reached a conclusion. We are still trying to learn from the situation. The number of non-committer (contributor) commits per month: +---------------------+---------------------+---------------------+ | year | month | contributor_commits | +---------------------+---------------------+---------------------+ | 2021 | 10 | 14 | | 2021 | 11 | 2 | | 2021 | 12 | 8 | +---------------------+---------------------+---------------------+ The number of active reviewers per month: +---------------------+---------------------+---------------------+ | year | month | active_reviewers | +---------------------+---------------------+---------------------+ | 2021 | 10 | 7 | | 2021 | 11 | 2 | | 2021 | 12 | 5 | +---------------------+---------------------+---------------------+ Top reviewers in the last 3 months: +-----------+---------------------+ | committer | reviews | +-----------+---------------------+ | Julian Hyde | 7 | | Stamatis Zampetakis | 4 | | NobiGo | 3 | | Jesus Camacho Rodriguez | 3 | | rubenada | 2 | | chunwei <37774589+chunweilei@users.noreply.github.com> | 1 | | Haisheng Yuan | 1 | | chunwei.lcw | 1 | | Wang Yanlin <1989yanlinwang@163.com> | 1 | | Jacques Nadeau | 1 | +-----------+---------------------+ ----------------------------------------- Attachment L: Report from the Apache CarbonData Project [Liang Chen] ## Description: - The Apache CarbonData is data store solution for fast analytics on Big Data platforms (including Apache Hadoop, Apache Spark, Apache Flink among others) to help speed up queries an order of magnitude faster over petabytes of data, with the aim of using a unified file format to satisfy all kinds of data analysis cases. ## Issues: - There are no new issues requiring board attention at this time. ## Activity: - Last 3 months, we are preparing 2.3.0 release, some key features as below: - Support spatial index creation using data frame - Upgrade Prestosql to 333 version - Support Carbondata Streamer tool to fetch data incrementally and merge - Support DPP for carbon filters - Alter support for complex types - Apache Carbondata double-checked and analyzed Log4j2 Vulnerability (CVE-2021-44228, CVE-2021-45046,CVE-2021-45105) ,We currently believe that the Apache CarbonData platform is not impacted.Apache CarbonData does not directly use a version of log4j known to be affected by the vulnerability. We have reviewed the code and run the vulnerability tool, as per the tool report, these three vulnerabilities (CVE-2021-44228,CVE-2021-45046,CVE-2021-45105) are not identified. ## Health Report: - Commit activity: - 34 commits in the past quarter (-7% decrease) - 9 code contributors in the past quarter (28% increase) - GitHub PR activity: - 13 PRs opened on GitHub, past quarter (10% increase) - 16 PRs closed on GitHub, past quarter (-6% decrease) ## Releases: - 2.3.0 is processing of the RC1 in 2021 Dec - 2.2.0 was released on 2021-08-05 - 2.1.1 was released on 2021-03-29 - 2.1.0 was released on 2020-11-12. - 2.0.1 was released on 2020-06-01. - 2.0.0 was released on 2020-05-20. - 1.6.1 was released on 2019-10-25. ## Project Composition: - There are currently 26 committers and 16 PMC members in this project. - The Committer-to-PMC ratio is roughly 7:4. ## Community changes, past quarter: - Akash R Nilugal was added to the PMC on 2021-04-11 - Ajantha Bhat U was added to the PMC on 2020-11-15 - Indhumathi was added as committer on 2020-10-02 - Kunal Kapoor was added to the PMC on 2020-03-29 - Tao Li was added as committer on 2020-02-04 - Zhi Liu was added as committer on 2020-02-27 ## Notable mailing list trends:Mailing list activity stays at a high level - dev@carbondata.apache.org: - 179 subscribers (increase 6): - dev@carbondata.apache.org had a 36% decrease in traffic in the past quarter (1012 emails compared to 1566): - issues@carbondata.apache.org: - issues@carbondata.apache.org had a 48% increase in traffic in the past quarter (302 emails compared to 204): - user@carbondata.apache.org: - 76 subscribers (no change): ## JIRA activity: - 20 issues opened in JIRA, past quarter (-26% decrease) - 16 issues closed in JIRA, past quarter (19% increase) ----------------------------------------- Attachment M: Report from the Apache Celix Project [Pepijn Noltes] ----------------------------------------- Attachment N: Report from the Apache CXF Project [Daniel Kulp] ## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (14 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The primary focus this period was on supporting Java17. We updated to the latest releases from Apache WebServices and other dependencies and then released CXF 3.5.0 to fully support Java 8 through Java 17. We've also started some experimental efforts to support the "jakarta.*" annotations instead/in addition to the "javax.*" versions. Those efforts are still ongoing. The other major impact on the project was the retirement of the CMS. While CXF doesn't really use the CMS, it did use the CMS buildbot builder and some of the CMS scripts. Thus, we did need to work with INFRA to come up with solutions and migrate the build. This is now done. Thanks to Gavin for his help in getting things setup and ready to go. Releases: 3.5.0 was released on 2021-12-22. Older releases: Apache CXF Fediz 1.5.1 was released on 2020-11-30 Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out. ----------------------------------------- Attachment O: Report from the Apache DataFu Project [Eyal Allweil] ## Description: The mission of Apache DataFu is the creation and maintenance of software related to well-tested libraries that help developers solve common data problems in Hadoop and similar distributed systems ## Issues: There are no issues requiring board attention. ## Membership Data: Apache DataFu was founded 2018-02-21 (4 years ago) There are currently 19 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Casey Stella on 2018-02-21. - No new committers. Last addition was Ohad Raviv on 2019-07-27. ## Project Activity: Some work done on adding static code analysis to our build (via GitHub workflows). We verified that the project is not affected by the log4j vulnerability but are planning on updating to versions anyway. ## Community Health: Still relatively light activity, but a few contributions began or were completed in this quarter. ----------------------------------------- Attachment P: Report from the Apache DB Project [Bryan Pendleton] ## Description: The mission of the Apache DB project is to create and maintain commercial-quality, open-source, database solutions based on software licensed to the Foundation, for distribution at no charge to the public. The Apache DB TLP consists of the following subprojects: o Derby : a relational database implemented entirely in Java. o JDO : focused on building the API and the TCK for compatibility testing of Java Data Object implementations providing data persistence. o Torque : an object-relational mapper for Java. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache DB was founded 2002-07-16 (19 years ago) There are currently 47 committers and 45 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Georg Kallidis on 2020-08-26. - No new committers. Last addition was Tobias Bouschen on 2021-01-19. ## Project Activity: - Torque 5.0 was released on 2020-09-22. - Derby-10.15.2.0 was released on 2020-02-18. - JDO 3.1 was released on 2015-03-19 The Torque community are preparing their 5.1 release, which contains multiple new features as well as security fixes. An initial release candidate was voted on, then withdrawn, due to ongoing work to address the Log4J security fixes. A subsequent release candidate has been prepared and will be voted upon by the community. JDO has prepared release 3.2 and the DB PMC has voted to approve it. The vote was prior to the log4j2 disclosure and jdo had a dependency on an affected release of log4j2. This dependency was only for running the TCK so it is not a critical issue. However, the dependency has been updated for the official release. The JCP has completed the Maintenance Draft Review 5 and has scheduled the Maintenance Review Ballot for January 11 through January 17. We are expecting a positive result. Once the Ballot is approved we will do a final update of JDO 3.2 and have a final vote by the DB PMC. The Derby community have had some discussions as to whether a new major release of Derby will be needed to support JDK 18. Certain Derby features may be removed due to underlying changes in the JDK and the Derby community will need to communicate this to the users of the software. The DB project has discussed the upcoming shutdown of the CMS and the move of the ci.apache.org support to the new ci2.apache.org that will occur at the end of January, and the sub projects will make the necessary changes. ## Community Health: DB mailing lists show typical levels of activity and appear healthy. Project release activities and release votes are proceeding normally. ----------------------------------------- Attachment Q: Report from the Apache Directory Project [Shawn McKinney] ## Description: The Apache Directory TLP consists of the following sub-projects: - ApacheDS: An extensible and embeddable directory server entirely written in Java, which has been certified LDAPv3 compatible by the Open Group. - LDAP API: An ongoing effort to provide an enhanced LDAP API, as a replacement for JNDI and the existing LDAP API (jLdap and Mozilla LDAP API). This is a "schema aware” API with some convenient ways to access all types of LDAP servers. - Studio: A complete directory tooling platform intended to be used with any LDAP server however it is particularly designed for use with ApacheDS. It is an Eclipse RCP application, composed of several Eclipse (OSGi) plugins. - Fortress: A standards-based authorization platform that provides role-based access control, delegated administration and password policy services with an LDAP backend. - Kerby: An implementation of Kerberos v5 protocol and contains various tools to access and manage kerberos principals and keytabs. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile. - Mavibot: An embeddable key-value database library with MVCC (Multi Version Concurrency Control) support. - SCIMple: An implementation of SCIM v2.0 specification. ## Issues: - There are no issues requiring board attention at this time. ## Membership Data: Apache Directory was founded 2005-02-22 (15 years ago) There are currently 58 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:3. Community changes, past quarter: - No new PMC members. Last addition was Radovan Semancik on 2018-09-28. - No new committers. Last addition was Admir Hodzic on 2021-05-17. ## Project Activity: Overall: While activity remains low, the projects are being maintained, community involvement remains fair. Fortress was impacted by Log4Shell vulnerability. An emergency release was coordinated over private mailing list followed by release 2 days after the announcement demonstrating the PMC is able to respond to critical security issues. Per sub-project: - ApacheDS: low activity but starting to pickup, with more programmer involvement expected in '22 - LDAP API: moderate activity. - Studio: low activity but being maintained. - Fortress: moderate activity. Emergency release for Log4j-core vulnerability. Response to CVE-2021-44228. - Kerby: low activity. Release being planned. - Mavibot: low activity. - SCIMple: no activity. ## Community Health: No problems to report. 4Q activity low but PMC has active members and the project continues to be adequately maintained. ## Releases: Emergency releases: Apache Fortress 2.0.7: 2021-12-12 was released on 2021-12-12. ----------------------------------------- Attachment R: Report from the Apache DolphinScheduler Project [Lidong Dai] ## Description: - Apache DolphinScheduler is a cloud-native visual Big Data workflow scheduler system. - As a distributed and extensible data workflow scheduler platform with rich directed acyclic graph (DAG) visual interfaces - it solves complex task dependencies and triggers in the data pipeline. - Out-of-the-box, its easy-to-extend processing connects numerous systems to 10,000,000-level data task scheduling. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache DolphinScheduler was founded 2021-03-17 (7 months ago) There are currently 39 committers and 16 PMC members in this project. The Committer-to-PMC ratio is roughly 5:2. No new PMC members. Last addition was Calvin Kirs on 2021-05-07. ShunFeng Cai was added as committer on 2021-12-18 Zhenxu Ke was added as committer on 2021-12-12 Wang Xingjie was added as committer on 2021-11-24 Yizhi Wang was added as committer on 2021-12-15 Jiajie Zhong was added as committer on 2021-12-12 ## Project Activity: Software development activity: - We released 4 release versions which includes 2.0.0-alpha,2.0.0,2.0.1 and 2.0.2 - We supported Python SDK in our 2.0.2 version. Meetups and Conferences: - the DolphinScheduler online meetup held on 27,11,2021, and about 6000 views ## Community Health: - dev@dolphinscheduler.apache.org had a 64% increase in traffic in the past quarter (297 emails compared to 181) - 972 commits in the past quarter (123% increase) - 88 code contributors in the past quarter (25% increase) - 824 PRs opened on GitHub, past quarter (89% increase) - 818 PRs closed on GitHub, past quarter (100% increase) - 593 issues opened on GitHub, past quarter (90% increase) - 608 issues closed on GitHub, past quarter (155% increase) ----------------------------------------- Attachment S: Report from the Apache Druid Project [Gian Merlino] ----------------------------------------- Attachment T: Report from the Apache Dubbo Project [Ian Luo] ## Description: Apache Dubbo is a high-performance, lightweight RPC framework that provids different language implementations, including java, go, javascript etc. ## Issues: No issue requiring board attention in this reporting cycle. ## Membership Data: Apache Dubbo was founded 2019-05-15 (3 years ago) There are currently 79 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 5:2. Community changes, past quarter: - No new PMC members. Last addition was Zhixin Li on 2021-09-27. - Zhiyong Zhang was added as committer on 2022-01-07 - Xuewei Niu was added as committer on 2021-10-27 - Jianhui Dong was added as committer on 2021-12-08 - Phil was added as committer on 2022-01-08 - Pin Xiong was added as committer on 2021-10-27 ## Project Activity: Part 1, Releases Java - 3.0.5 was released on 2021-12-30. - 3.0.4 was released on 2021-12-29. - 2.7.15 was released on 2021-12-29. - 2.6.12 was released on 2021-09-18. Go - dubbo-go v3.0.0 was released on 2021-12-20. - dubbo-go-pixiu v0.4.0-rc2 was released on 2021-11-08. - dubbo-go v3.0.0-rc3 was released on 2021-11-01. Ecosystem - dubbo-hessian-lite-3.2.12 was released on 2021-11-28. - dubbo-admin-0.4.0 was released on 2021-11-22. - dubbo-spi-extensions-1.0.0 was released on 2021-10-22. Part 2, other community activities - The community attended the event held by Alibaba aiming at rewarding open-source comunities and personalities. Dubbo community has successfully collected 100+ contributors publicly to work as the receiver of the gifts provided by the sponsor. ## Community Health: The most notable progress in this reporting cycle is that Dubbo 3 has released the production available version - 3.0.5. At present, we have seen 6 community users have officially migrated to Dubbo3, which is a significant milestone for Dubbo3 and is helpful for further improving the overall stability of Dubbo3. For the whole community, there are two priorities in the next quarter, one is to continue to improve the stability of Dubbo3, and the other is to provide feasible mesh solutions. The independent website maintained by the dubbo-go community was found to have potential copyright problems. The community has reached an agreement on obseleting the website as soon as possible. At present, the substantive content migration has been obsoleting completed. The response timeliness of Github community has been significantly improved. In the past reporting cycle, the total number of issues has been well kept around 300. ----------------------------------------- Attachment U: Report from the Apache Fineract Project [Awasum Yannick] ## Description: The mission of Apache Fineract is the creation and maintenance of software related to a core banking platform that provides a reliable, robust, and affordable solution for entrepreneurs, financial institutions, and service providers to offer financial services to the world's underbanked and unbanked. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Fineract was founded 2017-04-19 (5 years ago) There are currently 45 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Aleksandar Vidakovic on 2020-10-11. - Benura was added as committer on 2021-11-03 - Javier Borkenztain was added as committer on 2021-11-06 - Manoj Mohanan was added as a committer on 2022-01-01 ## Project Activity: Fineract 1.5 was released in May 2021. Release for Fineract 1.6 is tentatively planned for Q1 of 2022. Mike updating his demo instance provided to the community as issues arise so that the community has an updated bleeding edge version of Fineract running all the time. Mifos Initiative also has an alternate demo instance available for testing with the latest Mifos X versions. Petri has improved the following components over the past few weeks: Moved our CI pipeline to Github action away from Travis which has made us see an improvement in review and build time on Github. Upgrade from Jersey 1.x to 2.x containing the latest changes and improvements making Fineract more stable. Improved test coverage of key components, Upgrade to Spring Boot 2.6.x, Moved us away from XML-based config to Java Configuration which offers better code maintenance. Automatic inclusion of 3rd party licenses in the distribution, Completely ditch the use of Drizzle JDBC Driver Petri, Aleks, and Mike have been actively reviewing pull requests from other contributors over the past few months. We have also had Francis Guchie doing QA and testing the functionalities together with the UI. Members of the community have been having important discussions around creating a roadmap of important features to be implemented over the next year especially around Fineract 1.x which is currently on active support given it has hundreds of deployments around the world. We have had contributors work to improve the build time of Fineract 1.x so that speed of development will reduce. ## Community Health: The community is healthy. We have seen an increase in the number of issues opened and closed as members of the community over the holidays have had time to contribute more than the usually do during peak day job working periods. ----------------------------------------- Attachment V: Report from the Apache Fluo Project [Keith Turner] ## Description: The mission of Apache Fluo is the creation and maintenance of software related to the storage and incremental processing of large data sets ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Fluo was founded 2017-07-18 (4 years ago) There are currently 13 committers and 13 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Karthick Narendran on 2020-04-16. - No new committers. Last addition was Karthick Narendran on 2020-04-17. ## Project Activity: * Discussions were initiated on which default Linux OS Muchos should move to, it currently uses Centos 7. Consensus has not been reached yet. * Some changes were made in Muchos in reaction to the Log4j exploit * Improvements were made to ELK setup in Muchos * Some issue w/ Centos 7 in Muchos were worked around. * Updates were made in Muchos to support changes in Accumulo 2.1.0-SNAPSHOT The last releases were : Fluo 1.2.0 : Feb 26 2018 Fluo Recipes : Mar 06, 2018 ## Community Health: There were 17 commits from 4 committers and 3 contributors. One of the contributors was a completely new contributor. There was more activity from more people than the last quarter. Discussion was initiated about inviting two contributors that have been active and so far everyone supports this. Will initiate a vote in a few days. ----------------------------------------- Attachment W: Report from the Apache Geronimo Project [Romain Manni-Bucau] ## Description: The mission of Geronimo is the creation and maintenance of software related to Java2, Enterprise Edition (J2EE) container ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Geronimo was founded 2004-05-26 (18 years ago) There are currently 71 committers and 41 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Francois Papon on 2021-03-09. - No new committers. Last addition was Francois Papon on 2021-03-09. ## Project Activity: We got some maintainance releases end of the year but the holdays and jakarta lack of activty made it quite low. It also seems Microprofile is getting abandonned by the community - in terms of activity due to its regular breaking changes but it can change in a few months when TomEE will get up to speed. Recent releases: - batchee-1.0.1 was released on 2021-10-31. - javamail_1.6-1.0.1 was released on 2021-10-28. - javamail_1.6_spec-1.0.1 was released on 2021-10-12. - arthur-1.0.3 was released on 2021-08-30 ## Community Health: The discussion/mail statistics followed the project activity, ie felt down, but nothing crazy for an end of year. We just need to monitor what will be the future of microprofile stack we host. ----------------------------------------- Attachment X: Report from the Apache Griffin Project [William Guo] ## Description: The mission of Apache Griffin is the creation and maintenance of software related to a data quality solution for big data, including both streaming and batch mode. It offers an unified process to measure data quality from different perspectives. ## Issues: - We are refactoring apache griffin to rule based architecture, so that griffin can be easily adapted by different companies. ## Membership Data: Apache Griffin was founded 2018-11-21 (3 years ago) There are currently 21 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Chitral Verma on 2020-05-06. - No new committers. Last addition was Chitral Verma on 2020-05-05. ## Project Activity: - Griffin 0.6.0 was released on 2020-11-09. - We are working on moving our compute engine to SQL based rather than raw API. ## Community Health: - dev@griffin had a 89% decrease in traffic in the past quarter (14 emails compared to 118) - 1 issue opened in JIRA, past quarter (no change) - 2 PRs opened on GitHub, past quarter (100% increase) ----------------------------------------- Attachment Y: Report from the Apache Hadoop Project [Wei-Chiu Chuang] ## Description: The mission of Hadoop is the creation and maintenance of software related to Distributed computing platform * hadoop-thirdparty is a set of internal artifacts used by the project to mitigate the impact of our dependency choices on the wider ecosystem. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Hadoop was founded 2008-01-16 (14 years ago) There are currently 236 committers and 121 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Xiaoqiao He on 2021-05-05. - Gautham Banasandra was added as committer on 2021-11-04 ## Project Activity: We've not had a new PMC member added for a while. Given the amount of traffic in the community I am pretty sure there are a number of good candidates out there that we should nominate. I sent an email to initiate the discussion. Release 3.3.2: RC0 was cut and dropped due to a number of issues. RC1 is being prepared. Release 3.2.3 is stalled. Notable feature development: * HADOOP-17124 Support LZO using aircompressor * HADOOP-18055 Async Profiler endpoint for Hadoop daemons * HADOOP-17979 Interface EtagSource to allow FileStatus subclasses to provide etags * YARN-11025 Implement distributed decommissioning ## Community Health: The overall mailing list traffic, Jira and Github activities were down, which is expected given the holiday season. * dev@hadoop.apache.org had a 100% decrease in traffic in the past quarter (0 emails compared to 6) * mapreduce-issues@hadoop.apache.org had a 59% decrease in traffic in the past quarter (87 emails compared to 208) * user@hadoop.apache.org had a 50% decrease in traffic in the past quarter (26 emails compared to 51) * user-zh@hadoop.apache.org had a 100% increase in traffic in the past quarter (6 emails compared to 3) * yarn-dev@hadoop.apache.org had a 26% decrease in traffic in the past quarter (349 emails compared to 466) * yarn-issues@hadoop.apache.org had a 39% decrease in traffic in the past quarter (751 emails compared to 1227) * 339 issues opened in JIRA, past quarter (-24% change) * 289 issues closed in JIRA, past quarter (-11% change) * 521 commits in the past quarter (-13% change) * 85 code contributors in the past quarter (-13% change) * 322 PRs opened on GitHub, past quarter (-9% change) * 281 PRs closed on GitHub, past quarter (-9% change) Statistics of the ASF slack channels: #hdfs: 151 users, up from 138. #hadoop: 160 users, up from 148. #yarn: 56 users, up from 52. ----------------------------------------- Attachment Z: Report from the Apache HAWQ Project [Lei Chang] ## Description: The mission of Apache HAWQ is the creation and maintenance of software related to a cloud native SQL query engine that combines the key technological advantages of an MPP database with the scalability and convenience of Hadoop ## Issues: There are no issues requiring board attention. ## Membership Data: Apache HAWQ was founded 2018-08-15 (3 years ago) There are currently 69 committers and 46 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Chiyang on 2021-01-01. - No new committers. Last addition was Wan Chiyang on 2021-02-20. ## Project Activity: 1. 3.0.0.0 was released on 2021-08-18 and now we are working on 3.1.0.0 release. 2. the recent major changes including: 1) improve resource management for analyze/copy/UDF, etc. 2) improve upgrade scripts for HAWQ. 3) enable plperl by default. 4) support multiple location for readable ext HDFS table. 5) enable heap table for HAWQ. 6) improve proxy query dispatcher. 7) fix bug for interconnect, pg_dump, regex, etc. ## Community Health: 1. Bunch of new features and bug fixes are committed, i.e., there are 25 issues and pr opened and closed in past quarter. 2. New PMC members are introduced to Apache HAWQ community. ----------------------------------------- Attachment AA: Report from the Apache HBase Project [Duo Zhang] ## Description: Apache HBase is an open-source, distributed, versioned, non-relational database. Apache HBase gives you low latency random access to billions of rows with millions of columns atop non-specialized hardware. hbase-thirdparty is a set of internal artifacts used by the project to mitigate the impact of our dependency choices on the wider ecosystem. hbase-connectors is a collection of integration points with other projects. The initial release includes artifacts for use with Apache Kafka and Apache Spark. hbase-filesystem contains HBase project-specific implementations of the Apache Hadoop FileSystem API. It is currently experimental and internal to the project. hbase-operator-tools is a collection of tools for HBase operators. Now it is mainly for hosting HBCK2. hbase-native-client is a client library in C/C++, in its early days. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache HBase was founded 2010-04-21 (12 years ago) There are currently 96 committers and 56 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Bharath Vissapragada on 2021-07-30. - Huang Zhuoyue was added as committer on 2021-10-14 ## Project Activity: Recent releases: hbase-thirdparty-4.0.1 was released on 2021-12-28. 2.4.9 was released on 2021-12-24. hbase-operator-tools-1.2.0 was released on 2021-12-24. 3.0.0-alpha-2 was released on 2021-12-23. hbase-thirdparty-4.0.0 was released on 2021-12-10. 2.4.8 was released on 2021-11-03. 1.4.14 was released on 2021-10-25. 2.3.7 was released on 2021-10-19. 2.4.7 was released on 2021-10-18. We have received a new donation and infra is currently setting up a new dedicated jenkins controller for us. https://s.apache.org/i1rox The HBASE-26067 feature branch has been merged back to master and branch-2. It makes HBase work better with cloud object stores which is very useful for the cloud users and is a big step on making HBase cloud native. https://issues.apache.org/jira/browse/HBASE-26067 https://issues.apache.org/jira/browse/HBASE-26584 https://s.apache.org/2slqr https://s.apache.org/nk6vr The HBASE-26233 feature branch has been merged back to master. It greatly reduces the latency of our region replication feature, and is also the first step of decoupling the WAL system and replication framework, which is very important for making HBase fully cloud native. https://issues.apache.org/jira/browse/HBASE-26233 https://s.apache.org/8q7h1 https://s.apache.org/die6s We were also affected by the log4j2 vulnerabilities. Luckily our stable release lines are still on log4j1. We released 3.0.0-alpha-2 and hbase-operator-tools-1.2.0 for addressing the vulnerabilities. In one of the release vote thread, the community members discussed whether we'd better switch to logback instead of log4j2, or make HBase 'logging framework free'. No decisions have been made so far. https://s.apache.org/r1lbk https://s.apache.org/53800 We have marked 2.3.x EOL and moved the stable pointer to 2.4.x. https://s.apache.org/gbm4b https://s.apache.org/5r5wq We have made the final 1.4.14 release for 1.4.x release line and marked 1.4.x EOL. https://s.apache.org/znnxw ## Community Health: - Mailing list activity: dev@hbase.apache.org: 955 subscribers(957 in the previous quarter) 897 emails sent to list(747 in the previous quarter) user@hbase.apache.org: 2010 subscribers(2017 in the previous quarter) 88 emails sent to list(95 in the previous quarter) user-zh@hbase.apache.org 72 subscribers(72 in the previous quarter) 10 emails sent to list(11 in the previous quarter) - JIRA activity: 308 issues opened in JIRA, past quarter (17% increase) 263 issues closed in JIRA, past quarter (19% increase) - Commit activity: 914 commits in the past quarter (39% increase) 61 code contributors in the past quarter (19% increase) - GitHub PR activity: 304 PRs opened on GitHub, past quarter (7% increase) 294 PRs closed on GitHub, past quarter (3% increase) The increase of the numbers is partly because we merged two feature branches back. And the log4j2 vulnerabilities also contribute extra traffic on our dev mailing list as we have to keep publishing new RCs when there are new log4j2 releases out. Currently we are looking forward on the first 2.5.x release and the first beta release for 3.0.0. ----------------------------------------- Attachment AB: Report from the Apache Hive Project [Ashutosh Chauhan] ## Description: The mission of Hive is the creation and maintenance of software related to Data warehouse infrastructure using the Apache Hadoop Database ## Issues: No issues requiring board attention this time. ## Membership Data: Apache Hive was founded 2010-09-21 (11 years ago) There are currently 101 committers and 51 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Marta Kuczora on 2021-08-02. - No new committers. Last addition was Marton Bod on 2021-07-13. One invitation is sent out for a committership. ## Project Activity: Last minor release was in July 2021. No releases from the project on hive 3 line for more than three years. Work in progress for maintenance release on 3.x line. ## Community Health: Activity is down on both dimensions of discussions (mailing lists) as well as dev activity (jira, PRs). Most of this can be attributed to holiday season. ----------------------------------------- Attachment AC: Report from the Apache Hop Project [Bart Maertens] ## Description: Apache Hop aims to facilitate all aspects of data and metadata orchestration. ## Issues: No known issues. ## Membership Data: Apache Hop was founded 2021-12-15 (a month ago) There are currently 19 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - number of followers on social media continues to grow ## Project Activity: After the 1.0 release (October 2021), Apache Hop started working on the graduation process. All references to "incubator" or "incubating" have been removed from code, config, infra and documentation. Simultaneously, the team started working on Hop 1.1.0, with well over 200 tickets processed so far. The cutoff point for the 1.1.0 release will be Jan, 14th. ## Community Health: The community continues to grow on all social media platforms. The number and type of contributions is increasing. Since Dec, 1st * 133 commits by 9 committers * chat: 256 (up from 243) * LinkedIn: 728 (up from 690) * Twitter: 578 (up from 545) * YouTube: 368 (up from 325) * Meetup: 215 (up from 211) ----------------------------------------- Attachment AD: Report from the Apache Incubator Project [Justin Mclean] # Incubator PMC report for January 2022 The Apache Incubator is the entry path into the ASF for projects and codebases wishing to become part of the Foundation's efforts. There are presently 37 podlings incubating. In December, podlings executed 8 distinct releases. We added no new IPMC members, and none retired. There where 2 IP clearances. A couple of new podlings are under discussion, and HugeGraph will be joining the Incubator. Hop graduated last month. A couple of podlings are heading towards graduation in the next few months. This month we were missing reports from BlueMarlin, EventMesh, Hivemall, Livy, MXNet, SDAP, SeaTunnel, Spot, Training and they will be asked to report next month. January is typically a month we get several missing reports due to holidays. Hivemall, Livy, SDAP, Spot and Training have failed to report several times in a row, a role call or other appropriate action will be taken, including suggesting (in some cases), they should retire from the Incubator. Spot did respond to its role call, and showed interest in continuing. It does at least have 3 active PMC members but little or no activity. Discussion around Age graduating suggested it was a little too early. They needed to correct several minor things, including considering a wider group of committers and lowering their committer bar. The PMC composition required a little work as well. A discussion on bringing log 4j 1.x to the Incubator took place, and it was decided that the Incubator was not the right place for this project. As usual, most discussions on the mailing list were on graduations, releases, and new project proposals. ## Community ### New IPMC members: - None ### People who left the IPMC: - None ## New Podlings - None, but vote underway for HugeGraph ## Podlings that failed to report, expected next month ## Graduations - Hop The board has motions for the following: - None ## Releases The following releases entered distribution during the month of November: - Age 0.6.0 - Brpc 1.0.0 - EventMesh 1.3.0 - InLong 0.12.0 - Kyuubi 1.4.0 - MXNet 1.9.0 - Yunikorn 0.12.1 - Wayang 0.6.0 ## IP Clearance - Apache Arrow Julia library - Apache Maven - Mvndaemon ## Legal / Trademarks N/A ## Infrastructure N/A ## Miscellaneous N/A ## Table of Contents [Annotator](#annotator) [DataLab](#datalab) [Flagon](#flagon) [InLong](#inlong) [Kyuubi](#kyuubi) [Liminal](#liminal) [Milagro](#milagro) [NuttX](#nuttx) [PageSpeed](#pagespeed) [Pegasus](#pegasus) [PonyMail](#ponymail) [ShenYu](#shenyu) [Teaclave](#teaclave) [YuniKorn](#yunikorn) [Linkis](#linkis) -------------------- ## Annotator Annotator provides annotation enabling code for browsers, servers, and humans. Annotator has been incubating since 2016-08-30. ### Three most important unfinished issues to address before graduating: 1. Build community 2. Maintain a regular release cadence 3. Grow the PPMC and committer groups ### Are there any issues that the IPMC or ASF Board need to be aware of? None at this time. Three most important issues are unchanged from the last report. ### How has the community developed since the last report? There has been little activity around the project in the end of 2021. ### How has the project developed since the last report? Since the last board report, some work on release automation and and packaging has been completed, but no major feature work. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-09-03 ### When were the last committers or PPMC members elected? 2018-09-04 ### Have your mentors been helpful and responsive? No issues at this time. ### Is the PPMC managing the podling's brand / trademarks? The PPMC is not aware of any branding issues at this time. ### Signed-off-by: - [X] (annotator) Nick Kew Comments: Project seems quiet. Will prod them. - [ ] (annotator) Tommaso Teofili Comments: - [ ] (annotator) Benjamin Young Comments: ### IPMC/Shepherd notes: -------------------- ## DataLab DataLab is a platform for creating self-service, exploratory data science environments in the cloud using best-of-breed data science tools. DataLab has been incubating since 2018-08-20. ### Three most important unfinished issues to address before graduating: 1. Finish preparing all artifacts necessary for graduation 2. 3. ### Are there any issues that the IPMC or ASF Board need to be aware of? No issues. ### How has the community developed since the last report? We have new committers: Oleh Mykolaishyn, Marian Hladun, Ruslan Kulynych. ### How has the project developed since the last report? - We've started voting process for release 2.5.1. - We are working towards the next release. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [ ] Community building - [X] Nearing graduation - [X] Other:working towards next release ### Date of last release: 2021-09-08 ### When were the last committers or PPMC members elected? The last committers was added on December 22, 2021. ### Have your mentors been helpful and responsive? Yes, our mentors are very helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? There are no knowing any mentioned issues above. Project name was approved. ### Signed-off-by: - [ ] (datalab) P. Taylor Goetz Comments: - [ ] (datalab) Henry Saputra Comments: - [ ] (datalab) Konstantin I Boudnik Comments: - [X] (datalab) Furkan Kamaci Comments: ### IPMC/Shepherd notes: -------------------- ## Flagon Flagon is a software tool usability testing platform Flagon has been incubating since 2016-07-13. Flagon has been incubating since 2016-07-13. ### Three most important unfinished issues to address before graduating: 1. Continue VOTE thread for Graduation on general@incubator ### Are there any issues that the IPMC or ASF Board need to be aware of? None at this time. ### How has the community developed since the last report? - We expect 4 new committer VOTES in Q1 2022 following contributions into Apache Repos. - We are coordinating software gift from UMD for Flagon analytics package (Distill), via CCLA. ### How has the project developed since the last report? - We have committed minor enhancements to UserALE.js and have maintained the code base. We expect a new UserALE.js release (v 2.2.1) in Q1 2022. - Developments on analytical package (Distill) are currently being tested and will be committed to Apache repos in Q1 2022 (pending CCLA from UMD). - Ongoing development and design on visualization (Apache Superset) and continues. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [ ] Community building - [X] Nearing graduation - [ ] Other: ### Date of last release: 2021-06-03 Apache UserALE.js 2.2.0 ### When were the last committers or PPMC members elected? 2021-03-26 (Gedd Johnson) ### Have your mentors been helpful and responsive? Mentors remain supportive. ### Is the PPMC managing the podling's brand / trademarks? Yes. ### Signed-off-by: - [X] (flagon) Lewis John McGibbney Comments: - [X] (flagon) David Meikle Comments: - [ ] (flagon) Tim Allison Comments: - [X] (flagon) Furkan Kamaci Comments: ### IPMC/Shepherd notes: -------------------- ## InLong Apache InLong is a one-stop data ingestion platform that provides automatic, secure and reliable data transmission capabilities. InLong supports both batch and stream data processing at the same time, which offers great power to build data analysis, modeling and other real-time applications based on streaming data. InLong has been incubating since 2019-11-03. ### Three most important unfinished issues to address before graduating: 1.Improve and optimize the system to solve the system shortboard 2.Promote the system, to let more people use and participate in the community 3.Building a diverse community with open governance ### Are there any issues that the IPMC or ASF Board need to be aware of? No issues. ### How has the community developed since the last report? Since the last report, about 11 new contributors have joined the community (currently: 69), and some users have contributed some functional improvements and bug fixes; On October 31, an offline + online Inlong community building seminar was held to discuss with a number of experts on how to do a good job in the Inlong community We communicated and discussed with multiple teams in the field of data integration to jointly improve the feature set of data integration. ### How has the project developed since the last report? Since the last report, we have released versions 0.11.0 and 0.12.0. In addition to further lowering the user threshold, including supporting all modules of InLong to be deployed on Kubernetes, the official website has been refactored, and document translation and collation have been carried out to facilitate user access; in features of system features, in addition to continuing to build functions for each module, we also completed the use of Pulsar for full-process high-reliability data transmission, and add the data audit function for the data link. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-12-22 ### When were the last committers or PPMC members elected? committer: healchow 2021-11-26 PPMC: aloyszhang 2021-11-25 ### Have your mentors been helpful and responsive? Yes, our mentors are very helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? Yes, all good here. ### Signed-off-by: - [X] (inlong) Junping Du Comments: - [X] (inlong) Justin Mclean Comments: - [ ] (inlong) Sijie Guo Comments: - [ ] (inlong) Zhijie Shen Comments: - [ ] (inlong) Jean-Baptiste Onofré Comments: ### IPMC/Shepherd notes: -------------------- ## Kyuubi Kyuubi is a distributed multi-tenant Thrift JDBC/ODBC server for large-scale data management, processing, and analytics, built on top of Apache Spark and designed to support more engines. Kyuubi has been incubating since 2021-06-21. ### Three most important unfinished issues to address before graduating: 1. Gain more active contributors/committers to build a diverse community 2. Make Apache releases regularly and keep the quality for all releases 3. Improve project structure and documentation ### Are there any issues that the IPMC or ASF Board need to be aware of? None ### How has the community developed since the last report? - Adds two new Committers - 3 new contributors join code contribution. There are currently 57 contributors and 11 committers. - 19 authors have pushed 86 commits to master and 104 commits to all branches. On master, 337 files have changed and there have been 15,604 additions and 2,774 deletions. - Several discussions/bug reports on the GitHub Issues/WeChat groups, etc. - Participate in 1 online meetup (with Rokect MQ & Hudi together) to share kyuubi ### How has the project developed since the last report? - Release v1.4.0-incubating on 2021-12-10 ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: - 2021-12-10 ### When were the last committers or PPMC members elected? - 2021-12-15 Yang Hua - 2021-12-15 Dongdong Hong ### Have your mentors been helpful and responsive? - Mentors are helpful and always responsive. ### Is the PPMC managing the podling's brand / trademarks? Yes ### Signed-off-by: - [ ] (kyuubi) Willem Ning Jiang Comments: - [ ] (kyuubi) Jeff Zhang Comments: - [X] (kyuubi) Duo Zhang Comments: - [X] (kyuubi) Akira Ajisaka Comments: ### IPMC/Shepherd notes: -------------------- ## Liminal Apache Liminal is an end-to-end platform for data engineers and scientists, allowing them to build, train and deploy machine learning models in a robust and agile way. Liminal has been incubating since 2020-05-23. ### Three most important unfinished issues to address before graduating: 1. Grow developers community. 2. Adoption of the project by a few companies. 3. More features and integrations with eco-system projects. ### Are there any issues that the IPMC or ASF Board need to be aware of? NA ### How has the community developed since the last report? We have presented Liminal to few companies and received important feedback. We have held our first Liminal meetup and also presented in Pydata IL. In addition we got first PRs from a new guy. ### How has the project developed since the last report? We have worked on version 0.0.4, which will are released in 01/2022. This version among other features will introduce a coherent extensibility API and support in Airflow 2.0. We have also worked on 1 click installation in AWS cloud including provisioning of infrastructure and Liminal install. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-08-12 ### When were the last committers or PPMC members elected? NA ### Have your mentors been helpful and responsive? Very responsive and helpful. ### Is the PPMC managing the podling's brand / trademarks? NA ### Signed-off-by: - [ ] (liminal) Jean-Baptiste Onofré Comments: - [ ] (liminal) Henry Saputra Comments: - [ ] (liminal) Uma Maheswara Rao G Comments: - [ ] (liminal) Davor Bonaci Comments: - [ ] (liminal) Liang Chen Comments: ### IPMC/Shepherd notes: -------------------- ## Milagro Milagro is core security infrastructure and crypto libraries for decentralized networks and distributed systems. Milagro has been incubating since 2015-12-21. ### Three most important unfinished issues to address before graduating: 1. Continue to build relevant and useful crypto libraries and applications for decentralized networks in order to grow the ecosystem of users and contributors to the project. 2. Continue to improve compliance with the Apache Way. In particular to update the Milagro website and other project sites (e.g. Whimsy) in accordance with Apache policies. 3. Further releases to increase the scope of the Milagro project, extend the capability of existing releases and to demonstrate improved compliance with the Apache Way. ### Are there any issues that the IPMC or ASF Board need to be aware of? Administrative tasks are still outstanding due to members' other commitments and the pandemic. These include in particular, a PPMC meeting to discuss the project roadmap needs to be arranged, old releases need to be deleted, confirmation that the project's Whimsy, Clutch, SVN, Confluence & Committers pages are all current, and the code signing keys needs countersigning. Investigations into a redirect on Milagro's home page and an XSS vulnerability on the Decentralized Trust Authority's Swagger page are ongoing. ### How has the community developed since the last report? No change. ### How has the project developed since the last report? No change. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [X] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2020-02-10 ### When were the last committers or PPMC members elected? February 2020 ### Have your mentors been helpful and responsive? No issues. ### Is the PPMC managing the podling's brand / trademarks? No known issues, but further investigation is still required by the Milagro community. ### Signed-off-by: - [X] (milagro) Nick Kew Comments: - [X] (milagro) Jean-Frederic Clere Comments: ### IPMC/Shepherd notes: -------------------- ## NuttX NuttX is a mature, real-time embedded operating system (RTOS). NuttX has been incubating since 2019-12-09. ### Three most important unfinished issues to address before graduating: 1. Clear any potential infringing use of the NuttX trademark 2. Achieve a non-WIP Disclaimer release under Apache 3. Continue to grow the community with people from different background ### Are there any issues that the IPMC or ASF Board need to be aware of? The project has begun to discuss graduation to TLP and hopes to start this process in the near future. We would appreciate any helpful feedback that will assist us in taking this important step forward. ### How has the community developed since the last report? * Virtually all communications have moved from old venues to dev@nuttx.apache.org. The dev list contains 254 subscribers and is the home of most development discussions and user questions. * GitHub's PRs and Issues also have their own discussions. * We are seeing new contributors to the project through GitHub. * One contributor was added as a committer: Petro Karashchenko. ### How has the project developed since the last report? * We continue to make significant steps toward license clearing, needed for graduation. Most files have been cleared and now have the ASF header. * NuttX-10.2 was released on November 23, 2022. * Many technical improvements, bug fixes, and new architectures have been collaborated and work continues with several pull requests merged per day. * We have listened to the valuable feedback received during our previous releases and continue to improve our documentation. This can be found at https://nuttx.apache.org/docs/latest/. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [ ] Community building - [X] Nearing graduation - [ ] Other: ### Date of last release: NuttX-10.2.0 was released on 2022-11-23. ### When were the last committers or PPMC members elected? Last elected PPMC: 2021-05-08 Last committer added: 2022-12-27 ### Have your mentors been helpful and responsive? Mentors are helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? Podling name was approved on May 17th 2020: https://s.apache.org/4hfzx ### Signed-off-by: - [X] (nuttx) Duo Zhang Comments: - [X] (nuttx) Junping Du Comments: - [X] (nuttx) Justin Mclean Comments: - [ ] (nuttx) Mohammad Asif Siddiqui Comments: - [ ] (nuttx) Flavio Paiva Junqueira Comments: ### IPMC/Shepherd notes: -------------------- ## PageSpeed PageSpeed represents a series of open source technologies to help make the web faster by rewriting web pages to reduce latency and bandwidth. PageSpeed has been incubating since 2017-09-30. ### Three most important unfinished issues to address before graduating: 1. Grow the number of active developers 2. Enhance the release process: switch to github tagged release to simplify. ### Are there any issues that the IPMC or ASF Board need to be aware of? While there is a healthy user base, the number of active developers remains persistently low. This seems to be a hard to address challenge. ### How has the community developed since the last report? Mailing lists and git issues are active. The number of active developers is unchanged. ### How has the project developed since the last report? Minor activity. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: The week of May 11th, 2020 ### When were the last committers or PPMC members elected? May 27 2019 (Longinos Ferrando, elected as both committer and PMC member) ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? As far as we know the brand is respected by third parties. ### Signed-off-by: - [ ] (pagespeed) Jukka Zitting Comments: - [ ] (pagespeed) Leif Hedstrom Comments: - [X] (pagespeed) Nick Kew Comments: ### IPMC/Shepherd notes: -------------------- ## Pegasus Pegasus is a distributed key-value storage system which is designed to be simple, horizontally scalable, strongly consistent and high-performance. Pegasus has been incubating since 2020-06-28. ### Three most important unfinished issues to address before graduating: 1. Grow the community, attracting more users, contributors and committers 2. Resolve the license problems 3. Publish more releases in ASF policy regularly ### Are there any issues that the IPMC or ASF Board need to be aware of? N/A ### How has the community developed since the last report? Since the last report, we have raised a online community communication on 2021-12-20. ### How has the project developed since the last report? Since the last report, we have published a new release 2.3.0 ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-11-26: Apache Pegasus (incubating 2.3.0) ### When were the last committers or PPMC members elected? New committer: Yanzhao Tang (2021-07-07) ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? Yes ### Signed-off-by: - [ ] (pegasus) Kevin A. McGrail Comments: - [X] (pegasus) Duo zhang Comments: - [ ] (pegasus) Liang Chen Comments: - [ ] (pegasus) Von Gosling Comments: - [ ] (pegasus) Liu Xun Comments: ### IPMC/Shepherd notes: -------------------- ## Pony Mail Pony Mail is a mail-archiving, archive viewing, and interaction service, that can be integrated with many email platforms. Pony Mail has been incubating since 2016-05-27. ### Three most important unfinished issues to address before graduating: 1. Growing the community 2. Cutting a Foal release 3. ### Are there any issues that the IPMC or ASF Board need to be aware of? None ### How has the community developed since the last report? No development since last. ### How has the project developed since the last report? Work continues on Foal at a good pace. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [X] Nearing graduation - [ ] Other: ### Date of last release: 2019-04-20 ### When were the last committers or PPMC members elected? Sean Palmer was voted in as committer on 2021-04-02 ### Have your mentors been helpful and responsive? No answer. ### Is the PPMC managing the podling's brand / trademarks? No answer. ### Signed-off-by: - [X] (ponymail) John D. Ament Comments: I think its time we just call it - the podling is stable, has some contributors, but wouldn't ever be a big project. Time to graduate already! - [X] (ponymail) Sharan Foga Comments: ### IPMC/Shepherd notes: -------------------- ## ShenYu ShenYu is a high performance Microservices API gateway in Java ecosystem, compatible with a variety of mainstream framework systems, it supports hot plugin loading. ShenYu has been incubating since 2021-05-03. ### Three most important unfinished issues to address before graduating: 1. Releasing more and more versions. 2. Well-organized documentation, license, branding, compliance with apache specifications. 3. Building a diverse community with open governance. ### Are there any issues that the IPMC or ASF Board need to be aware of? None. ### How has the community developed since the last report? * 23+ new contributors and 3+ new committer participate in the community since entered the last report. There are currently 234 contributors and 29 committers. * 180+ pull request since entered the last report. * Perform source code parsing and code refactoring activities. * Number of GitHub stars increased (last report: 5440, currently: 5752). * Held 4 community meetings to discuss development tasks and how to build an open governance community. ### How has the project developed since the last report? * Ready for release 2.4.2. * Add shenyu agent module. * Add jaeger, zipkin, opentelemetry plugin in shenyu agent. * Add MQTT plugin. * Add rpc context plugin. * Support https for upstream. * Support XML for shenyu clinet. * Support request mapping for shenyu clinet. * Support docker compose. * Support cluster for dubbo plugin. * Support spring cloud plugin in dist. * Support big file and image. * Support response data custom format. * Support consul and etcd register. * Support like query in shenyu admin. * Fix custom spi config. * Fix connection reset by peer bug. * Fix dubbo plugin parameter format error. * Fix oauth2 plugin failed. * Remove SpEL and Groovy match. * Refactor netty config in yaml. * Refactor shenyu client register metadata and uri order. * Refactor shenyu result. * Refactor shenyu admin. * Refactor integration test. * Refactor unit test. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [X] Other: ### Date of last release: Oct 2021. ### When were the last committers or PPMC members elected? Jan 2022 ### Have your mentors been helpful and responsive? Our mentors have been helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? The PPMC manages the podling's brand / trademarks. ### Signed-off-by: - [X] (shenyu) Willem Ning Jiang Comments: - [ ] (shenyu) Jincheng Sun Comments: - [X] (shenyu) Duo Zhang Comments: - [ ] (shenyu) Kevin Ratnasekera Comments: - [ ] (shenyu) Atri Sharma Comments: - [X] (shenyu) Justin Mclean Comments: ### IPMC/Shepherd notes: -------------------- ## Teaclave ### Three most important unfinished issues to address before graduating: - Improve project structure and documentation - Grow the community (attracting more committers, contributors, users) - Publish Apache releases (resolving logistics on Apache release) ### Are there any issues that the IPMC or ASF Board need to be aware of? None. ### How has the community developed since the last report? Since the last report, we have organized two montly virtual meetups. For each meetup, we have write-ups published on the Teaclave blog. - Teaclave Meetup #8: - Teaclave Meetup #9: We also published a security advisory on a recent vulnerability on Intel SGX SDK. - SECURITY ADVISORY OF SMASHEX AND CVE-2021-0186: To promote the recent TrustZone SDK in the Chinese community, we published a blog on getting started with the SDK for newcomers. - 使用 TEACLAVE TRUSTZONE SDK 开发 TRUSTZONE 应用: ### How has the project developed since the last report? Here are the summaries of recent progress: Teaclave Faas Platform - [docker] start Teaclave docker services with auto-detection mechanism - Support selectively including executors (#574) - Optimize RPC memory footprint of serde (#577) - Persistent MockDB in test mode. (#580) - Flush DB and compact_range after dequeue operation - API updates (#588): UpdateFunction, ListFunciton, DeleteFunction, UserUpdate, UserRegister, UserUpdate - Introduce role-based user management and access control - Bug fixes and code refactoring Teaclave TrustZone SDK - Update Rust toolchain to nightly-2021-09-20 an std to 1.56.1 Teaclave SGX SDK - Support Intel SGX SDK 2.15, DCAP 1.12 - Update rust toolchain to nightly-2021-11-01 Website - [blog] Teaclave Meetup #8: - [blog] Teaclave Meetup #9: - [blog] SECURITY ADVISORY OF SMASHEX AND CVE-2021-0186: - [blog] 使用 TEACLAVE TRUSTZONE SDK 开发 TRUSTZONE 应用: ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-08-23: Apache Teaclave (incubating) 0.3.0 ### When were the last committers or PPMC members elected? - 2021-09-20: Yuan Zhuang (Apache ID: yuanz), Committer - 2021-09-20: Rong Fan (Apache ID: fanrong), Committer ### Have your mentors been helpful and responsive? Yes, our mentors work responsively to help us with electing new mentors, developing new features, fixing bugs, and expanding the community. ### Is the PPMC managing the podling's brand / trademarks? We don't find any 3rd parties incorrectly using the podling's name and brand. The VP, Brand has approved the project name. (PODLINGNAMESEARCH-175) ### Signed-off-by: - [ ] (teaclave) Felix Cheung Comments: - [ ] (teaclave) Furkan Kamaci Comments: - [ ] (teaclave) Jianyong Dai Comments: - [ ] (teaclave) Matt Sicker Comments: - [ ] (teaclave) Zhijie Shen Comments: - [X] (teaclave) Gordon King Comments: ### IPMC/Shepherd notes: -------------------- ## YuniKorn YuniKorn is a standalone resource scheduler responsible for scheduling batch jobs and long-running services on large scale distributed systems running in on-premises environments as well as different public clouds. YuniKorn has been incubating since 2020-01-21. ### Three most important unfinished issues to address before graduating: 1. Increase the number of contributors and committers. 2. Improve the ease of deployment and provide upgrade support. 3. Release process and planning improvements. ### Are there any issues that the IPMC or ASF Board need to be aware of? No issues at this point in time. ### How has the community developed since the last report? Two new mentors added. A new PPMC member and committer added. Two new committers were invited and have accepted but not announced yet. Multiple new contributors added to the community. Released v0.12.1, work on v1.0.0 is in progress. ### How has the project developed since the last report? Working towards a v1.0 release. Major changes planned for the release to limit tech debt in the future. Some statistics for the report period (2021-10-01 till 2021-12-31): JIRA: 121 created, 115 resolved PRs: 105 opened, 102 resolved 18 unique active code contributors (cumulative for all repos) ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [ ] Community building - [X] Nearing graduation - [ ] Other: ### Date of last release: 2021-12-26 ### When were the last committers or PPMC members elected? 2021-12-21 & 2021-12-23 committers elected 2021-12-18 PPMC member elected ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? No issues that we are aware of. ### Signed-off-by: - [X] (yunikorn) Junping Du Comments: - [X] (yunikorn) Felix Cheung Comments: - [X] (yunikorn) Jason Lowe Comments: - [X] (yunikorn) Holden Karau Comments: - [X] (yunikorn) Wei-Chiu Chuang Comments: - [X] (yunikorn) Luciano Resende Comments: ### IPMC/Shepherd notes: -------------------- ## Linkis Apache Linkis is a computation middleware project, which decouples the upper applications and the underlying data engines, provides standardized interfaces (REST, JDBC, WebSocket etc.) to easily connect to various underlying engines (Spark, Presto, Flink, etc.). Linkis has been incubating since 2021-08-02. ### Three most important unfinished issues to address before graduating: - Improve project infrastructure(CI, CD, test automation, etc.) and structure to facilitate community collaboration - Make Apache releases regularly and keep the quality for all releases - Gain more active contributors and committers to build a diverse community ### Are there any issues that the IPMC or ASF Board need to be aware of? None. ### How has the community developed since the last report? * 73 issues and 93 pull requests since last report(2021/11/18).( issues:total/closed/open 585/415/170,pr: total/closed/open 511/486/25) * 79 GitHub stars increased (last report: 2283, currently: 2361). * Prepare for the release of version 1.0.3, complete material preparation and voting mail preparation, etc. ### How has the project developed since the last report? * Apache release 1.0.3 under development, progress 95%. * Linkis website under development, progress 100%. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2021-09-02 ### When were the last committers or PPMC members elected? 2021/08 ### Have your mentors been helpful and responsive? Our mentors have been helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? The PPMC manages the podling's brand / trademarks. ### Signed-off-by: - [X] (linkis) Duo Zhang Comments: - [ ] (linkis) Lidong Dai Comments: - [ ] (linkis) Shaofeng Shi Comments: - [ ] (linkis) Saisai Shao Comments: - [X] (linkis) Junping Du Comments: ### IPMC/Shepherd notes: ----------------------------------------- Attachment AE: Report from the Apache Isis Project [Johan Doornenbal] ## Description: The mission of Isis is the creation and maintenance of software related to Framework for rapidly developing domain-driven apps in Java ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Isis was founded 2012-10-17 (9 years ago) There are currently 15 committers and 15 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Jörg Rade on 2020-04-12. - No new committers. Last addition was Jörg Rade on 2020-03-23. ## Project Activity: There continues to be substantial development work on v2.0, with the framework being "re-platformed" to run on top of Spring Boot. We had hoped to deliver a final M7 milestone before the end of the year, but missed that target. We fully expect that to be delivered this quarter. The M7 release includes some quite deep simplifications and refinements of the programming model that we are looking forward to using ourselves! After that the plan remains to move to RCs for final bugfixes. We then look to the project rename, mentioned in previous reports. ## Community Health: This is a mature project. The framework is generally stable. While there is little activity on the mailing lists, there is frequent activity on the Slack channel (more on this topic below). We do recognise that the community engagement is below a sustainable level, but have high hopes for 2.0 (with its switch to defacto standards such as Spring Boot and JPA) to reinvigorate the community; if we decide to rename the project then this will be more like relaunch. We have now started submitting talks to a number of conferences to start the "marketing" effort later this year. ## Comments requested: While we've been enjoying using Slack as an additional means to support the community, we recently discovered that Slack is now only "invite only", thus likely to be a barrier to participation. We note that the Camel project provides a link to Zulip (https://camel.zulipchat.com/login/). We do understand that the mailing list must remain the official communication channel, but is there anything in the ASF byelaws to prevent us from following Camel's lead? Separately, a number of committers and PMC members are no longer involved in the project... of the 15, there is a core of 4 who are still actively involved. We know that ASF doesn't support the notion of "emeritus" members. As we are considering a rename, would it even be worthwhile to archive the project and the kick off its successor as a new project in the incubator? ----------------------------------------- Attachment AF: Report from the Apache James Project [Benoit Tellier] ## Description: The Apache James Project delivers a rich set of open source modules and libraries, written in Java, related to Internet mail which build into an advanced extensible mail server running on the JVM. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache James was founded 2003-01-22 (19 years ago) There are currently 40 committers and 16 PMC members in this project. The Committer-to-PMC ratio is 5:2. Community changes, past quarter: - No new PMC members. Last addition was Antoine Duprat on 2016-03-11. - Karsten Otto was added as committer on 2022-01-08 ## Project Activity: Recent releases: - JAMES-3.6.1 was released on 2021-12-19. - MIME4J-0.8.6 was released on 2021-09-26. - MIME4J-0.8.5 was released on 2021-07-09. Since 3.6.1 the PMC enables download of the compiled Distributed server, and of the JPA server. The PMC tackled several vulnerabilities, fixed in 3.6.1, namely: - CVE-2021-38542: Apache James vulnerable to STARTTLS command injection (IMAP and POP3) - CVE-2021-40110: Apache James IMAP vulnerable to a ReDoS - CVE-2021-40111: Apache James IMAP parsing Denial Of Service - CVE-2021-40525: Apache James: Sieve file storage vulnerable to path traversal attacks The PMC is currently working on the following topics: - Having a MailQueue backed by Apache PULSAR (solves scalability issues, enables delays) - Experiment with stronger authentication schemes (OIDC) for both JMAP, IMAP and SMTP protocols. - Complete our JMAP implementation. Work was conducted to enable identity management and Web Push. ## Community Health: server-user@james.apache.org had a 59% increase in traffic in the past quarter (67 emails compared to 42) What is really encouraging is that we see new users starting answering each others. This translate to a greater contributor diversity: 14 code contributors in the past quarter (55% increase) We now need to encourage these new users to engage on discussions on the developper mailing list and on the JIRA. server-dev@james.apache.org had a 50% decrease in traffic in the past quarter (318 emails compared to 636) 36 issues opened in JIRA, past quarter (-33% change) ----------------------------------------- Attachment AG: Report from the Apache jclouds Project [Andrew Gaul] == Project Status == Project successfully released 2.4.0 in Q3 2021. The team fixed some modern Java incompatibilities and resolved to streamline the release process by dropping the labs packages. There are no issues requiring board attention. == Community == We continue to merge fixes from the community. Apart from this the overall activity remains low. Last committer: 2018-07-23 (Daniel Estevez) Last PMC member: 2021-03-14 (Jean-Baptiste Onofré) == Community Objectives == Release 2.5.0 in Q1 2022. == Releases == The last major jclouds release, 2.4.0, took place on 2021-09-10. The last bugfix release, 2.2.1, took place on 2020-05-14. ----------------------------------------- Attachment AH: Report from the Apache Jena Project [Andy Seaborne] ## Description: The mission of Jena is the creation and maintenance of software related to Java framework for building Semantic Web applications ## Issues: There are no issues requiring board attention. In the last report, there was a board comment: """ bd: "Jena has a process for retiring modules: delete in git..." I'm not sure what you mean by "delete" but I think Apache code should remain available and easy to find "forever". """ Jena develops and releases from a single git repository with several maven modules. The source-release is produced using the Apache Parent POM and so it is a copy of the current state of the checked-out code of the repository at the release point. When we deprecate a module we use "git rm" and insert a README file informing users of the last point in Git history at which it can be obtained. See for example: https://github.com/apache/jena/tree/main/jena-spatial. ## Membership Data: Apache Jena was founded 2012-04-18 (10 years ago). There are currently 18 committers and 14 PMC members in this project. The Committer-to-PMC ratio is 9:7. Community changes, past quarter: - No new PMC members. Last addition was Aaron Coburn on 2019-01-22. - No new committers. Last addition was Greg Albiston on 2019-07-08. ## Project Activity: Releases: Jena 4.3.0 -- 2021-12-09. Jena 4.3.1 -- 2021-12-13. Jena 4.3.2 -- 2021-12-19. The day after Jena 4.3.0 was released, Log4jShell was announced. The PMC confirmed that Jena was vulnerable and stated the release of 4.3.1 the same day. Jena 4.3.1 released using the usual voting schedule. The PMC also agreed how to have a fast-track release should it be needed in the future. This was used for Jena 4.3.2 with log4j2 updated again. ## Community Health: There has been a significant increase in discussions about upgrading. The development community has been experimenting with loading wikidata (a large dataset from the Wikimedia foundation). This feedback has been used to improve the bulk loading of data into a jena RDF database. There is a new UI for the Jena Fuseki triplestore which replaces the quite old javascript with a more modern development process making it easier to keep the code up-to-date. ----------------------------------------- Attachment AI: Report from the Apache JMeter Project [Bruno Demion] ## Description: The mission of JMeter is the creation and maintenance of software related to Java performance and functional testing ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache JMeter was founded 2011-10-26 (10 years ago) There are currently 13 committers and 8 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Vladimir Sitnikov on 2018-06-08. - No new committers. Last addition was Maxime Chassagneux on 2017-02-15. ## Project Activity: - The project continue to fix some bugs and add some improvements. - The project prepare next major release (5.5) ## Community Health: - The project has a normal activity during last quarter, and release 2 minors version against the security issues related to Apache Log4J (CVE-2021-44228, CVE-2021-45105). ## Project Release Activity: Recent releases: 5.4.3 final was released on 2021-12-24. 5.4.2 final was released on 2021-12-16. ----------------------------------------- Attachment AJ: Report from the Apache Johnzon Project [Romain Manni-Bucau] ## Description: The mission of Johnzon is the creation and maintenance of software related to JSR-353 compliant JSON parsing; modules to help with JSR-353 as well as JSR-374 and JSR-367 ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Johnzon was founded 2016-04-20 (6 years ago) There are currently 8 committers and 6 PMC members in this project. The Committer-to-PMC ratio is 4:3. Community changes, past quarter: - No new PMC members. Last addition was Reinhard Sandtner on 2016-08-30. - No new committers. Last addition was Jonathan Gallimore on 2018-05-09. ## Project Activity: We got a maintenance release end of october but project is quite stable. We mainly enhanced our JSON-P/JSON-Schema ecosystem, fixed a few bugs and started to align on the next jakarta requirements but more is coming. Recent releases: - 1.2.15 was released on 2021-10-28. - 1.2.14 was released on 2021-07-05. - 1.2.13 was released on 2021-06-06. ## Community Health: Community activity is quite stable in terms of volume even if we got a bit more dev@ discussions. ----------------------------------------- Attachment AK: Report from the Apache JSPWiki Project [Juan Pablo Santos Rodríguez] ## Description: The mission of JSPWiki is the creation and maintenance of software related to Leading open source WikiWiki engine, feature-rich and built around standard JEE components (Java, servlets, JSP). ## Issues: There are no issues requiring board attention. ## Membership Data: Apache JSPWiki was founded 2013-07-17 (8 years ago) There are currently 14 committers and 8 PMC members in this project. The Committer-to-PMC ratio is 7:4. Community changes, past quarter: - No new PMC members. Last addition was Dave Koelmeyer on 2016-04-06. - No new committers. Last addition was Dave Koelmeyer on 2016-04-06. ## Project Activity: After almost a year since last release, this quarter we managed to finally release 2.11.0. A few days after that, we had to release 2.11.1, to address recent log4j2 rce vulnerability. Aside from the releases, dev activity has been focused on providing support for markdown inside JSPWiki. Currently we have a parser and a renderer, and we need to add support for both plain and WYSIWYG editors. For the latter, there's a refactor ongoing, which should be completed soon. 2 vulnerability disclosures were published and fixed in 2.11.0, we have a couple more, one being worked on, the other one still needing investigation. Finally there was a discuss thread on moving from jira to github issues, but got nowhere, so we'll stick with jira for now. ## Community Health: Traffic on both MLs had an increase compared with last quarter, due to both releases and the increased number of commits that were pushed this quarter. There is enough people to provide project oversight. ----------------------------------------- Attachment AL: Report from the Apache Kudu Project [Andrew Wong] ## Description: The mission of Apache Kudu is the creation and maintenance of software related to a distributed columnar storage engine built for the Apache Hadoop ecosystem. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Kudu was founded 2016-07-19 (5 years ago) There are currently 27 committers and 27 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Bankim Bhavsar on 2020-04-17. - No new committers. Last addition was Bankim Bhavsar on 2020-04-17. ## Project Activity: - A thread has been started to kickstart the 1.16.0 release. - 1.15.0 was released on 2021-06-22. - 1.14.0 was released on 2021-01-27. - 1.13.0 was released on 2020-09-17. ## Community Health: - Traffic to dev@kudu.apache.org had a 66% increase this past quarter, due to initial messaging around the start of the coming 1.16.0 release process. - Public IM activity over the community Slack channel is down slightly, measured by daily active users (-15%) and weekly active users (-10%). - Development activity measured in the number of commits stayed steady (-4%), though with a dip in number of unique contributors (-26%). - Development activity measured by closed issues has increased (+45%), likely as a push to land bug fixes in before the release. - Website traffic increased slightly, with +11.8% measured number of users and +2.8% sessions in the last 90 days, according to Google Analytics. ----------------------------------------- Attachment AM: Report from the Apache MADlib Project [Aaron Feng] ## Description: - Apache MADlib is a scalable, big data, SQL-driven machine learning framework for data scientists. ## Issues: - There are no issues requiring board attention at this time. ## Activity: - Release 1.18.0 occurred on Apr 5, 2021 which was the 8th release as an Apache TLP project. - Community is working on the 1.19.0 release including the following JIRAs: * WCC: Optimize subtx count and catalog entry frequency * next phase of DBSCAN clustering algorithm * Deep learning minor fixes * multilayer perceptron - added Adam and RMSprop optimizers * Fix build failures for PMML and gppkg ## Health report: The community is relatively small but very engaged with robust mailing list traffic, interest in doing frequent releases and new functionality being developed by contributors. The number of developers actively contributing to the code/documentation is approximately 3 in the 1st quarter of calendar year 2022. We will constantly be on a lookout for new community members to be invited either as committers or PMC. ## PMC changes: - Currently stands at 16 PMC members, no new members added since last report - The most recent PMC members added were: Ekta Khanna (Feb 2021) Domino Valdano (Feb 2021) ## Committer base changes: - Currently 17 committers, no new committers since last report. - The most recent committers added were: Ekta Khanna (2019-07-27) Himanshu Pandey (2019-07-27) Domino Valdano (2019-07-27) ## Releases: - Next release: Currently working on v1.19.0 - v1.18.0 released on 2021-04-05 - v1.17.0 released on 2020-04-09 - v1.16.0 released on 2019-07-08 ## Mailing list activity: Mailing list activity was 4 posts to dev@ and 4 posts to user@ for the last 3 months Oct-Jan 2022. ## JIRA Statistics: - 2 JIRA tickets created in the 3 months - 3 JIRA ticket resolved in the 3 months ----------------------------------------- Attachment AN: Report from the Apache Mahout Project [Trevor Grant] ## Description: The mission of Mahout is the creation and maintenance of software related to Scalable machine learning library ## Issues: The project has no specific issues other than Matrix Math on large distributed matrices is a bit of a niche problem which makes it difficult to attract users and contributors, PMC is working on this- no outside assistance is requested at this time. ## Membership Data: Apache Mahout was founded 2010-04-20 (12 years ago) There are currently 28 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Trevor Grant on 2017-02-03. - No new committers. Last addition was Christofer Dutz on 2020-06-08. ## Project Activity: 14.1 was released on 2020-10-07. Since the last report there has been sporadic activity on and a feature branch cut for Python bindings. There was a marked increase in mailing list activity due to discussions around Log4j vulnerability (we're OK since we're still on 1.x), as well as attempts to reboot the community calls. ## Community Health: As stated in the last section mailing list activity was up - 200% on dev@ and 300% on user@ however take these metrics with a grain of salt as they more tell how slow mailing list traffic was last quarter. PMC have been having discussions on how to re-invigorate the project and attract new users / committers as well as planning talks that will give us exposure at upcoming conferences. ----------------------------------------- Attachment AO: Report from the Apache Maven Project [Robert Scholte] ## Description: The mission of Maven is the creation and maintenance of software related to Java project management and comprehension tools ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Maven was founded 2003-03-01 (19 years ago) There are currently 66 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. Community changes, past quarter: - No new PMC members. Last addition was Mark Struberg on 2019-12-27. - Gazda was added as committer on 2022-01-10 - Slawomir Jaranowski was added as committer on 2021-12-13 ## Project Activity: Last Maven Release: 3.8.4 (2021-11-14) Plugins/Extensions (ordered by date) Maven Plugin Plugin 3.6.2 was released on 2021-11-21. Maven PDF Plugin 1.5.1 was released on 2021-11-28. Maven Artifact Plugin 3.2.0 was released on 2021-11-30. Maven Site Plugin 3.10.0 was released on 2021-12-22. Maven Deploy Plugin 3.0.0-M2 was released on 2021-12-27. Maven Archetype Plugin 3.2.1 was released on 2021-12-30. Maven Release Plugin 3.0.0-M5 was released on 2022-01-02. Maven JAR Plugin 3.2.1 was released on 2022-01-05. Maven JAR Plugin 3.2.2 was released on 2022-01-08. Maven Compiler Plugin 3.9.0 was released on 2022-01-09. Other (ordered by date) Maven Resolver Ant Tasks 1.4.0 was released on 2021-11-20. Maven Plugin Tools 3.6.2 was released on 2021-11-21. Maven Doxia 1.11.1 was released on 2021-11-28. Maven Fluido Skin 1.10.0 was released on 2021-11-30. Maven Doxia Sitetools 1.11.1 was released on 2021-12-12. Maven Wrapper 3.1.0 was released on 2021-12-16. Maven Wagon 3.5.0 was released on 2021-12-19. Maven Resolver 1.7.3 was released on 2021-12-19. Maven Wagon 3.5.1 was released on 2021-12-23. Maven SCM 1.12.2 was released on 2021-12-28. Maven Archiver 3.5.2 was released on 2022-01-02. Maven SCM 2.0.0-M1 was released on 2022-01-08. ## Community Health: Maven was not hit by the Log4J vulnerabilities, as it uses SLF4J simple-logger. The 3 adopted projects maven-wrapper, maven-build-cache and maven-daemon have been the most active repositories. The first one aims on building a Maven project without the need of having Maven installed on your system, the other two aim on faster builds. ----------------------------------------- Attachment AP: Report from the Apache Mesos Project [Qian Zhang] ## Description: The mission of Mesos is the creation and maintenance of software related to a cluster manager that provides efficient resource isolation and sharing across distributed applications ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Mesos was founded 2013-06-19 (9 years ago) There are currently 50 committers and 50 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Charles-François Natali on 2021-08-08. - No new committers. Last addition was Charles-François Natali on 2021-08-07. ## Project Activity: The main activities in this quarter were mainly on fixing bugs, improving CLI and discussing the potential impact of the Log4J issue. ## Community Health: We had a new code contributor (Thomas Langé) joined who contributed a PR in this quarter, but overall the community is not active. ----------------------------------------- Attachment AQ: Report from the Apache MINA Project [Guillaume Nodet] ## Description: The mission of MINA is the creation and maintenance of software related to Multipurpose Infrastructure for Network Application ## Issues: There are no issues requiring board attention. ## Membership Data: Apache MINA was founded 2006-10-25 (15 years ago) There are currently 28 committers and 14 PMC members in this project. The Committer-to-PMC ratio is 2:1. Community changes, past quarter: - No new PMC members. Last addition was Thomas Wolf on 2021-09-30. - No new committers. Last addition was Thomas Wolf on 2020-09-23. ## Project Activity: Recent releases: - Apache MINA FTPServer 1.1.2 was released on 2022-01-03. - Apache Mina SSHD 2.8.0 was released on 2021-12-03. - Apache MINA 2.0.22 was released on 2021-10-29. - Apache MINA 2.1.5 was released on 2021-10-29. The FTPServer release is a follow-up to the recent log4j CVE and the MINA 2.0.22 and 2.1.5 releases are also security releases. ## Community Health: No particular issues nor change. The activity is low but the community is healthy. ----------------------------------------- Attachment AR: Report from the Apache MyFaces Project [Bernd Bohmann] ## Description: The mission of MyFaces is the creation and maintenance of software related to JavaServer(tm) Faces implementation and components ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache MyFaces was founded 2005-02-23 (17 years ago) There are currently 80 committers and 46 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Henning Nöth on 2021-06-01. - No new committers. Last addition was Melloware on 2021-05-11. ## Project Activity: - Apache MyFaces Core the community is working on Faces 4.0 and some refactoring. - Apache Tobago the community is working on release 5.0.0 and Jakarta EE 9(tobago-6.x). - Recent releases: tobago-5.0.0 was released on 2021-10-31 ## Community Health: - Apache MyFaces Core is healthy. UI-Component Sets: - Apache Tobago is healthy. - Apache Trinidad is in maintenance mode. Last developer commit was Sept 2017. - Myfaces Tomahawk is in maintenance mode. Last developer commit was May 2016. Last commit on behalf of a contributor was May 2016. Add-ons and Extensions: - Apache MyFaces Portlet Bridge is in maintenance mode. Last developer commit was Jan 2014. Last commit on behalf of a contributor was May 2015. - Apache MyFaces CODI is in maintenance mode. CODI was replaced by Apache DeltaSpike so new development happens there. Last commit March 2014. - Apache MyFaces Orchestra is in maintenance mode. New projects use CDI and DeltaSpike instead. Last commit on behalf of a contributor was August 2016. - Apache MyFaces ExtVal is in maintenance mode. Last commit June 2014. - Apache MyFaces Commons is in maintenance mode. Last commit August 2012. - Apache MyFaces Ext-Scripting is in maintenance mode. Last commit Sept 2017. - Apache MyFaces Test is in maintenance mode (Used by Myfaces Core). Last commit May 2017. ----------------------------------------- Attachment AS: Report from the Apache NiFi Project [Joe Witt] ## Description: The mission of NiFi is the creation and maintenance of software related to providing an easy to use, powerful, and reliable system to process and distribute data. Apache NiFi MiNiFi is an edge data collection agent built to seamlessly integrate with and leverage the command and control of NiFi. There are both Java and C++ implementations. Apache NiFi Registry is a centralized registry for key configuration items including flow versions, assets, and extensions for Apache NiFi and Apache MiNiFi. Apache NiFi Nar Maven Plugin is a release artifact used for supporting the NiFi classloader isolation model. Apache NiFi Flow Design System is a theme-able set of high quality UI components and utilities for use across the various Apache NiFi web applications in order to provide a more consistent user experience. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache NiFi was founded 2015-07-14 (6 years ago) There are currently 59 committers and 35 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was David Handermann on 2021-09-15. - Martin Zink was added as committer on 2021-11-09 - Margot Tien was added as committer on 2021-12-14 ## Project Activity: NiFi 1.15.0 was released Nov 8 2021. This release included more than 245 JIRAs including many features across Apache NiFi, MiNiFi Java, Stateless NiFi, the NiFi Registry. We have since released bug fix and security focused releases of NiFI 1.15.1 and 1.15.2 largely focused on dealing with the fallout from log4shell. The NiFi community was able to react quickly here and had minimal exposure. But we are also highly impressed with the actions of the Log4j community and they should be commended for how quickly they acted initially and thereafter. We are likely to produce an Apache NiFi 1.15.3 release soon with additional bug focused work and are nearing a 1.16.0 release with again many new features. We have also produced an Apache NiFi MiNiFi CPP release of version 0.11.0. The agents are now in use in many organizations and the project continues to evolve well. ## Community Health: Health remains strong. Across mailing lists, Slack, various social media and developer oriented sites we see continued strong activity. We saw the common season decline in activity throughout the Holidays but progress remains. We've continued to be highly active in releases and growing committership and expect this to continue in the coming quarters. The users mailing list activity did decline substantially in the quarter but we have more than 2,000 people in our general Slack channel and it is quite active. ----------------------------------------- Attachment AT: Report from the Apache Nutch Project [Sebastian Nagel] ## Description: Apache Nutch is a highly extensible and scalable open source web crawler software project based on Apache Hadoop® data structures and the MapReduce data processing framework. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Nutch was founded 2010-04-21 (11 years ago) There are currently 21 committers and 21 PMC members in this project. Community changes, past quarter: - No new committers and PMC members. Last addition was Shashanka Balakuntala Srinivasa on 2020-08-01. ## Project Activity: Work on Nutch 1.19 is ongoing with 30 Jira issues opened, 27 resolved during the last quarter. Ongoing work includes major dependency upgrades (Tika, log4j), a review of Nutch job metrics, improvements of the protocol layer to also include non-standard URL schemes (eg. smb). The migration of our website away from the Apache CMS to Hugo was finally done. ## Community Health: Contributions (Jira issues, commits, activity on the mailing lists) have shown an increase after a quiet summer quarter. ----------------------------------------- Attachment AU: Report from the Apache OODT Project [Imesha Sudasingha] ----------------------------------------- Attachment AV: Report from the Apache OpenJPA Project [Mark Struberg] ----------------------------------------- Attachment AW: Report from the Apache OpenMeetings Project [Maxim Solodovnik] ## Description: The mission of OpenMeetings is the creation and maintenance of software related to OpenMeetings: Web-Conferencing and real-time collaboration ## Issues: There are no issues requiring board attention. ## Membership Data: Apache OpenMeetings was founded 2013-01-25 (9 years ago) There are currently 30 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 8:7. Community changes, past quarter: - No new PMC members. Last addition was Ali Alhaidary on 2021-03-22. - No new committers. Last addition was Ali Alhaidary on 2021-04-07. ## Project Activity: The project is not very active, I still have not enough free time Bug fix releases are created regularly Recent releases: - 6.2.0 was released on 2021-10-24. - 6.1.0 was released on 2021-07-20. - 6.0.0 was released on 2021-03-08. ## Community Health: I believe we are healthy. Mails are being answered. JIRAs are processed. We can be more active, and hopefully we will :) ----------------------------------------- Attachment AX: Report from the Apache OpenNLP Project [Jeff Zemerick] ## Description: The mission of OpenNLP is the creation and maintenance of software related to Machine learning based toolkit for the processing of natural language text ## Issues: There are no issues requiring board attention. ## Membership Data: Apache OpenNLP was founded 2012-02-14 (10 years ago) There are currently 22 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Koji Sekiguchi on 2017-10-09. - No new committers. Last addition was Tim Allison on 2020-01-28. ## Project Activity: OpenNLP had a 1.9.4 release in November. This was a minor release that addressed mostly code refactoring and minor improvements. There are a few other pull requests that can be merged soon for another minor release. Work has made progress at integrating OpenNLP with newer NLP architectures and is trying to target it for a 2.0 release. ## Community Health: Project activity remains relatively low but healthy. There have been recent pull requests from new contributors and activity on the mailing lists remains low but consistent. ----------------------------------------- Attachment AY: Report from the Apache OpenOffice Project [Carl B. Marcum] ## DESCRIPTION Apache OpenOffice is an open-source office-document productivity suite. There are six productivity applications based around the OpenDocument Format (ODF) that are Writer, Calc, Impress, Draw, Math, Base. With limited support for other file formats, OpenOffice ships for Windows, macOS, Linux 64-bit, Linux 32-bit and in 41 languages. ### History 2020-10-24 - 300 million downloads of Apache OpenOffice (binary installation files) 2020-10-14 - 20 year anniversary of OpenOffice 2016-10-18 - 200 million downloads of Apache OpenOffice (binary installation files) 2014-04-17 - 100 million downloads of Apache OpenOffice (binary installation files) 2012-10-17 - Apache OpenOffice was established as Top Level Project (TLP) 2011-06-13 - OpenOffice.org was accepted as Incubator project in the ASF with the new name Apache OpenOffice ## SUMMARY Latest Release (4.1.11) was in October 2021. The community activity in general is on a low but sustainable level. A major obstacle is the complex code and build system. Therefore it is not easy for new people to gain a foothold into the code when the first build is hard to be done. There is recent activity to update the building guides to make it easier to get builds working. ## ISSUES FOR BOARD AWARENESS No issues ## RELEASES We are working in parallel on 2 release lines: 1) 4.2.0 is the next minor release, planned to be released into a beta phase. We have missed our goal on going into the beta in 2019. We managed only to solve the biggest blockers. Currently a new dev test version is released to be more widely tested. An alpha and/or beta release is planned for the next quarter. For that release we are improving the translation process. We are now able to sync our translation server Pootle with the code. Together with ASF Infra we were able to set up a new (updated) translate VM. At the moment we support 65 languages in Pootle. We plan to add some new languages to the 4.2.0 release. 2) We have released the planned security release 4.1.11 on October, 6th which we have dedicated to Patricia Shanahan. The motivation in still maintaining the 4.1.x release line is not very high. Therefore we will shut it down as soon as we have a stable release of 4.2.x. ## LATEST RELEASE HISTORY 2021-10-06 4.1.11 2021-05-04 4.1.10 2021-02-07 4.1.9 ## COMMITTER & PMC DATA In November we got the notice that Andrew "Drew" Jenson (atjensen), has passed away. He was a committer and PMC member since August 2011 but quiet since June 2021. There are currently 140 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 5:1. Community changes, past quarter: - No new PMC Last PMC member addition was on 2021-Oct-04 Arrigo Marchiori (ardovm). Last PMC member withdrawal was on 2021-Nov-07 Andrew "Drew" Jenson (atjensen) due to his passing. - No new committer Last committer addition was on 2020-Dec-24 Arrigo Marchiori (ardovm). Last committer withdrawal was on 2021-Nov-07 Andrew "Drew" Jenson (atjensen) due to his passing. ## COMMUNITY HEALTH AND DEVELOPMENT Community overall health is improving. With Arrigo Marchiori a new developer on the code has been accepted by the community. With the migration of the websites complete we now have an updated mobile device friendly theme for our project website. We have updated our automated testing framework and are also adding new tests. We have completed a project Mission Statement draft and will discuss the next steps to review it with the larger community. ### FOSDEM 2022 Conference The conference is online this year and talks are pre-recorded. OpenOffice has a developer room and we have had some talks accepted and volunteers are preparing them. The scheduled conference dates are February 5th and 6th. ## INFRASTRUCTURE Our Windows and Linux build bots are now migrated to new server. We are working on a Mac build bot in order to enhance our changes. The machine is sponsored by MacStadium. We are planning a new migration of our MWiki wiki.oo.o to a new VM. While updating, we also test OpenGrok to move to a container architecture. We are now publishing the Windows builds in the Microsoft Store (Windows 10/11). This is another way to reach Windows users - as our main user group - where they expect to find the official Apache OpenOffice software. ### Google Analytics Apache OpenOffice no longer uses Google Analytics on openoffice.org and is planning to remove it from our other websites. ## MARKETING Due to corona all live action marketing has been currently postponed. We have reorganized the flyer activity. Currently we are preparing material for the next year. ### Facebook We have one Volunteer representing Apache OpenOffice on Facebook. The activity is irregular. Most engagement is helping users with issues. Articles reach about 2.2K People. ### Twitter Our Twitter account is maintained by one person. ## DEVELOPMENT ### Apple Code Signing We have done one signed test build and the AOO 4.1.8 macOS DMG images are also signed. However since Apple has changed the standards, users may still see a Gatekeeper warning (this is due to the AOO 4.1.x builds requiring an older SDK). Signing is done manually but via scripting and follows Apple's preferred process: https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow ### Windows Code Signing We sign all Windows installer since the AOO 4.1.8 release. There is some discussion to switch from the current Installer to a MSI installer. But there are technical hurdles to be solved. Windows code signing is currently a manual process. ### Unmaintained Python 2 code Python 2 is unmaintained. We have in the development tree the external python3 support. Internal python 3 support is difficult. We are checking alternatives. Planned for the next major release. ### New ODF Version Our default file format, the Open Document Format, has received a new Standard update. We plan to support this format. ----------------------------------------- Attachment AZ: Report from the Apache ORC Project [Dongjoon Hyun] ## Description: The mission of ORC is the creation and maintenance of software related to the smallest, fastest columnar storage for Hadoop workloads. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache ORC was founded 2015-04-21 (7 years ago) There are currently 44 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. The PMC has been focusing on the community's growth to be a healthier community by helping candidates. - No new PMC members. Last addition was William Hyun on 2021-09-30. - Yiqun Zhang was added as committer on 2021-11-23 - One invited candidate has been working on ICLA/CCLA. ## Project Activity: In 2022, we started to build and share the release plan to improve the visibility and collaboration of the Apache ORC releases for all active branches. This is based on our release cadence discussion in 2021. - 1.6.13 (2022-01-15) - 1.7.3 (2022-02-15) - 1.8.0 (2022-09-15) We also released three maintenance releases in this quarter and helped the downstream Apache projects: Spark, Arrow, Iceberg. - 1.7.2 was released on 2021-12-20 - 1.7.1 was released on 2021-11-07 - 1.6.12 was released on 2021-11-07 In addition, we updated the Apache ORC adopters page for the users. https://orc.apache.org/docs/adopters.html Lastly, we revisited our test coverage and simplified our CI environment by migrating AppVeyor CI and Travis CI jobs to GitHub Action CI. We are expecting improved controllability and speedup in the review process. ## Community Health: Due to the seasonal reasons, all activity metrics decreased in this quarter. However, we have a good start in the year 2022 in the number of commits and PRs and new contributors. ----------------------------------------- Attachment BA: Report from the Apache Parquet Project [Xinli Shang] ## Description: The mission of Parquet is the creation and maintenance of software related to columnar storage format available to any project in the Apache Hadoop ecosystem ## Issues: No issues found ## Membership Data: Apache Parquet was founded 2015-04-21 (7 years ago) There are currently 37 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - Gidon Gershinsky was added to the PMC on 2021-11-23 - No new committers. Last addition was Gidon Gershinsky on 2021-04-05. ## Project Activity: Recent releases: MR-1.11.2 was released on 2021-10-06. MR-1.12.2 was released on 2021-10-06. ## Community Health: dev@parquet.apache.org had a 65% decrease in traffic in the past quarter 9 issues opened in JIRA, past quarter (-75% change) 11 issues closed in JIRA, past quarter (-45% change) 7 commits in the past quarter (-85% change) 7 code contributors in the past quarter (-53% change) 11 PRs opened on GitHub, past quarter (-47% change) 10 PRs closed on GitHub, past quarter (-54% change) ----------------------------------------- Attachment BB: Report from the Apache PDFBox Project [Andreas Lehmkühler] ## Description: The mission of PDFBox is the creation and maintenance of software related to Java library for working with PDF documents ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache PDFBox was founded 2009-10-21 (12 years ago) There are currently 21 committers and 21 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Matthäus Mayer on 2017-10-16. - No new committers. Last addition was Joerg O. Henne on 2017-10-09. ## Project Activity: Recent releases: 2.0.25 was released on 2021-12-16. 3.0.0-alpha2 was released on 2021-09-10. 2.0.24 was released on 2021-06-10. ## Community Health: - there is a steady stream of contributions, bug reports and questions on the mailing lists - there are a lot of refactorings, improvements and bugfixes - we are working on finalizing 3.0.0 and released another alpha version - PDFBox isn't affected by the log42j vulnerablility as we are using commons logging and don't ship any logging library - Maruan activated GitHub CodeQL scans for our codebase ----------------------------------------- Attachment BC: Report from the Apache Petri Project [Dave Fisher] ## Description: The mission of Apache Petri is the creation and maintenance of software related to assessment of, education in, and adoption of the Foundation's policies and procedures for collaborative development and the pros and cons of joining the Foundation ## Issues: None ## Membership Data: Apache Petri was founded 2019-11-19 There are currently 8 committers and 5 PMC members in this project. The Committer-to-PMC ratio is 8:5. Community changes, past quarter: - No new PMC members. We plan to evaluate this as cultures succeed. - No new committers. Last addition was Justin Erenkrantz on 2020-04-23. ## Project Activity: BuildStream is making slow progress on their path along The Apache Way. The project has completed their IP conversion and is preparing to build an Apache Release. Buildstream added a committer via a private@ vote - onboarding in progress. ## Community Health: The community was quiet this last quarter. If any ASF Member knows a community that may be interested please raise a discussion at either discuss@petri.a.o or private@petri.a.o ----------------------------------------- Attachment BD: Report from the Apache Pig Project [Koji Noguchi] ## Description: Apache Pig is a platform for analyzing large data sets on Hadoop. It provides a high-level language for expressing data analysis programs, coupled with infrastructure for evaluating these programs. ## Issues: There are no issues requiring board attention at this time ## Membership Data: Apache Pig was founded 2010-09-21 (11 years ago) There are currently 31 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Koji Noguchi on 2016-08-04. - No new committers. Last addition was Nándor Kollár on 2018-09-06. ## Project Activity: Very low. Still working on getting the 0.18 out. Finally committed multiple patches that upgraded from Spark 2.1 to 2.4 and fixed most of the regressions for pig-on-spark. (Support for Spark3 to follow probably after the 0.18 release.) Some large patches including hadoop3/python3 support are still being looked at. ## Community Health: Overall activity is low as the project is mostly stable and contributions are mainly bug fixes. ----------------------------------------- Attachment BE: Report from the Apache Pivot Project [Roger Lee Whitcomb] ----------------------------------------- Attachment BF: Report from the Apache Ranger Project [Selvamohan Neethiraj] ----------------------------------------- Attachment BG: Report from the Apache Ratis Project [Tsz-wo Sze] ## Description: Apache Ratis is a highly customizable Java library implementing the RAFT consensus protocol. It supports pluggable state machines, a pluggable transport layer and a pluggable RAFT log. Ratis also improves the original RAFT protocol to support data intensive applications. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Ratis was founded 2021-02-17 (a year ago) There are currently 27 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Anu Engineer on 2021-02-17. - No new committers. Last addition was Attila Doroszlai on 2021-04-26. ## Project Activity: We released Ratis 2.2.0 on 2021-10-20. Release 2.2.0 was a maintenance release containing bug fixes and performance improvement. It has been tested with Apache Ozone where Ratis is used to replicate raw data and to provide high availability. A new feature, ratis-shell (RATIS-1412), is being added. It enables users to run shell commands for managing ratis clusters. As a note, Ratis is fortunately NOT affected by the Log4j security bug (CVE-2021-44228) since it does not use log4j2. It does use slf4j-log4j12. ## Community Health: The project is healthy. Also, we have observed that the community is growing as shown in the metrics below. - dev@ratis.apache.org had a 100% increase in traffic in the past quarter (28 emails compared to 14) - issues@ratis.apache.org had a 245% increase in traffic in the past quarter (932 emails compared to 270) - user@ratis.apache.org had a big increase in traffic in the past quarter (34 emails compared to 0) - 66 issues opened in JIRA, past quarter (144% increase) - 61 issues closed in JIRA, past quarter (190% increase) - 55 commits in the past quarter (89% increase) - 18 code contributors in the past quarter (125% increase) - 59 PRs opened on GitHub, past quarter (90% increase) - 56 PRs closed on GitHub, past quarter (100% increase) ----------------------------------------- Attachment BH: Report from the Apache Rya Project [Adina Crainiceanu] ## Description: The mission of Apache Rya is the creation and maintenance of software related to scalable storage, retrieval, and analysis of RDF data ## Issues: There are no issues requiring board attention ## Membership Data: Apache Rya was founded 2019-09-17 (2 years ago) There are currently 12 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Adina Crainiceanu on 2019-09-17. - No new committers were added. ## Project Activity: Apache Rya 4.0.1 was released on 2020-12-22. Not much activity last quarter ## Community Health: Not much activity in the past quarter. dev@rya.apache.org had a 200% increase in traffic in the past quarter (3 emails compared to 1) 0 commits in the past quarter (no change) 0 code contributors in the past quarter (no change) ----------------------------------------- Attachment BI: Report from the Apache Samza Project [Yi Pan] ----------------------------------------- Attachment BJ: Report from the Apache SkyWalking Project [Sheng Wu] ## Description: The mission of Apache SkyWalking is the creation and maintenance of software related to application performance management and monitoring (APM) ## Issues: There is no issue. ## Membership Data: Apache SkyWalking was founded 2019-04-17 (3 years ago) There are currently 51 committers and 29 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Kai Wan on 2021-09-30. - Qiang Li was added as committer on 2021-11-30 - Rei Shimizu was added as committer on 2022-01-01 - Yihao Chen was added as committer on 2021-11-04 ## Project Activity: skywalking-rust is back to maintain by new committer, Rei Shimizu - satellite-0.5.0: 2021-12-27 - nginx-lua-0.6.0: 2021-12-25 - SWCK-0.5.0: 2021-12-15 - 8.9.1: 2021-12-11 - satellite-0.4.0: 2021-12-06 - skywalking-kubernetes-4.2.0: 2021-12-06 - 8.9.0: 2021-12-05 - infra-e2e-1.1.0: 2021-11-15 - SWCK-0.4.0: 2021-11-05 - satellite-0.3.0: 2021-11-05 - java-8.8.0: 2021-10-31 - cli-0.9.0: 2021-10-19 - eyes-0.2.0: 2021-10-19 - client-js-0.7.0: 2021-10-13 - 8.8.1: 2021-10-03 ## Community Health: The community is active, 8.x is stable and widely used. We are focusing on 9.x iterator for the 2022. ----------------------------------------- Attachment BK: Report from the Apache Steve Project [Daniel Gruno] ## Description: The mission of Steve is the creation and maintenance of software related to Apache's Python based single transferable vote software system ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Steve was founded 2012-07-25 (9 years ago) There are currently 9 committers and 4 PMC members in this project. The Committer-to-PMC ratio is 9:4. Community changes, past quarter: - No new PMC members. Last addition was Rich Bowen on 2015-04-20. - No new committers. Last addition was Pierre Smits on 2015-12-15. ## Project Activity: No activity this quarter. We anticipate activity around the time of the next Annual Members' Meeting. ## Community Health: Health is as it has been for a while. There is sufficient oversight (3+ PMC members accounted for), albeit only just three. We could perhaps use more people on the PMC? ----------------------------------------- Attachment BL: Report from the Apache Streams Project [Steve Blackmon] ## Description: Apache Streams unifies a diverse world of digital profiles and online activities into common formats and vocabularies, and makes these datasets accessible across a variety of databases, devices, and platforms for streaming, browsing, search, sharing, and analytics use-cases. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Streams was founded 2017-07-18 (4 1/2 years ago). There are currently 9 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 1:1. ## Community changes: - Brian Hodge joined PMC on 2020-04-26 - Brian Hodge became a committer on 2020-04-26 ## Project Activity: - Apache Streams 0.6.1 was released in March 2020. - Next Apache Streams release will be the first compatible with JDK11. - There was a recent discussion about path and priorities to 1.0 release and roadmap beyond, but not many discussions or commits in 2021. - Two PMC members presented work based on Apache Streams during ApacheCon 2021. ## Community Health: - We need to conduct more regular roadmap planning, create and deliver based on a planned release schedule. - We need to identify and execute strategies to reach out to likely interested users and developers to reinvigorate the project. - We need to be willing to evolve the project toward new use cases if necessary to expand the community. ----------------------------------------- Attachment BM: Report from the Apache Struts Project [René Gielen] The Apache Struts MVC framework is a solution stack for creating elegant and modern action-based Java web applications. It favours convention over configuration, is extensible using a plugin architecture, and ships with plugins to support patterns and technologies such as REST, AJAX and JSON. The Struts team made four releases in the last quarter: * Struts 2.5.28.2 - Security fix release related to Log4Shell (2021-12-23) * Struts 2.5.28.1 - Security fix release related to Log4Shell (2021-12-17) * Struts 2.5.28 - Bug fix release (2021-12-12) * Struts 2.5.27 - Feature and bug fix release (2021-11-16) The last Struts releases besides the core framework were * Struts Master 14 - Apply Apache Parent POM and plugin upgrades (2020-02-05) * Struts Annotations 1.0.7 - Enhancements in preparation for the next framework release (2020-02-23) Within the last quarter we saw notably increased development and community activity, due to both planned and unplanned working items. As for unplanned work, Struts -- like many other projects -- was affected by the Log4J / Log4Shell issues, leading to two fast track security releases. In consultation with the Apache Security Team, we provided the security fix releases as a service for downstream users who might no have an eye on transitive dependencies. The Struts framework itself does not use the Log4J implementation directly. Nevertheless, work on planned items saw a lift as well. This is reflected in pull request statistics, with 29 (17) opened and 30 (18) closed in the main project, as well as in mailing list and issue activity as seen in the numbers below. Unchanged since the last report, the team is still in preparation for the first release in the new 2.6 mainline, which will include rather big and possibly breaking changes. To make transition for existing users as smooth as possible seems to take more time than originally expected. Additional challenges come from platform transitions like possibly adding support for JEE 9+. We released no security bulletins in the last quarter. Regarding Log4J / Log4Shell we released a security announcement to help downstream users to understand possible impacts from a Struts perspective [1]. The last published security bulletin was: * S2-061 - Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution - similar to S2-059. (CVE-2020-17530) We have no issues that require board assistance at this time. ## PMC changes: - Currently 22 PMC members. - No new PMC members added in the last 3 months - James Chaplin (jchaplin) was added to the PMC on 2020-11-16 ## Committer base changes: - Currently 60 committers. - No new committers added in the last 3 months - James Chaplin (jchaplin) was added as committer on 2020-01-08 ## Mailing list activity: - dev@struts.apache.org: - 161 emails sent to list (89 in previous quarter) - issues@struts.apache.org: - 344 emails sent to list (128 in previous quarter) - user@struts.apache.org: - 16 emails sent to list (14 in previous quarter) ## JIRA activity: - 18 JIRA tickets created in the last 3 months - 23 JIRA tickets closed/resolved in the last 3 months [1] https://struts.apache.org/announce-2021#a20211212-2 ----------------------------------------- Attachment BN: Report from the Apache Synapse Project [Isuru Udana] ## Description: Apache Synapse is a high performance, flexible, lightweight Enterprise Service Bus (ESB) and a mediation framework. ## Issues: Currently, there are no issues reported. ## Membership Data: Apache Synapse was founded 2007-12-19 (14 years ago) There are currently 35 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 9:7. Community changes, past quarter: - No new PMC members. The last addition was Shafreen on 2021-05-09. - No new committers. The last addition was Shafreen on 2020-07-14. ## Project Activity: - New contributors are actively developing modules to enable cloud nativeness to Apache synapse. - Along with these new changes, we are targeting to do a new release in Q2 2022. ## Community Health: - dev@synapse.apache.org had a 66% decrease in traffic in the past quarter (10 emails compared to 29). ----------------------------------------- Attachment BO: Report from the Apache Tapestry Project [Thiago Henrique De Paula Figueiredo] ## Description: The mission of Tapestry is the creation and maintenance of software related to Component-based Java Web Application Framework ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Tapestry was founded 2006-02-14 (16 years ago) There are currently 28 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - Ben Weidig was added to the PMC on 2021-12-02 - No new committers. Last addition was Ben Weidig on 2020-12-30. ## Project Activity: Activity was mostly about 2 new features, one of them major, REST support, and support for asynchronous handling of requests. A new major release with them should be done before the next report. ## Community Health: While the user mailing list traffic was exactly the same as the last quarter, the dev one had a sharp increase in traffic. We also had a spike in commits and pull requests. In addition, we added a new member to our PMC. dev@tapestry.apache.org had a 120% increase in traffic in the past quarter (55 emails compared to 25) 34 commits in the past quarter (100% increase) 3 code contributors in the past quarter (50% increase) 2 PRs opened on GitHub, past quarter (100% increase) ----------------------------------------- Attachment BP: Report from the Apache Tcl Project [Georgios Petasis] ## Description: The mission of Tcl is the creation and maintenance of software related to Dynamic websites using TCL. Apache Tcl is home to the Tcl-Apache integration efforts. The purpose of our project is to combine the power of the Apache web server with the capabilities of the mature, robust and flexible Tcl scripting language. Currently only the Apache Rivet project is actively maintained. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Tcl was founded 2000-07-24 (21 years ago) There are currently 12 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Brice Hamon De Crevecoer on 2014-11-25. - No new committers. Last addition was Brice B. Hamon on 2014-11-25. ## Project Activity: Anew release has been made (rivet-3.2.1) has been made on 2021-11-13, which fixes some minor bugs and brings some improvements. The release notes are: 1) The array built by command ::rivet::inspect server now shows also the current log level. 2) Session package tables have larger columns for session data Code for environment variables access extensively rewritten to make substantially convenient to call ::rivet::env instead of ::rivet::load_env (the manual for long time claimed that was the case but actually low level code execution was almost the same). 3) Introducing preprocessing macro RIVET_DEBUG_BUILD controlled by the --enable-rivet-debug-build configure switch. This is meant to enable builds that include specific code for the module development and debugging that can be excluded from common builds. 4) Various manual improvements and corrections. 5) Fixed issues with the autotools build scripts. ## Community Health: As expected, the new release has lead to an increase of both code commits and traffic in the mailing list. ----------------------------------------- Attachment BQ: Report from the Apache Tez Project [László Bodor] ## Description: Apache Tez is an effort to develop a generic application framework which can be used to process arbitrarily complex DAGs of data-processing tasks and also a re-usable set of data-processing primitives which can be used by other projects. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Tez was founded 2014-07-16 (7 years ago) There are currently 35 committers and 32 PMC members in this project. The Committer-to-PMC ratio is roughly 9:8. Community changes, past quarter: - No new PMC members. Last addition was László Bodor on 2020-11-24. - No new committers. Last addition was László Bodor on 2020-01-23. ## Project Activity: There are a lot of new jiras created, that are related to modernizing tez in some ways. Not necessarily deep, execution engine changes, but useful improvements. ## Community Health: We're about to involve new members to the community, trying to review their changes as much as possible. ----------------------------------------- Attachment BR: Report from the Apache Thrift Project [Jens Geyer] ## Description: Apache Thrift is a high performance cross platform RPC and serialization solution. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Thrift was founded 2010-10-20 (11 years ago) There are currently 40 committers and 20 PMC members in this project. The Committer-to-PMC ratio is 2:1. Community changes, past quarter: - No new PMC members. Last addition was Allen George on 2021-09-13. - No new committers. Last addition was Christopher Tubbs on 2021-02-12. ## Project Activity: Next release is under development, code freeze already planned for January. Previous release was in September 2021. ## Community Health: Mailing list and patch activity dropped in last quarter, yet still we receive a steady flow of contributions, although on a lower level. ----------------------------------------- Attachment BS: Report from the Apache Tika Project [Tim Allison] ## Description: Apache Tika is a dynamic toolkit for content detection, analysis, and extraction. It allows a user to understand, and leverage information from, a growing a list over 1200 different file types including most of the major types in existence (MS Office, Adobe, Text, Images, Video, Code, and science data) as recognized by IANA and other standards bodies. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Tika was founded 2010-04-20 (12 years ago) There are currently 33 committers and 32 PMC members in this project. The Committer-to-PMC ratio is roughly 9:8. Community changes, past quarter: - No new PMC members. Last addition was Nicholas DiPiazza on 2021-07-05. - No new committers. Last addition was Nicholas DiPiazza on 2021-06-03. ## Project Activity: We released two versions of our main branch 2.2.0 and 2.2.1 to upgrade dependencies (partly in response to CVEs in log4j2 and jdom2) and to fix some regressions, the first release was on December 16 and the second was on December 23. We made a breaking change in our 1.x branch to upgrade from log4j 1.x to Log4j2, and we released Tika 1.28 on December 23. We started a virtual Meetup group for Tika, and we've held two hands-on tutorials (one on tika-eval, and one on the tika-pipes module). We have another meetup planned for January 2022, and we look forward to holding these every month or so. ## Community Health: We haven't seen any significant changes in community health. We have seen an increase in PRs and commit activity and a slight decrease in email traffic and JIRA issues. Our Community Health Score (Chi) is 6.33 (Healthy). ----------------------------------------- Attachment BT: Report from the Apache TinkerPop Project [Stephen Mallette] ## Description: Apache TinkerPop is a graph computing framework for both graph databases (OLTP) and graph analytic systems (OLAP). ## Activity: TinkerPop is currently in the process of releasing 3.4.13 and 3.5.2 with the idea that 3.6.0 will follow quite shortly. We do not expect any further releases on the 3.4.x line of code. As the log4j security issue was central to concerns of many projects last quarter, it seems worth mentioning that TinkerPop was generally unaffected by that problem. Both the 3.4.x and 3.5.x lines are on log4j 1.x and 3.6.0 had already been migrated away from log4j to logback as we found the migration path to log4j 2.x a bit difficult. We started a Discord server some months ago to offer another alternative for support within our user community. We've found it to be a successful way to interact with users who have questions. Server membership has grown to over 250 users at this point. We learned of a new Gremlin IDE that has been developed called G.V()[1] which aims to make writing and debugging Gremlin queries easier. Tools like this one greatly help with user adoption of TinkerPop. We added a new committer, Lyndon Bauto, who has contributed some excellent work to the project around gremlin-python, as well as other libraries in the wider TinkerPop community. ## Issues: There are no issues requiring board attention at this time. ## Releases: - 3.4.12 (July 19, 2021) - 3.5.1 (July 19, 2021) ## PMC/Committer: - Last PMC addition was Kelvin Lawrence/Josh Shinavier - June 2021 - Last committer addition was Lyndon Bauto - December 2021 ## Links [1] https://gdotv.com/ ----------------------------------------- Attachment BU: Report from the Apache Traffic Server Project [Bryan Call] ## Description: The mission of Traffic Server is the creation and maintenance of software related to a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Traffic Server was founded 2010-04-20 (12 years ago) There are currently 67 committers and 55 PMC members in this project. The Committer-to-PMC ratio is roughly 9:7. Community changes, past quarter: - No new PMC members. Last addition was Robert Butts on 2021-07-13. - Jeff Elsloo was added as committer on 2021-11-01 ## Project Activity: We made a feature release of 9.1.0 and two security releases (8.1.3 and 9.1.1) this quarter. We are preparing a 9.1.2 bug fix release that will happen in the next couple weeks and the next feature release of 9.2.0 that will happen in Q1 this year. ## Community Health: We had a remote ATS Fall summit on 11/17 and 11/18, which was attended by 40 people. We are continuing to have our weekly PR and issue scrub meeting. These have been helpful on assigning PR and issues as well as getting the community involved with the project and knowing what changes are being made. We will start to plan our Spring Summit event. We have not determined if it will be remote of in person. If it is in person we will hold our summit in the Bay Area. Github PR open and closes are down, 46% and 47% respectively. This is normal to see a drop in community activity in Q4, with people taking vacation. ----------------------------------------- Attachment BV: Report from the Apache Web Services Project [Daniel Kulp] ## Description: Apache Web Services is a collection of shared technologies related to SOAP/XML based Web Services that can be shared by different implementations. Spring-WS, Axis2, CXF, and others use parts of the technology created within Apache Web Services. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache Web Services was founded 2003-01-22 (19 years ago) There are currently 223 committers and 43 PMC members in this project. The Committer-to-PMC ratio is roughly 7:2. Community changes, past quarter: - No new PMC members. Last addition was Robert Lazarski on 2021-06-14. - No new committers. Last addition was Alessio Soldano on 2014-09-14. ## Project Activity: WebServices is a mature project based on standards that are also quite mature. As such, there is not a significant amount of activity required. However, user questions are being answered promptly, bugs are being fixed, and there are at least 3 independent PMC members around making sure the project can continue to produce releases as needed. Since SOAP/XML based Web Services is no longer considered state of the art, we don't expect a major uptick in new development efforts, new committers, etc... The bulk of the work this period was getting wss4j updated to use the latest Santuario releases. There have been some discussions about moving from the javax.xml.bind namespace over to the Jakarta equivalents and we hope to tackle some of that next period. Releases this period: WSS4J 2.4.0 was released on 2021-11-15 Past Releases: Neethi-3.2.0 was released on 2021-09-20. XmlSchema-2.3.0 was released on 2021-09-20. Axiom-1.3.0: 2021-07-09 Woden-1.0M10: 2015-09 ## Community Health: As mentioned, SOAP/WebServices is not considered state-of-the-art anymore and we are getting very little contribution from anyone other than the 2 or 3 regulars" that are driving features and changes needed for CXF (which is being driven by their employers). Thus, we are not seeing any possibilities for future new committers or PMC members. However, there are plenty of people around that can do releases and answer questions and respond to security issues. It's a mature project. ----------------------------------------- Attachment BW: Report from the Apache Zeppelin Project [Lee Moon Soo] ## Description: Apache Zeppelin is a collaborative data analytics and visualization tool for general-purpose data processing systems. ## Issues: ## Membership Data: Apache Zeppelin was founded 2016-05-18 (6 years ago) There are currently 22 committers and 11 PMC members in this project. The Committer-to-PMC ratio is 2:1. Community changes, past quarter: - No new PMC members. Last addition was Jeff Zhang on 2018-01-25. - No new committers. Last addition was Philipp Dallig on 2020-06-24. ## Project Activity: 0.10.1-RC1 is cancelled and we are pareparing RC2. ## Community Health: - users@zeppelin.apache.org: - 71 emails sent to list ( 161 in previous quarter) - dev@zeppelin.apache.org: - 407 emails sent to list ( 838 in previous quarter) ------------------------------------------------------ End of minutes for the January 19, 2022 board meeting.