The Apache Software Foundation Board of Directors Meeting Minutes November 15, 2023 1. Call to order The meeting was scheduled for 21:00 UTC and began at 21:01 when a sufficient attendance to constitute a quorum was recognized by the chair. Other Time Zones: https://timeanddate.com/s/436c The meeting was held via teleconference, hosted by the Secretary via Zoom. The #asfboard channel on the-asf.slack.com was used for backup. 2. Roll Call Directors Present: Rich Bowen Bertrand Delacretaz - joined :10 Sharan Foga Willem Ning Jiang Justin Mclean Craig L Russell Directors Absent: Shane Curcuru Christofer Dutz Sander Striker Executive Officers Present: David Nalley - joined :13 Matt Sicker Ruth Suehle - joined :06 Executive Officers Absent: Craig R. McClanahan Guests: Brian Proffitt Daniel Gruno Drew Foulks - joined :02 Greg Stein Jarek Potiuk Larry McCay - joined :38 Ralph Goers - joined :09 3. Minutes from previous meetings Published minutes can be found at: https://www.apache.org/foundation/board/calendar.html A. The meeting of October 18, 2023 See: board_minutes_2023_10_18.txt Tabled. 4. Executive Officer Reports A. Board Chair [Sander Striker] No report was submitted. B. President [David Nalley] $dayjob and personal life have kept me relatively busy this month. Kudos to Ruth Suehle, Mark Cox, Arnout Engelen, Henri Yandell and Dirk Willem van Gulik for driving to conclusion a response to the ONCD RFI on open source software security and memory safety. Additionally, please see Attachments 1 through 9. C. Treasurer [Craig R. McClanahan] As was the case last month, things continue to run fairly smoothly. I will be in transit during the November Board meeting, so will be unable to participate in the Zoom call. Let me know if you have any questions that I can address. D. Secretary [Matt Sicker] In October, the secretary received 46 ICLAs, 3 CCLAs, and 2 software grants. E. Executive Vice President [Ruth Suehle] Per last month's board vote, we are now OSI Affiliate members: https://opensource.org/affiliates/ We submitted a response to the Open-Source Software Security: Areas of Long-Term Focus and Prioritization RFI (https://www.regulations.gov/document/ONCD-2023-0002-0001). As of this report submission, it hasn't been posted on the responses page, but confirmation was received. Thank you to everyone who helped with it! I recently visited Denver to visit potential sites for Community Over Code 2024 and expect to have dates and location within the next week or two. Have also been collaborating with the EU team on a combined prospectus for the two events. F. Vice Chair [Sharan Foga] - Nothing to report this month Executive officer reports approved as submitted by General Consent. 5. Additional Officer Reports A. VP of W3C Relations [Andy Seaborne / Sharan] See Attachment 10 B. Apache Legal Affairs Committee [Roman Shaposhnik / Sander] See Attachment 11 C. Apache Security Team Project [Mark J. Cox / Bertrand] See Attachment 12 @Bertrand: follow up with security team about zeppelin roll call D. VP of Jakarta EE Relations [Rob Tompkins / Bertrand] No report was submitted. Additional officer reports approved as submitted by General Consent. 6. Committee Reports Summary of Reports The following reports required further discussion: # Cassandra [jmclean] # ManifoldCF [jmclean] # Ozone [sharan] # Security Team [bdelacretaz] # Traffic Control [ningjiang] A. Apache AGE Project [Eya Badal / Craig] See Attachment A B. Apache Ambari Project [Brahma Reddy Battula / Shane] See Attachment B C. Apache Ant Project [Jan Materne / Rich] No report was submitted. D. Apache Attic Project [Herve Boutemy / Willem] See Attachment D E. Apache BookKeeper Project [Enrico Olivelli / Christofer] See Attachment E F. Apache Brooklyn Project [Juan D. Cabrerizo / Justin] See Attachment F G. Apache BuildStream Project [Tristan Van Berkom / Sander] No report was submitted. H. Apache Cassandra Project [Josh McKenzie / Rich] See Attachment H @Rich: follow up on subproject governance on board list I. Apache Cocoon Project [Cédric Damioli / Christofer] See Attachment I J. Apache Community Development Project [Swapnil Mane / Christofer] See Attachment J K. Apache CouchDB Project [Jan Lehnardt / Bertrand] See Attachment K L. Apache Creadur Project [Philipp Ottlinger / Craig] See Attachment L M. Apache DataSketches Project [Lee Rhodes / Justin] See Attachment M N. Apache DeltaSpike Project [Mark Struberg / Christofer] See Attachment N O. Apache Directory Project [Shawn McKinney / Shane] See Attachment O P. Apache Doris Project [Mingyu Chen / Sharan] No report was submitted. Q. Apache Drill Project [Charles Givre / Willem] No report was submitted. R. Apache Druid Project [Gian Merlino / Justin] No report was submitted. S. Apache Empire-db Project [Rainer Döbele / Shane] See Attachment S T. Apache EventMesh Project [Eason Chen / Rich] See Attachment T U. Apache Flume Project [Balázs Donát Bessenyei / Sharan] See Attachment U V. Apache FreeMarker Project [Dániel Dékány / Christofer] See Attachment V W. Apache Geode Project [Mark Bretl / Willem] See Attachment W X. Apache Gora Project [Kevin Ratnasekera / Bertrand] No report was submitted. Y. Apache Groovy Project [Paul King / Craig] See Attachment Y Z. Apache Hop Project [Hans Van Akelyen / Sander] See Attachment Z AA. Apache HTTP Server Project [Joe Orton / Willem] See Attachment AA AB. Apache HttpComponents Project [Michael Osipov / Rich] No report was submitted. AC. Apache Ignite Project [Dmitry Pavlov / Bertrand] See Attachment AC AD. Apache Impala Project [Jim Apple / Justin] No report was submitted. AE. Apache Incubator Project [Justin Mclean] No report was submitted. AF. Apache Juneau Project [James Bognar / Craig] See Attachment AF AG. Apache Kafka Project [Mickael Maison / Sharan] See Attachment AG AH. Apache Kibble Project [Sharan Foga] See Attachment AH AI. Apache Knox Project [Larry McCay / Willem] See Attachment AI AJ. Apache Kylin Project [Shao Feng Shi / Shane] See Attachment AJ AK. Apache Libcloud Project [Tomaž Muraus / Christofer] See Attachment AK AL. Apache Logging Services Project [Volkan Yazici / Sander] See Attachment AL AM. Apache ManifoldCF Project [Karl Wright / Sander] See Attachment AM @Justin: follow up on mentioning people's names in reports AN. Apache Mnemonic Project [Gordon King / Bertrand] No report was submitted. AO. Apache Oozie Project [Dénes Bodó / Christofer] See Attachment AO AP. Apache OpenJPA Project [Mark Struberg / Willem] See Attachment AP AQ. Apache OpenOffice Project [Dave Fisher / Justin] See Attachment AQ AR. Apache OpenWhisk Project [Dave Grove / Rich] See Attachment AR AS. Apache Ozone Project [Sammi Chen / Sharan] See Attachment AS @Sharan: check with Chris about vendor neutrality concerns AT. Apache Perl Project [Steve Hay / Sander] See Attachment AT AU. Apache Phoenix Project [Rajeshbabu Chintaguntla / Craig] See Attachment AU AV. Apache Pig Project [Koji Noguchi / Shane] See Attachment AV AW. Apache Pinot Project [Kishore G / Christofer] See Attachment AW AX. Apache POI Project [Dominik Stadler / Justin] See Attachment AX AY. Apache Pulsar Project [Matteo Merli / Craig] No report was submitted. AZ. Apache Qpid Project [Robbie Gemmell / Rich] See Attachment AZ BA. Apache Ranger Project [Selvamohan Neethiraj / Sharan] No report was submitted. BB. Apache RocketMQ Project [Xiaorui Wang / Sander] See Attachment BB BC. Apache Roller Project [David M. Johnson / Willem] See Attachment BC BD. Apache Santuario Project [Colm O hEigeartaigh / Bertrand] See Attachment BD BE. Apache Sedona Project [Jia Yu / Shane] See Attachment BE BF. Apache Serf Project [Daniel Sahlberg / Sander] See Attachment BF BG. Apache ServiceComb Project [Bao Liu / Christofer] See Attachment BG BH. Apache ShardingSphere Project [Liang Zhang / Sharan] See Attachment BH BI. Apache ShenYu Project [Yu Xiao / Craig] See Attachment BI BJ. Apache SIS Project [Martin Desruisseaux / Willem] See Attachment BJ BK. Apache Solr Project [David Smiley / Sander] No report was submitted. BL. Apache Spark Project [Matei Alexandru Zaharia / Shane] See Attachment BL BM. Apache StreamPipes Project [Philipp Zehnder / Justin] See Attachment BM BN. Apache Subversion Project [Nathan Hartman / Rich] See Attachment BN BO. Apache Superset Project [Maxime Beauchemin / Bertrand] See Attachment BO BP. Apache Synapse Project [Isuru Udana / Sharan] See Attachment BP BQ. Apache Syncope Project [Francesco Chicchiriccò / Sander] See Attachment BQ BR. Apache SystemDS Project [Matthias Boehm / Christofer] See Attachment BR BS. Apache TomEE Project [David Blevins / Craig] No report was submitted. BT. Apache Traffic Control Project [Eric Friedrich / Bertrand] See Attachment BT @Willem: follow up with PMC about community health BU. Apache Turbine Project [Georg Kallidis / Justin] See Attachment BU BV. Apache Velocity Project [Nathan Bubna / Shane] No report was submitted. BW. Apache Whimsy Project [Shane Curcuru] See Attachment BW BX. Apache Xalan Project [Gary D. Gregory / Willem] No report was submitted. BY. Apache Xerces Project [Michael Glavassevich / Rich] See Attachment BY BZ. Apache XML Graphics Project [Clay Leeds / Willem] See Attachment BZ CA. Apache YuniKorn Project [Wilfred Spiegelenburg / Shane] See Attachment CA Committee reports approved as submitted by General Consent. 7. Special Orders A. Merge Apache Flume into the Logging Services Project WHEREAS, the Board of Directors previously established the Apache Flume Project Management Committee, and WHEREAS, the Board of Directors recognizes that both the Flume and Logging Services PMCs have voted for the Apache Flume project to be incorporated into Apache Logging Services, and WHEREAS, the Board of Directors deems it in the best interest of the Foundation for oversight of Apache Flume to be taken over by the Logging Services Project Management Committe; NOW, THEREFORE, BE IT RESOLVED, that the Logging Services PMC be and hereby is tasked with oversight over all works produced by the Apache Flume Project; and be it further RESOLVED, that the office of "Vice President, Apache Flume" be hereby terminated; and be it further RESOLVED, that the following Apache Flume PMC members will join the Logging Services PMC: Balázs Donát Bessenyei Mike Percy Tristan Stevens Juhani Connolly and be it further RESOLVED, that the Apache Flume PMC be hereby terminated. Special Order 7A, Merge Apache Flume into the Logging Services Project, was approved by Unanimous Vote of the directors present. B. Establish the Apache TsFile Project WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software, for distribution at no charge to the public, related to a columnar storage file format designed for time series data. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache TsFile Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache TsFile be and hereby is responsible for the creation and maintenance of software related to a columnar storage file format designed for time series data. RESOLVED, that the office of "Vice President, Apache TsFile" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache TsFile Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache TsFile Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache TsFile Project: * Jialin Qiao * Yuan Tian * Chao Wang * Christofer Dutz * Jinrui Zhang * Steve Yurong Su * Xinyu Tan * Haonan Hou * Gaofei Cao * Kun Liu * Houliang Qi * Xiangdong Huang * Chao Wang * Jim Wang * Tian Jiang * Stefanie Zhao * Shuo Zhang * Dawei Liu NOW, THEREFORE, BE IT FURTHER RESOLVED, that Jialin Qiao be appointed to the office of Vice President, Apache TsFile, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed; and be it further RESOLVED, that the Apache TsFile Project be and hereby is tasked with the migration and rationalization of the Apache IoTDB TsFile subproject; and be it further RESOLVED, that all responsibilities pertaining to the Apache IoTDB TsFile subproject encumbered upon the Apache IoTDB PMC are hereafter discharged. Special Order 7B, Establish the Apache TsFile Project, was approved by Unanimous Vote of the directors present. C. Update Apache Security Team Membership WHEREAS, the Apache Software Foundation (ASF) Board Commmittee, known as the Apache Security Team expects to better serve its purpose through the periodic update of its membership; and WHEREAS, the Apache Security Team is a Board-appointed committee whose membership must be approved by Board resolution; NOW, THEREFORE, BE IT RESOLVED, that the following ASF members be added as Apache Security Team members: Jarek Potiuk Henri Yandell Special Order 7C, Update Apache Security Team Membership, was approved by Unanimous Vote of the directors present. D. Dissolution of VP, Conferences Role and Transfer of Responsibilities to VP, Marketing & Publicity WHEREAS, the board created the office of Vice President, Conferences; and WHEREAS, the current VP, Conferences Rich Bowen has resigned from the position; and WHEREAS, the board has determined that it is well within the scope of the Marketing & Publicity office to organize and coordinate events for the ASF as a part of its existing mission of marketing and outreach, and as Brian Proffitt has volunteered to merge the Conferences responsibilities within his VP, Marketing & Publicity role; NOW, THEREFORE, BE IT RESOLVED, that Rich Bowen be relieved and discharged with the board's thanks from the duties and responsibilities of Vice President, Conferences, and BE IT FURTHER RESOLVED that the office of Vice President, Conferences be retired from use and THAT references to it on the ASF website and in other materials be updated to refer to the Vice President, Marketing & Publicity, and BE IT FURTHER RESOLVED, that the duties of the former office of Vice President, Conferences, including authorization to negotiate and sign contracts with vendors for event-related services and deliverables, be performed, as appropriate, by the Vice President, Marketing & Publicity. Special Order 7D, Dissolution of VP, Conferences Role and Transfer of Responsibilities to VP, Marketing & Publicity, disapproved (5 no, 1 yes) President appoints Brian Proffitt as VP, Conferences E. Change the Apache Arrow Project Chair WHEREAS, the Board of Directors heretofore appointed Andrew Lamb (alamb) to the office of Vice President, Apache Arrow, and WHEREAS, the Board of Directors is in receipt of the resignation of Andrew Lamb from the office of Vice President, Apache Arrow, and WHEREAS, the Project Management Committee of the Apache Arrow project has chosen by vote to recommend Andrew Grove (agrove) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Andrew Lamb is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Arrow, and BE IT FURTHER RESOLVED, that Andrew Grove be and hereby is appointed to the office of Vice President, Apache Arrow, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7E, Change the Apache Arrow Project Chair, was approved by Unanimous Vote of the directors present. 8. Discussion Items A. Schedule the annual members meeting The proposed date is Thu, March 7th 2024 at 20:00 UTC https://s.apache.org/69dbz Note that the intent to run the meeting like last year: a single meeting slot in which voting results are announced. Questions regarding voting, as well as any other topics are ideally managed asynchronously in fora that are for-purpose. The board approves this by general consent 9. Review Outstanding Action Items * Bertrand: follow up with Mark about Zeppelin [ Security Team 2023-09-20 ] Status: Security team reports their intention to do a roll call, it looks like Zeppelin hasn't released the promised fixes. I have flagged the security report to discuss our plans. * Christofer: pursue a roll call for VCL [ VCL 2023-09-20 ] Status: Got 3 people replying, but not a single one actually saying that he's able to actually work on the project. There seems to be a number of big users, but nobody willing/able to do any work. We should initiate a discussion on moving to the attic on the dev-list. * Christofer: connect with Mark about trademarks [ Accumulo 2023-10-18 ] Status: Trademarks said, that from a trademark perspective the site doesn't do much harm, only causes confusion (I guess it's a copy of the official website while Accumulo was still in the incubator). Personally I would like to have the site taken offline, but I guess if trademarks and the Accumulo PMC don't want to put in the effort, I can live with it. * Rich: find out more about community health [ Aries 2023-10-18 ] Status: Contacted project - https://lists.apache.org/thread/1dj814pn7olwhcq0j21oz8jo3ncljcq0 - No response yet. * Rich: follow up about mailing list usage [ AsterixDB 2023-10-18 ] Status: Contacted PMC - https://lists.apache.org/thread/onb12gbxr7qzn05322x77x81r98tzjx4 * Christofer: perform a roll call [ CarbonData 2023-10-18 ] Status: Turns out that the person submitting the 15 unmerged PRs actually had 180 or so merged and is part of the PMC. Not doing a roll-call. * Christofer: stage release candidate for final release and begin discussion [ Cocoon 2023-10-18 ] Status: Cocoon 2.3.0 RC2 on vote: Currently at 2 binding +1 votea (after more than 2,5 weeks) * Rich: follow up on committer bar discussion [ Dubbo 2023-10-18 ] Status: Contacted project - https://lists.apache.org/thread/ggrlfzxrsv835p96vt427z7jg80ofcwl There has been no response, but Dubbo is actively adding committers, so I don't think there is an immediate case for concern. * Christofer: pursue a roll call [ Flagon 2023-10-18 ] Status: Role call indicated a lot of people able and willing to continue and the lack of voting was a direct result of unexperienced Release Managers (Not quite sure why then nobody voted, but whatever) ... so not worried. No need to discuss a move to the Attic. * Justin: follow up about the attic and how to plan for it [ Geronimo 2023-10-18 ] Status: * Shane: follow up about accuracy of report [ Griffin 2023-10-18 ] Status: Followup sent; no further action needed. * Justin: follow up on current status of project [ HAWQ 2023-10-18 ] Status: * Rich: follow up on project sustainability [ JMeter 2023-10-18 ] Status: * Sharan: follow up on committer and PMC membership changes [ MADlib 2023-10-18 ] Status: * Sander: follow up about PMC removal process [ Mahout 2023-10-18 ] Status: * Sander: clarify members of committers and PMC [ ManifoldCF 2023-10-18 ] Status: * Shane: follow up about attic [ Mesos 2023-10-18 ] Status: Clarifying attic rules and making last try to find enough PMC volunteers; stay tuned! https://lists.apache.org/thread/yky95o0go6gnswgqnm1jw01ondhpdxq8 * Christofer: follow up about vote emails [ MINA 2023-10-18 ] Status: Done ... also followed up (also off-list) about the "drama" in the last vote and seems the issues are resolved or at least put at halt. * Christofer: follow up on private list subscriptions [ MyFaces 2023-10-18 ] Status: Done * Christofer: follow up with Roman [ OpenMeetings 2023-10-18 ] Status: Done ... generally there should not be anything problematic with sending out an email with links for further reading, however Greg mentioned that it currently wouldn't be possible (infra-wise) to even detect which country a commit is coming from also have multiple people expressed concerns with "spamming". However having ComDev maintain a list of Countries and links to relevant articles seems to be considered a good idea. * Craig: follow up on attic [ Pivot 2023-10-18 ] Status: Two members of the project are working on a final release. I recommend that the board grant them space to make that final release, so a resolution to move to the Attic is premature and this action item should stay open. The Pivot PMC may have difficulty finding three votes to actually release, so the board may have to get involved once a release candidate is prepared. * Christofer: follow up on proper voting [ SkyWalking 2023-10-18 ] Status: Done * Justin: follow up on direction [ Streams 2023-10-18 ] Status: * Christofer: follow up about ghost vote [ Tika 2023-10-18 ] Status: Turns out the phantom vote actually was there ... it's just not shown in the list view, but only if I click on the perma-link button ... odd, so not sending an email * Shane: follow up about trademark usage policy [ Traffic Server 2023-10-18 ] Status: * Sander: follow up about upcoming release [ Zeppelin 2023-10-18 ] Status: 10. Unfinished Business 11. New Business 12. Announcements 13. Adjournment Adjourned at 21:43 UTC ============ ATTACHMENTS: ============ ----------------------------------------- Attachment 1: Report from the VP of Brand Management [Mark Thomas] Covering the period October 2023 * ISSUES FOR THE BOARD * OPERATIONS Responded to the following queries, liaising with projects as required: - Provided advice to the LUCENE PMC regarding spam messages about domain registrations in China. - Approved a request to use a screenshot of the httpd documentation in a book. - Approved one event based around KAFKA and ROCKETMQ. - Noticed that the HADOOP home page was using (TM) rather than (R) and requested the PMC to correct this. This was promptly corrected. - Followed up with ACCUMULO to see if Brand Management could help resolve accumulodata.com domain. No further action required at this time. - Provided naming advice for an external project built for ACTIVEMQ. - Approved a name search for TSFILE. - Redirected a marketing query regarding a CLOUDSTACK conference to the marketing team. * REGISTRATIONS Continued to progress the GUACAMOLE registration with counsel. Worked with counsel to renew registrations for FLEX in the EU and UK (class 9 only). Worked with counsel to progress the registration of APACHE in India. Worked on counsel and DEVLAKE podling to plan the transfer of marks to the ASF upon graduation. Worked with counsel to maintain our NUTTX registration. Worked on counsel and KIE podling to plan the transfer of marks to the ASF upon graduation. * INFRINGEMENTS The NETBEANS PMC raised concerns regarding netbeans.info. Research identified this as an old NETBEANS domain that should have been transferred to the ASF but appears to still be controlled by Oracle. It was strongly recommended that the NETBEANS PMC reaches out to Oracle to determine what resources Oracle continues to maintain for NETBEANS and comes up with a plan to either shut them down or transfer control to the ASF. Submitted a successful request to Red Bubble to remove stickers using an old ASF logo with feather from sale. Provided advice to ICEBERG regarding a potentially infringing Twitter account. Contacted a GitHub user on behalf of the MAVEN PMC to request name and logo changes for a project the PMC considered infringing. The logo and name were changed promptly. The FLINK PMC are addressed an issue with a cloud service provider. Reviewed planetcassandra.org and provided feedback. A number of GitHub issues were opened as a result but have not yet been resolved. Provided advice to OZONE regarding a potential infringement. ----------------------------------------- Attachment 2: Report from the VP of Fundraising [Bob Paulin] 1) ASF Sponsors: a --New: we onboarded one new Bronze Sponsor during this timeframe. b --Renewals: one Gold Sponsor has confirmed their renewal, but will be downgrading to the Silver level. c --Payments: 1 --New: we received payment for a new Bronze Sponsor. 2a --Renewing: we received payment from one renewing Platinum, one Gold, and two Bronze Sponsors. 2b --Incoming: we await payment from one Platinum, one Gold, and two Silver Sponsors. 2) Targeted Sponsors: no new Targeted Sponsors have been onboarded at this time. 3) Sponsor Relations: Sponsor outreach and engagement continues with monthly Sponsor-focused updates and facilitating any requests. We are also in discussions with a candidate Silver Sponsor. 4) Event Sponsorship: with Community Over Code/Halifax behind us, we are preparing to support 2024 event sponsorships, and are making progress on collecting the final outstanding sponsorship payment from ApacheCon NA 2022. 5) Individual Donations and Corporate Giving: we received $6K in donations during this timeframe. Of note, $35K in sponsorship payments were processed via our online donation payment platform, https://donate.apache.org/ 6) Administrivia: we continue to work closely with the Treasury and Accounting teams on a few remaining Sponsor invoicing issues. ----------------------------------------- Attachment 3: Report from the VP of Marketing and Publicity [Brian Proffitt] **Addition of Conference Responsibilities** With the resignation of Rich Bowen, Marketing and Publicity will be asking the Board to merge the two offices together, to be headed by VP, Marketing and Publicity. **Foundation Comms** * ASF Private Wiki: added M&P content for private wiki + added fundraising support page * Published Fundraising Blog[1] **Rapid Response** * CVE / HTTP2: Prepared statement written with coverage monitoring **Proactive Storytelling** * First Contribution Campaign: post #6 on technical documentation was written * Drafted tip sheet form to garner ‘software for the public good’ stories * Pitched Generative AI byline to The New Stack and OpenSource.net **Branding Project** * Brand Survey drafted and issued; data compiled[2]; summary provided[3]; added to Wiki[4] * Brand Landscape Document[5] developed and finalized * Brand Book development began **Social Media Posts** October social content focused on three major buckets: Community Over Code NA; project announcements; and the #FirstASFcontribution campaign. * In total, 26 Tweets + 5 LinkedIn posts promoting Community Over Code NA registration, #firstASFcontribution campaign, project announcements via the announce list and ASF fundraising. * Despite Community Over Code taking place at the beginning of the month, October was a relatively quiet month for Foundation news compared to September, which is why we see a downward slope in engagement. **Social Engagement Stats (X + LinkedIn)** * Total engagement: 2,890 (down 38% from September) * Total clicks: 1,331 (down 46% from September) * Click to engagement ratio: 46% (down 6% from September) * New followers: 695 (up 8% from September - X back to increasing followers) **Website Analytics** * 1,032,851 visits, 1,032,783 unique visitors +76.3% * 2 min 55s average visit duration -8.4% * 45% visits have bounced (left the website after one page) -6.3% * 2.9 actions (page views, downloads, outlinks, internal site searches) per visit -6.5% * 9.078 max actions in one visit +47.5% * 2,117,706 pageviews, 1,243,681 unique pageviews +60.8% * 4 total searches on your website, 3 unique keywords -33.3% * 632,667 downloads, 433,107 unique downloads +100.9% * 269,418 outlinks, 204,508 unique outlinks +77.3% [1] https://news.apache.org/foundation/entry/why-the-asf-matters-and-why-we-need-your-support [2] https://docs.google.com/spreadsheets/d/1uvmsbfHE-c1S4GNB2hGLDpuUmmjhhL1cBjGJijOG_R0/edit#gid=1119507892 [3] https://docs.google.com/document/d/1mDfKoUyagphZNuu56O9z_6GGiiDEtgPnRgF5e9ArskE/edit#heading=h.q6a3nisy3e7m [4] https://cwiki.apache.org/confluence/login.action?os_destination=%2Fpages%2Fviewpage.action%3FspaceKey%3DASFP%26title%3DBrand%2BProject&permissionViolation=true [5] https://docs.google.com/spreadsheets/d/18LbqamZTJs4cl3fREl4dxtMS0oAnFPrCFD_6XXWrsO8/edit#gid=1199237125 ----------------------------------------- Attachment 4: Report from the VP of Infrastructure [Myrle Krantz] General ======= Infrastructure is operating as expected, and has no current issues requiring escalation to the President or the Board. Short Term Priorities ===================== - Get Okta to work (concall Thursday 16th), to open migration to the Atlassian Cloud products. - Begin work on ADP. Long Range Priorities ===================== - Artifact Distribution Platform to replace dist.a.o, svn:dist, archives.a.o, etc; improved workflow on releasing artifacts. - More boxes on LetsEncrypt. General Activity ================ - Works progresses on MFA processes/policy, which will be implemented using a self-hosted keycloak instance. This service is in-process on integration with the third-party Okta service in order to provide identity services fot the Atlassian Cloud products. There have been numerous obstacles, but the team is working through them with some assistance from Atlassian and Okta (to varying degrees). - Continued work on the Agenda Tool, including navigation, revised UX, and cookies/preferences. - The team has begun work on "asfquart" as a utility package for our many Quart-based python apps: agenda, selfserve, IRD, ADP, idm. The package will encompass our "best practices" to share across the apps. Some coding has begun, using a review of the existing apps. - This month, infra held a great roundtable about trust networks and signing artifacts, including future paths such as sigstore. - Emergency upgrade of COnfluence for a highly criticial CVE. - Set up a monthly cron for Data Privacy to review all TLP websites for use of non-approved traffic trackers. Motomo is the supported mechanism for traffic recording/analysis. - Additional requirements gathering for the Artifact Distribution Platform (ADP). Development will begin soon. - Some work on the mailer script for our Subversion installation. The existing mailer is py2, which is inhibiting our upgrade. The new script is py3-compatible but missing some features. - Tweaks to our notification and escalation policies around alerts. - Working with the Security Team to automatically direct the flow of GitHub security notifications received by the org admins, onwards to the relevant PMC's security or private mailing lists. - One of our staff has been out for a couple weeks due to a medical issue, and is back! - Transferred a bunch of domains into our shared account at Namecheap. They had been held privately with shared management. Our new use of BitWarden allows for TOTP-based MFA on the shared account, enabling this new setup. Much better continuity. - Experimenting with a new backup/alternate solution. - Lots of great upgrades to our Yahoo-donated nodes for Jenkins. - Work has started on reducing the exposure of our wildcert certificate, in favor of broder use of LetsEncrypt across our boxes. The major trip is needing to upgrade some boxes from Ubuntu 18.04 to $latest. ----------------------------------------- Attachment 5: Report from the VP of Conferences [Rich Bowen] Rich Bowen has stepped down as VP Conferences. Responsibility for conferences will now live under Marketing & Publicity. Planning continues for Community Over Code Europe 2024. The website and CFP are available at https://eu.communityovercode.org/ ----------------------------------------- Attachment 6: Report from the Apache Travel Assistance Committee [Gavin McDonald] Apologies for the lateness of this. Nothing has happened since the last report other than a few more surveys come in from Halifax recipients. A calculation of costs for TAC and Halifax comes in at under $13K based on ramp.com. We should see surveys posted to the website in the next couple of weeks. We should be opening applications for Fosdem this week ----------------------------------------- Attachment 7: Report from the VP of Diversity and Inclusion [David Nalley] ----------------------------------------- Attachment 8: Report from the VP of Data Privacy [Christian Grobmeier] ----------------------------------------- Attachment 9: Report from the VP of Public Affairs [Dirk-Willem van Gulik] Europe ====== PLD - proceeding as expected; and has a workable `exceptions' subject to some more thorough legal analysis (which will aid understanding - it won't make any difference). This means full, strict, liability will be in place sometime early next year. These will void our `waivers' to a large extent downstream from us; i.e. `after' our commercial downstream parties. While a massive change for the industry - the impact on us appears very limited still. With a bit of luck we have enough final text in December to start doing a proper legal analysis. The CRA slowed down somewhat; with a complex, new and ill defined concept introduced late (Open Source Stewards). It also saw an increasingly wide swath of large economic EU interests expressing concern about open source. This is making it much easier for us to directly communicate with the member states / perm-reps. Likewise - coordination with our peer open source organisations through Open Forum Europe is generally productive; with conversations with the right people (Shadows, etc). Member-states their reaction now appear to shift from an optimistic idea that the current `place on the market' and `commercial context' variations are sufficiently well defined to avoid adverse effects on open source to now stressing that any imperfections w.r.t. open source (foundations) are 'not a worry' as they 'can be fixed later' (e.g. in the New Legislative Framework). Neither is likely to be enough/happen. However the slowdown is not as much as we hoped (i.e. into the Belgium presidency or the elections) -- with this Friday a meeting on the full text (including the recitals, which is very unusual) expected. USA === No changes - and NIST is increasingly engaging with industry (see also report by Ruth/Security). Given the standstill of progress on the normative standards organisations in Europe -- this still makes it increasingly likely that it is ultimately the US that will define the global standards in this area. Standards ========= No changes over the summer / no new conversations. ----------------------------------------- Attachment 10: Report from the VP of W3C Relations [Andy Seaborne] Nothing to report this month. ----------------------------------------- Attachment 11: Report from the Apache Legal Affairs Committee [Roman Shaposhnik] Past month has been pretty calm. Committee members took good care of resolving most issues on time. After resolving a handful of LEGAL issues, we made a significant dent in the number and are a tiny bit up now standing at 17 (from 16 last month). An individual reached out to us, mistakengly thinking that ASF Legal plays a role in any dispute over the implications of the Apache License v2. It was explained that since the project in question isn't part of the ASF (on top which it was it wasn't even clear if it was under ALv2) we are not getting involved. ----------------------------------------- Attachment 12: Report from the Apache Security Team Project [Mark J. Cox] - A recently fixed and published vulnerability in Apache ActiveMQ, CVE-2023-46604, has been getting some press attention due to it being exploited including by ransomware. It has been added to the CISA Known Exploited Vulnerabilities list. - We participated in Community over Code NA, among other conversations sharing the learnings from the formation of the Airflow security team. Stats for Oct 2023: 36 [license confusion] 12 [report/question relating to dependencies] 9 [support request/question not security notification]] Security reports: 76 (last months: 66, 65, 88) 15 ['airflow'] 14 ['website or other infrastructure'] 4 ['httpd'] 3 ['seatunnel', 'trafficserver'] 2 ['ambari', 'commons', 'inlong', 'jspwiki', 'linkis', 'openoffice', 'shiro', 'superset'] 1 ['activemq', 'allura', 'apisix', 'avro', 'axis', 'brpc', 'camel', 'doris', 'dubbo', 'flink', 'guacamole', 'hive', 'infra', 'iotdb', 'kafka', 'logging', 'oozie', 'solr', 'spark', 'tomcat', 'zookeeper'] In total, as of 1st November 2023, we're tracking 183 (last months: 172, 181) open issues across 56 projects, median age 116 days (last months: 104, 108). 50 of those issues have CVE names assigned. 20 (last month: 14) of these issues, across 8 projects, are older than 365 days. ----------------------------------------- Attachment 13: Report from the VP of Jakarta EE Relations [Rob Tompkins] ----------------------------------------- Attachment A: Report from the Apache AGE Project [Eya Badal] ## Description: The mission of Apache AGE is the creation and maintenance of software related to a multi-model database that enables graph and relational models built on PostgreSQL ## Project Status: Current project status: Ongoing: With high activity. Issues for the board: Issues for the board: none. ## Membership Data: Apache AGE was founded on 2022-05-17 (a year ago). There are currently 19 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. We are in the process of adding a new PMC and committer. We passed the DISCUSSION and are in the voting process now. Community changes, past quarter: - No new PMC members. Last addition was Muhammad Shoaib on 2023-06-05. - No new committers. Last addition was Muhammad Taha on 2023-03-29. ## Project Activity: Recent releases: PG11-1.4.0 was released on 2023-11-03. PG12-1.4.0 was released on 2023-10-17. PG13-1.4.0 was released on 2023-10-05. PG15-1.4.0 was released on 2023-09-25. PG14-1.4.0 was released on 2023-09-12. ## Community Health: The users@age.apache.org mailing list has witnessed an impressive uptick in engagement, and the project has shown a healthy increase in commits and closed pull requests on GitHub, indicating a vibrant and active development community. The number of code contributors has remained relatively steady, ensuring a stable development environment. ----------------------------------------- Attachment B: Report from the Apache Ambari Project [Brahma Reddy Battula] ## Description: The mission of Apache Ambari is the creation and maintenance of software related to Hadoop cluster management ## Project Status: Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache Ambari was founded 2022-06-15 (a year ago) There are currently 20 committers and 16 PMC members in this project. The Committer-to-PMC ratio is 5:4. Community changes, past quarter: - No new PMC members. Last addition was Zhiguo Wu on 2022-08-23. - Mohammad Arshad was added as committer on 2023-08-15 ## Project Activity: There's ongoing collaboration between Ambari and Bigtop communities on the Bigtop stack. The project has achieved a number of goals: 1. Adaption of Hadoop 3.3.5 to the Bigtop stack and integration with Ambari 2. Support for Ranger 2.4 3. Integration of theAmbari infrastructure Looking ahead, the community is gearing up for the release of Ambari Bigtop Stack 3.3. The key focuses for this release include: 1. Upgrading service versions to Bigtop 3.3.0. 2. Ongoing work to support Phoenix integration. 3. Adding YARN TimelineService V2 and Registry DNS support (currently under review). 4. In-progress efforts to incorporate Logsearch support. 5. Successful merger of Ranger 2.4 support into the Ambari Bigtop stack. 6. Integration of Ambari Infra (already merged). 7. Exploring support for openEuler OS with Ambari. 8. Future plans for adding Knox support. 9. Incorporating a YARN view in Ambari Views. 10. Addressing the continuous increase of WebSocket connections in the Ambari web UI. 11. Ongoing discussions about upgrading from Python 2 to Python 3. Active development is happening on py3 and fixing the CVE's. Work is being done on the ambari-2.8 branch for the next release. At this point the following releases are considered to be our latest: ambari-2.7.6 ambari-2.6.2 ## Community Health: #Commit activity: 18 commits in the past quarter (-67% decrease) 6 code contributors in the past quarter (-53% change) #GitHub PR activity: 31 PRs opened on GitHub, past quarter (-50% change) 22 PRs closed on GitHub, past quarter (-54% change) ----------------------------------------- Attachment C: Report from the Apache Ant Project [Jan Materne] ----------------------------------------- Attachment D: Report from the Apache Attic Project [Herve Boutemy] ## Description: The mission of Attic is the creation and maintenance of a home for dormant projects. ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Attic was founded 2008-11-19 (15 years ago) There are currently 19 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Herve Boutemy on 2015-07-19. - No new committers. Last addition was Herve Boutemy on 2016-01-27. ## Project Activity: Attic retired 2 projects this quarter: MXNet and Giraph. ## Community Health: Last retirements went well with our tools and documented process. ----------------------------------------- Attachment E: Report from the Apache BookKeeper Project [Enrico Olivelli] ## Description: The mission of BookKeeper is the creation and maintenance of software related to Replicated log service which can be used to build replicated state machines ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache BookKeeper was founded 2014-11-19 (9 years ago) There are currently 31 committers and 18 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Hang Chen on 2023-03-14. - No new committers. Last addition was Wenbing Shen on 2023-07-04. ## Project Activity: In the past quarter the activity slowed down a little bit. 4.16.1 was released on 2023-05-02. 4.16.0 was released on 2023-04-09. 4.15.4 was released on 2023-03-13. ## Community Health: Traffic on GitHub and on the mailing lists slowed down a little bit in the past quarter. The community is still adopting the versions we released in the firs half of the year. Nothing to worry about. Some interesting stats: - dev@bookkeeper.apache.org had a 25% decrease in traffic in the past quarter (43 emails compared to 57) - 69 commits in the past quarter (-44% change) - 63 PRs opened on GitHub, past quarter (-22% change) - 18 code contributors in the past quarter (12% increase) ----------------------------------------- Attachment F: Report from the Apache Brooklyn Project [Juan D. Cabrerizo] ## Description: The mission of Apache Brooklyn is the creation and maintenance of software related to a software framework for modeling, monitoring and managing cloud applications through autonomic blueprints. ## Project Status: Ongoing ## Membership Data: Apache Brooklyn was founded 2015-11-18 (8 years ago) There are currently 20 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Iuliana Cosmina on 2021-06-04. - No new committers. Last addition was Mykola Mandra on 2022-03-08. ## Project Activity: - The last major Brooklyn release was 1.0.0, released on 3rd March 2020. - New improvements in the workflow framework - CLI improvements for supporting OAUTH ## Community Health: - Discussions about issues and directions for the project continue on the mailing lists and in the Slack channel. - No new discussions have happened around the implications of moving Apache Jclouds to the attic yet. - There is a steady turnover of commits to the project (e.g. further enhancing the recent "workflow" capability of Brooklyn blueprints). ----------------------------------------- Attachment G: Report from the Apache BuildStream Project [Tristan Van Berkom] ----------------------------------------- Attachment H: Report from the Apache Cassandra Project [Josh McKenzie] ## Description: Apache Cassandra software is a highly scalable second-generation distributed database. ## Project Status: Current project status: the project is healthy and we're driving towards a 5.0 GA release, hopefully in CY 2023. Issues for the board: no issues require board attention at this time, but feedback on a number of open issues will be provided below. ## Membership Data: Apache Cassandra was founded 2010-02-16 (14 years ago) There are currently 72 committers and 36 PMC members in this project. The Committer-to-PMC ratio is 2:1. Community changes, past quarter: No new PMC members. Last addition was Dinesh Joshi on 2021-05-19. No new committers. Last addition was Patrick McFadin on 2023-03-13. Discussions are ongoing about new committers (Mike Adamson, Francisco Guerrero Hernandez, etc), both for the primary project but also subprojects we've brought in this year. We expect the Java Driver donation to lead to quite a few new committers as well. ## Project Activity: We're optimistic that we can get 5.0 to GA this calendar year; if it slips, however, that'd break us free from the "December release" pressure we have if we want to hit once a year CY releases, and many users are during change freeze from before Thanksgiving so aren't available to really heavily engage in testing during this window of time. ### Recent releases: 5.0-alpha2 was released on 2023-11-04. 5.0-alpha1 was released on 2023-09-08. 3.11.16 was released on 2023-08-20. ## Community Health: Community engagement in terms of dev and user ML, slack channels, meetups, etc. remains healthy. No concerns here, and we have a summit coming in early December for the project that should be good for the community. ## Other Updates ### PlanetCassandra: We continue to work with the folks from https://anant.us/ who put PlanetCassandra together on guiding their usage of the mark and keeping a neutral balance that's inviting to external vendors to participate. #### Site Contents: We've opened some discussions about the possibility of donating the site and the property to the ASF. Mark opened up a very helpful thread on our private@ clarifying some of the things we should work on w/Anant, and there are github issues tracking that work now. Patrick McFadin indicated that the code for PlanetCassandra is intended to be open sourced; I'll follow up with Rahul (w/Anant) on both this and the donation angle. While the pmc has approved, and has killswitch access credentials and full line-of-sight on all activities, it's not PMC managed at this time. It's not currently an ASF property and non-committers can and do submit content to the site. There's also news aggregation that takes place on the site (where we often discover mark violations as the content gets pulled in), which is a great way to see it in one place and be helpfully informing vendors about our brand requirements. A number of types of content has been identified as needing or being more appropriate to be on the formal project website and have since been moved. #### Domain: The owners of the domain registration (DataStax employees) state they have offered to donate the domain to the ASF multiple times but been repeatedly turned down. Not sure the details here; we will pursue this. https://cassandra.alteroot.org (Alteroot clone of Planet Cassandra) This site isn't maintained by the pmc or C* community. If brand could follow up with the maintainers of this site we'd appreciate it. ### Catalyst Program (formerly Cassandra MVP) Discussion continues with particular care taken to funnel all activity appropriate for ASF merit into those existing channels, and clearly demarcating what the program is intended to target (community building efforts) vs. committer (project building, code building efforts). ### Java Driver Donation Mick forgot to add general@incubator on the vote thread so we're working through anything that was missed there, e.g. some issues legally blocking distribution. We're receiving immediate help on this so we're unblocked and making progress. ### Subprojects Ecosystem is evolving and going well; as discussed above we're moving to raise committers for existing sub-projects and should be able to do the same for the Java Driver this quarter ### Dependencies and clarification on generative AI See https://issues.apache.org/jira/browse/LEGAL-656. The author of the jvector library our project took a dependency on was very clear about their usage of generative AI during authorship of the work and some PMC members were concerned that might have implications with us taking a dependency on this for a core feature in our upcoming release. We got clarification on the legal JIRA and the authors of the work clarified their compliance with ICLA clauses #5 and #7 in the comments on https://issues.apache.org/jira/browse/CASSANDRA-18715, clarifying any ambiguity there on rights and assignment. ----------------------------------------- Attachment I: Report from the Apache Cocoon Project [Cédric Damioli] ## Description: The mission of Cocoon is the creation and maintenance of software related to Web development framework: separation of concerns, component-based ## Project Status: Current project status: At risk / Considering moving to the Attic Issues for the board: Issues for the board: none. ## Membership Data: Apache Cocoon was founded 2003-01-22 (21 years ago) There are currently 80 committers and 32 PMC members in this project. The Committer-to-PMC ratio is 5:2. Community changes, past quarter: - No new PMC members. Last addition was Javier Puerto on 2012-07-06. - No new committers. Last addition was Christofer Dutz on 2023-05-10. ## Project Activity: Thanks to Christofer, a 2.3.0 release is on its way, but currently lacks 3 PMC members to review and vote. ## Community Health: The general consensus was to finally release the 2.3.0 and then consider moving to the Attic. The release vote did not receive 3 +1 votes yet A message has been posted to dev@ to explain the current status. We hope to be able to positively end the current release cycle and then probably properly submit the Attic vote. ----------------------------------------- Attachment J: Report from the Apache Community Development Project [Swapnil Mane] ## Description: The mission of Community Development is the creation and maintenance of software related to Resources to help people become involved with Apache projects ## Project Status: Current project status: Ongoing with high activity Issues for the board: none ## Membership Data: Apache Community Development was founded 2009-11-01 (14 years ago) There are currently 46 committers and 38 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Justin Mclean on 2023-07-18. - Carolina Escobar was added as committer on 2023-08-11 - Mara Ruvalcaba was added as committer on 2023-08-11 - Pedro Galván was added as committer on 2023-08-11 - Teyza Ponce was added as committer on 2023-08-11 ## Project Activity: ### Google Summer of Code 2023 We successfully wrapped up GSoC 2023. Our mentors have submitted all the proposals final review and out of 26 selected proposals 25 candidates completed there projects successfully. Our sincere congratulations to our 42 mentors and Org Admin team for their significant contributions to this program. This year, Google restarted its annual GSoC Mentor summit. Suresh Maru and Swapnil M Mane from ASF attended the event, and it turned out as a very fruitful summit. During the summit, we also brainstormed on new ideas that we plan to implement next year to make our GSoC participation even more impactful. ### Community Over Code 2023 We had a 2 day track with a wide range of community topics. It was really good to see so many different projects and contributors represented. We had people who were totally new to the ASF as well as some that were well established. There were some talks sparked discussions including the possibility of discussion panels, and more curated content. We will take these suggestions forward and see how we could incorporate them when planning the next event. The total attendance for Community track was 183 with the following 3 talks being the most attended. 1. Outreach: The Two-Way Street of Open Source Projects 2. A Journey through the ASF! 3. Category X for AI? Are LLM / ML projects repeating our licensing mistakes? ### ALC ALC Indore organized two events: 1 in-person and 1 virtual event. 1. GitHub Workshop with around 50 attendees [ALC1] 2. Session on Open Source and Internships opportunities with around 20 attendees [ALC2] ALC Beijing hasn't had any activities following the CoC Asia 2023 conference. However, they are planning to hold an annual meeting next month. ### Other We continue making improvements to various content on our website, such as: --- consolidate the various pages about voting/deciding --- community building advice - new docs about how to grow and retain community in an Apache project. --- added etiquette section and added some new links to Navbar, fixing some typos on the website --- added RSS feed links to section pages (/blog, /pmc, etc.), with a feed per section Thanks so much to Rich Bowen and Bertrand Delacretaz for their valuable contributions. All these changes can be found at [PR3] Improving Onboarding Experiences To ensure that newcomer onboarding experiences are welcoming, informative, easy to read, and accurately reflect how our communities work, Shane Curcuru started this proposal and he made great progress in it [IOE4]. We are also having an ongoing discussion on having valid languages and valid categories mention in the Apache project DOAPs files and how we can effectively manage and maintain these DOAPs files across ASF projects [DOAP5]. [ALC1] https://cwiki.apache.org/confluence/x/rpizDw [ALC2] https://cwiki.apache.org/confluence/x/sJizDw [PR3] https://s.apache.org/40abw [IOE4] https://cwiki.apache.org/confluence/x/-4mzDw [DOAP5] https://s.apache.org/zgg9m ## Community Health: On our dev@community.apache.org mailing list, we had a slight 17% increase in traffic in the past quarter (372 emails compared to 317). Overall, we had a good quarter and we continue our momentum of various activities, thanks to our community members. ----------------------------------------- Attachment K: Report from the Apache CouchDB Project [Jan Lehnardt] ## Description: Apache CouchDB software is a document-oriented database that can be queried and indexed in a MapReduce fashion using JavaScript. CouchDB also offers incremental replication with bi-directional conflict detection and resolution. ## Project Status: Current project status: Ongoing with moderate activity. Issues for the board: none. ## Membership Data: Apache CouchDB was founded 2008-11-19 (15 years ago) There are currently 72 committers and 18 PMC members in this project. The Committer-to-PMC ratio is 4:1. Community changes, past quarter: - No new PMC members. Last addition was Glynn Bird on 2023-03-14. - Jiahui Li was added as committer on 2023-08-24 - Páli Gábor was added as committer on 2023-08-24 ## Project Activity: - Continued preparation for our next feature release 3.4.0 featuring the first (experimental) release of a from-scratch modern Apache Lucene-based clustered full-text search add-on. - Update CI infra including new FreeBSD builders, new binary-package base images with newer dependencies. - Our team (@vatamane) has reported multiple issues to our dependency Erlang, which we hope can be addressed soon. - Continued work on adding a full Windows-based CI worker. ## Community Health: - while GitHub interactions are down a little over the mid-year period, our unofficial Slack support channel is continuing to see decent traffic with both new and existing users reaching out for help. ----------------------------------------- Attachment L: Report from the Apache Creadur Project [Philipp Ottlinger] ## Description: The mission of Creadur is the creation and maintenance of software related to Comprehension and auditing of software distributions ## Project Status: Current project status: Ongoing high Issues for the board: none ## Membership Data: Apache Creadur was founded 2012-04-18 (12 years ago) There are currently 11 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Karl Heinz Marbaise on 2016-08-30. - No new committers. Last addition was Karl Heinz Marbaise on 2016-08-30. ## Project Activity: When we wanted to start a new release a lot of contributions and bug reports and fixes came in. So the project's activity skyrocketed. Release 0.16 will be created once that contributions stabilized new features. ## Community Health: With 2 new contributors the project sort of rebooted and awoke from its dormant state. The contributors (mainly one) started a lot of discussions about new features and bugfixes. This all happens via Github PRs and mail threads. - dev@creadur.apache.org had a 125% increase in traffic in the past quarter (237 emails compared to 105) - 15 issues opened in JIRA, past quarter (400% increase) - 5 issues closed in JIRA, past quarter (66% increase) - 100 commits in the past quarter (376% increase) - 20 PRs opened on GitHub, past quarter (42% increase) - 19 PRs closed on GitHub, past quarter (11% increase) ----------------------------------------- Attachment M: Report from the Apache DataSketches Project [Lee Rhodes] ## Description: The mission of Apache DataSketches is the creation and maintenance of software related to an open source, high-performance library of streaming algorithms commonly called "sketches" in the data sciences. Sketches are small, stateful programs that process massive data as a stream and can provide approximate answers, with mathematical guarantees, to computationally difficult queries orders-of-magnitude faster than traditional, exact methods ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache DataSketches was founded 2020-12-15 (3 years ago) There are currently 16 committers and 14 PMC members in this project. The Committer-to-PMC ratio is 8:7. Community changes, past quarter: - No new PMC members. Last addition was Charlie Dickens on 2023-07-04. - No new committers. Last addition was Will Lauer on 2022-03-07. ## Project Activity: Releases in addition to the releases found by your Bot: C++ PostgreSQL Adapter 1.6.0, 2023-05-15 C++, Python Core 4.1.0, 2023-05-03 We were invited to present a talk at the Simons Institute (UC Berkeley) at their international conference on "Sketching and Algorithm Design", Oct 9-13, 2023. Our talk was titled "Insights from Engineering Sketches for Production and Using Sketches at Scale." This is important recognition that our work is becoming widely recognized, especially in the academic and research communities. We also presented a paper at the BigDataLDN 2023 conference in London, Sep 20 & 21, 2023. ## Community Health: Our project is healthy. We have a small but loyal community of users that contact us when they have questions or issues. Of special interest is that our project is now frequently referenced in scientific papers in the area of streaming sketches. In these papers the Apache DataSketches project is often referenced as the most widely used and best known library of open source sketches (in the research community anyway!). ----------------------------------------- Attachment N: Report from the Apache DeltaSpike Project [Mark Struberg] ## Description: Apache DeltaSpike is a suite of portable CDI (Contexts & Dependency Injection) extensions intended to make application development easier when working with CDI and Java EE. Some of its key features include: - A core runtime that supports component configuration, type safe messaging and internationalization, and exception handling. - A suite of utilities to make programmatic bean lookup easier. - A plugin for Java SE to bootstrap various CDI containers. - JSF integration - JPA integration and transaction support. - A Data module, to create an easy to use repository pattern on top of JPA. - Testing support to allow low level unit testing of CDI enabled projects. ## Issues: There are no issues requiring board attention at this time. ## Activity Work towards releasing 2.0 did continue and we are ready to at least put out a milestone release. The prerequisites are now fulfilled so we can add back more servers to our test chain. ## Community Health We've got a roll-call which got replies from 5 PMC members. In the last quarter we havd 3 active committes and quite an increase of activity. Sadly there are no new committer candidates on the horizon. ## Releases - 1.9.6 was released on 2022-04-12. - 1.9.5 was released on 2021-03-10. - 1.9.4 was released on 2020-06-12. ## Project Composition: - There are currently 35 committers and 19 PMC members in this project. - The Committer-to-PMC ratio is roughly 9:5. ## Community changes, past quarter: - No new PMC members. Last addition was Harald Wellmann on 2016-05-19. - No new committers. Last addition was Christian Beikov on 2019-10-21. ----------------------------------------- Attachment O: Report from the Apache Directory Project [Shawn McKinney] ## Description: The Apache Directory TLP consists of the following sub-projects: - ApacheDS: An extensible and embeddable directory server entirely written in Java, which has been certified LDAPv3 compatible by the Open Group. - LDAP API: An ongoing effort to provide an enhanced LDAP API, as a replacement for JNDI and the existing LDAP API (jLdap and Mozilla LDAP API). This is a "schema aware” API with some convenient ways to access all types of LDAP servers. - Studio: A complete directory tooling platform intended to be used with any LDAP server however it is particularly designed for use with ApacheDS. It is an Eclipse RCP application, composed of several Eclipse (OSGi) plugins. - Fortress: A standards-based authorization platform that provides role-based access control, delegated administration and password policy services with an LDAP backend. - Kerby: An implementation of Kerberos v5 protocol and contains various tools to access and manage kerberos principals and keytabs. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile. - Mavibot: An embeddable key-value database library with MVCC (Multi Version Concurrency Control) support. - SCIMple: An implementation of SCIM v2.0 specification. ## Project Status: - New: Scimple release being worked on. - Ongoing: Fortress migrated to Jakarta - Ongoing: ApacheDS first release in over 3 years. - At risk: With the addition of Brian Demers we only have 4 active PMC members to vote on releases. ## Membership Data: Apache Directory was founded 2005-02-22 (17 years ago) There are currently 59 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:3. Community changes, past quarter: - Brian Demers added to the PMC members on 2023-10-23. - Fredrik Roubert was added as committer on 2023-07-10 - Longtime PMC member Stefan Seelman went emeritus. ## Project Activity: Overall: Activity's slow but steady, the projects are being maintained. ## Community Health: No problems to report. 4Q activity low but PMC has active members and the project continues to be adequately maintained. ## Releases: - Apache Fortress 3.0.0 was released on 2023-09-06. - Apache LDAP API 2.1.4 was released on 2023-08-29. - Apache LDAP API 2.1.5 was released on 2023-10-12. - Apache DS 2.0.0.AM27 was released on 2023-10-21. ----------------------------------------- Attachment P: Report from the Apache Doris Project [Mingyu Chen] ----------------------------------------- Attachment Q: Report from the Apache Drill Project [Charles Givre] ----------------------------------------- Attachment R: Report from the Apache Druid Project [Gian Merlino] ----------------------------------------- Attachment S: Report from the Apache Empire-db Project [Rainer Döbele] ## Description: Empire-db is a lightweight relational database access library dealing with all aspects of storing, manipulating, retrieving and modelling data in relational database management systems (RDBMS). As an alternative to traditional OR-Mapping solutions, it provides an SQL centric, no-compromise approach that uses a Java-Object-Model rather than Mapping Files or Annotations. ## Project Status: Current project status: Ongoing with low activity Issues for the board: none ## Membership Data: Apache Empire-db was founded 2012-01-24 (12 years ago) There are currently 10 committers and 9 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Jan Glaubitz on 2016-07-10. - No new committers. Last addition was Ralf Eichinger on 2022-03-15. ## Project Activity: Latest release is empire-db-3.1.0 released on 2023-04-22. Given the maturity of the code base and that several fixes and small improvments have been provided with our April release there has not been demand for any major code changes yet. ## Community Health: Our community is still alive and healthy albeit low activity with 3 commits from 3 code contributors and 1 pull requst from github. ----------------------------------------- Attachment T: Report from the Apache EventMesh Project [Eason Chen] ## Description: The mission of Apache EventMesh is the creation and maintenance of software related to a fully serverless platform used to build distributed event-driven applications ## Project Status: Current project status: With high activity. Issues for the board: none. ## Membership Data: Apache EventMesh was founded 2023-03-22 (8 months ago) There are currently 47 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. Community changes, past quarter: - No new PMC members. - No new committers. ## Project Activity: participate Community Over Code North America 2023. The 2023 Fintech 1024 event held in Beijing, participate in the event and share EventMesh practice. Apache EventMesh docker image repository application completed. New Features: 1.eventmesh-sdk-c merged 2.connector plugins for jdbc, file, prometheus, spring merged 3.rust sdk support cloudevents protocol ## Community Health: 7 new contributors. The new features were under designing or developing, so the commits and PR activity seems a slight decrease. Overall community health is good. ----------------------------------------- Attachment U: Report from the Apache Flume Project [Balázs Donát Bessenyei] Considering the level of activity, number of contributors and alignment of the missions, Flume and Logging Services have decided to merge. Going forward, Flume will be stewarded by the Logging Services PMC. This is a final Flume board report. A resolution for the merger and all further reports are going to be included in the Logging Services submissions. ----------------------------------------- Attachment V: Report from the Apache FreeMarker Project [Dániel Dékány] ## Description: Apache FreeMarker is a template engine, i.e. a generic tool to generate text output based on templates. Apache FreeMarker is implemented in Java as a class library for programmers. FreeMarker 2 (the current stable line) produces releases since 2002. The FreeMarker project has joined the ASF in 2015, and graduated from the Incubator in early 2018. ## Issues: There are no issues requiring board attention at this time. ## Activity: Activity was low in recent months. ## Health report: Activity is currently low (development will probably ramp up in December). User questions (mostly on StackOverflow) and new Jira issues are being answered promptly though. The short term goal is to polish native java.time support, and also to merge pending PR-s, and release it with 2.3.33, early 2024. The very long term goal is continuing the ongoing development on the 3.0 branch, so that the project can innovate and the code base can become much cleaner and more attractive for new committers. ## PMC changes: - Currently 7 PMC members. - No changes since the graduation on 2018-03-21 ## Committer base changes: - Currently 8 committers. - Last added: Siegfried Goeschl on 2020-01-07 ## Releases: - 2.3.32 was released on 2023-01-14 ----------------------------------------- Attachment W: Report from the Apache Geode Project [Mark Bretl] ## Description: The mission of Apache Geode is the creation and maintenance of software related to a data management platform that provides real-time, consistent access to data-intensive applications throughout widely distributed cloud architectures. ## Project Status: Current project status: Ongoing low activity, at-risk to being dormant Issues for the board: None ## Membership Data: Apache Geode was founded 2016-11-15 (7 years ago) There are currently 118 committers and 31 PMC members in this project. While the total membership of the PMC is 31, there are less than 10 active members. Community changes, past quarter: - No new PMC members. Last addition was Calvin Kirs on 2022-11-14. - No new committers. Last addition was Calvin Kirs on 2022-11-15. ## Project Activity: There has been some recent activity on GitHub, with 6 PRs opened on GitHub and closing two PRs, however, no releases are scheduled at this time. ## Community Health: Apache Geode turns 7 years old this month. It has now been a full year since a majority of the PMC and community left the project. The health of the community has largely stayed the same with low activity and not a lot of participation. ----------------------------------------- Attachment X: Report from the Apache Gora Project [Kevin Ratnasekera] ----------------------------------------- Attachment Y: Report from the Apache Groovy Project [Paul King] ## Description: Apache Groovy is responsible for the evolution and maintenance of the Groovy programming language. ## Project Status: Current project status: Ongoing with moderate activity. Issues for the board: No issues requiring board attention at this time. ## Membership Data: Apache Groovy was founded 2015-11-18 (8 years ago) There are currently 21 committers and 12 PMC members in this project. The Committer-to-PMC ratio is 7:4. Community changes, past quarter: - No new PMC members. Last addition was Remko Popma on 2022-07-13. - Zongle Wang was added as committer on 2023-08-22. ## Project Activity: The project is responding well to raised issues for previous releases and making steady progress towards our next major goal of releasing Groovy 5. Recent releases: 4.0.15 was released on 2023-09-14. 5.0.0-alpha-2 was released on 2023-09-14. 2.5.23 was released on 2023-08-22. 3.0.19 was released on 2023-08-22. 4.0.14 was released on 2023-08-22. 5.0.0-alpha-1 was released on 2023-08-22. ## Community Health: Activity on mailing lists, the issue tracker and GitHub was similar to previous quarters overall. This quarter on our main branch (which corresponds to Groovy 5) of our core repo, 172 commits were contributed from 12 contributors including 6 non-committer contributors (4 new). There were 311 commits from 12 contributors across all branches/repos. There were several noteworthy community highlights last quarter: - We released the first alpha version(s) of Groovy 5. We continue further work on this exciting release. - We held a small online celebration of 20 years since the first commit in the project repo (includes pre-ASF history). - We held a successful Groovy track at the CommunityOverCode conference in Halifax in October. There were 10 talks across 2 days including some joint scaling data science talks with Apache Ignite. We are very thankful to all the organisers and other helpers. A trip report, mostly focussing on the Groovy track, is on the Groovy blog: https://groovy.apache.org/blog/community-over-code-na-2023 ----------------------------------------- Attachment Z: Report from the Apache Hop Project [Hans Van Akelyen] ## Description: The mission of Apache Hop is the creation and maintenance of software related to a platform for data orchestration ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Hop was founded 2021-12-15 (2 years ago) There are currently 23 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Bart Maertens on 2021-12-15. - No new committers. Last addition was Shuiliang Xue on 2022-09-28. ## Project Activity: The Apache Hop team has created a new release 2.6.0 and is working on it's 2.7.0 release. No noteworthy other activity since the previous report ## Community Health: Over the past quarter, our number of contributors has remained about the same. We have seen a decrease in the developer mailing list but user emails have gone up. Our socials have been very quiet and will need a boost to have more inflow of new users/developers. The blocks of code have grown a bit explaining why the number of tickets that has been closed in the last quarter has decreased. Overall we are happy with the current status. ----------------------------------------- Attachment AA: Report from the Apache HTTP Server Project [Joe Orton] ## Description: The mission of HTTP Server is the creation and maintenance of software related to Apache Web Server (httpd) ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache HTTP Server was founded 1995-02-27 (29 years ago) There are currently 128 committers and 55 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Giovanni Bechis on 2021-06-11. - No new committers. Last addition was Emmanuel Dreyfus on 2022-11-05. ## Project Activity: The project released 2.4.58 in October, the fourth release this year from the 2.4.x stable branch, and with six months since the previous 2.4 release. This release addressed three outstanding security issues, two rated Low and one Moderate severity, as well as various bug fixes and minor enhancements. One of the security issues addressed was found during testing of the HTTP/2 "Rapid Reset" vulnerability which received widespread publicity. Mod_http2 author (and release manager for 2.4.58) Stefan Eissing wrote up a blog post explaining the background and impact of "Rapid Reset": https://github.com/icing/blog/blob/main/h2-rapid-reset.md ## Community Health: Community discussion was quiet outside of the release activity in the two months since my last report. We see growth in code submissions via GitHub Pull Requests at a pace slightly ahead of the rate they are being closed, leading to a slow-growing backlog of PRs. ----------------------------------------- Attachment AB: Report from the Apache HttpComponents Project [Michael Osipov] ----------------------------------------- Attachment AC: Report from the Apache Ignite Project [Dmitry Pavlov] ## Description: The mission of Ignite project is the creation and maintenance of software related to high-performance distributed database engine providing in-memory and persistent data caching, partitioning, processing, and querying components. ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Ignite was founded 2015-08-19 (8 years ago) There are currently 75 committers and 39 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Ivan Daschinsky on 2022-09-15. - Aleksandr Polovtsev was added as committer on 2023-08-17 - Stephen Darlington was added as committer on 2023-08-24 ## Project Activity: Releases: - no recent releases, 2.15.0 (latest stable) was released on 2023-05-02. - next release 2.16.0 was proposed by Nikita Amelchev to be finalized at the end of November. This release will improve Apache Calcite engine support, cluster management API, and add support of JDK 14-21. Other activity: - Machine Learning (ML) module was moved to ignite-extensions. - Transactions engine code cleanup is in progress (MVCC removal). - Community discusses discontinuing JDK 8 support. - Performance improvement proposed for peristence engine and storing checkpoint recovery data. ## Community Health: - There is notable traffic decrease in userlist (96 emails compared to 200 in the past quarter). This might be caused by opening Github issues for users. - There is decrease in commits, JIRA and Github issues opened (-20-30%). - Count of issues closed increased both in JIRA and GitHub (+20-50%). - Community attracts new contributors, JIRA accounts are requested. Number of code contributors has been increased (+23%). - security@ list subscription of non-PMC member was cancelled (jury.gerzhedowich@gmail.com). - PMC started a few discussions about new committers and new PMC members. ----------------------------------------- Attachment AD: Report from the Apache Impala Project [Jim Apple] ----------------------------------------- Attachment AE: Report from the Apache Incubator Project [Justin Mclean] ----------------------------------------- Attachment AF: Report from the Apache Juneau Project [James Bognar] ## Description: The mission of Apache Juneau is the creation and maintenance of software related to a toolkit for marshalling POJOs to a wide variety of content types using a common framework, and for creating sophisticated self-documenting REST interfaces and microservices using VERY little code ## Project Status: Current project status: No major development at the moment. Mostly working on security patches. Issues for the board: None ## Membership Data: Apache Juneau was founded 2017-10-17 (6 years ago) There are currently 13 committers and 13 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Gary D. Gregory on 2023-04-02. - No new committers. Last addition was Gary D. Gregory on 2023-04-03. ## Project Activity: Last major release (9.0.0) was done on 2023-02-27. Last maintenance release (9.0.1) was done on 2023-09-06. ## Community Health: Community health is good. The community is small but we didn't have any issues with the latest release vote. ----------------------------------------- Attachment AG: Report from the Apache Kafka Project [Mickael Maison] ## Description: The mission of Kafka is the creation and maintenance of software related to Distributed publish-subscribe messaging system ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Kafka was founded 2012-11-21 (11 years ago) There are currently 59 committers and 34 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - Justine Olshan was added to the PMC on 2023-09-23 - Satish Duggana was added to the PMC on 2023-10-27 - Lucas Brutschy was added as committer on 2023-09-21 - Yash Mayya was added as committer on 2023-09-21 ## Project Activity: Kafka 3.7.0 is in progress, it is expected to release in January. Kafka 3.5.2 is also in progress and it is expected to release in November. The project made 1 release in the past quarter - 3.6.0 on October 10. It contained significant improvements including: Core: - Support for Tiered Storage in early access (KIP-405) - Support for duplicate listener on IPv4/IPv6 (KIP-797) - Metadata Transaction (KIP-868) Connect: - First class offsets support (KIP-875) - Modernize Plugin Discovery (KIP-898) Streams: - Shareable State Stores (KIP-813) - Rack Aware task assignment (KIP-925) ## Community Health: The project activity has been steady since the last quarter. The increase in Jiras is again mostly due to the large work items in progress (Tiered Storage, KRaft) and the preparation for Kafka 4.0. ## Feedback from previous report ### Non PMC subscribed to security/private list: All emails are now associated with an Apache account - private: All subscribers are now PMC or Apache members. - security: A few committers are subscribed to this list as they helped investigations of previous security reports. ----------------------------------------- Attachment AH: Report from the Apache Kibble Project [Sharan Foga] ## Description: The mission of Apache Kibble is the creation and maintenance of software related to an interactive project activity analyzer and aggregator ## Project Status: Current project status: Dormant, low activity Issues for the board: None ## Membership Data: Apache Kibble was founded 2017-10-18 (6 years ago) There are currently 15 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 8:7. Community changes, past quarter: - No new PMC members. Last addition was Michał Słowikowski on 2021-05-03. - No new committers. Last addition was Kaxil Naik on 2021-02-21. ## Project Activity: The project has not yet made a release. There has been no activity since our last report. ## Community Health: The community is small and our contributors have had no free cycles to kick off any of the suggested work. I'd like to see if we can get around to starting some activities in the next quarter and if not then we may need to seriously start thinking about an Attic discussion. ----------------------------------------- Attachment AI: Report from the Apache Knox Project [Larry McCay] ## Description: The mission of Knox is the creation and maintenance of software related to Simplify and normalize the deployment and implementation of secure Hadoop clusters ## Project Status: Current project status:Work over the last quarter has primarily been focused on bug fixes and minor improvements. Planning for a 2.1.0 release will begin shortly in order to determine what fixes and features will be required. Issues for the board: none. ## Membership Data: Apache Knox was founded 2014-02-18 (10 years ago) There are currently 24 committers and 20 PMC members in this project. The Committer-to-PMC ratio is 6:5. Community changes, past quarter: - No new PMC members. Last addition was Marton Balázs on 2022-11-27. - No new committers. Last addition was Marton Balázs on 2022-11-28. ## Project Activity: A milestone release of 2.0.0 was released in 2/2023. We will begin planning for a 2.1.0 release shortly. This release will be comprised of bug and security fixes and potentially new features which will be discussed in email and possibly via KIP wiki pages for one-pager design documents. ## Community Health: The following metrics reflect the status of a mature project within a period of bug fixes and minor improvements. It will pickup with the planning and execution of a 2.1.0 release as we determine the larger features to include. 38 issues opened in JIRA, past quarter (-2% change) 31 issues closed in JIRA,past quarter (-6% change) 32 commits in the past quarter (18% increase) 4 code contributors in the past quarter (-42% change) 35 PRs opened on GitHub, past quarter (29% increase) 32 PRs closed on GitHub, past quarter (45% increase) ----------------------------------------- Attachment AJ: Report from the Apache Kylin Project [Shao Feng Shi] ## Description: The mission of Apache Kylin is the creation and maintenance of software related to a distributed and scalable OLAP engine ## Project Status: Current project status: Ongoing Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache Kylin was founded 2015-11-18 (8 years ago) There are currently 48 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Xiaoxiang Yu on 2020-10-08. - Qian Xia was added as committer on 2023-08-16 ## Project Activity: Recent releases: 5.0.0-beta was released on 2023-08-30. 5.0.0-alpha was released on 2023-04-26. 4.0.3 was released on 2022-12-23.own data here] ## Community Health: Contributors are working on the release of 5.0.0 and 4.0.4. Plan to release 4.0.4 in Nov 2023; Plan to release 5.0.0 in Dec 2023 Less time spent on the community as we're busy on our full-time job. dev@kylin.apache.org had a 32% decrease in traffic in the past quarter (97 emails compared to 141) issues@kylin.apache.org had a 63% decrease in traffic in the past quarter (310 emails compared to 836) user@kylin.apache.org had a 126% increase in traffic in the past quarter (34 emails compared to 15) 22 issues opened in JIRA, past quarter (-84% change) 63 issues closed in JIRA, past quarter (-43% change) 75 commits in the past quarter (-63% change) 17 code contributors in the past quarter (-43% change) 11 PRs opened on GitHub, past quarter (-56% change) 13 PRs closed on GitHub, past quarter (-31% change) ----------------------------------------- Attachment AK: Report from the Apache Libcloud Project [Tomaž Muraus] ## Description Libcloud is a Python library that abstracts away the differences among multiple cloud provider APIs. ## Project Status There was a lack of activity in the past so the board has started a roll call. The board call was initially missed since it went to spam, but that was resolved later on. We had a total of three people (PMC members) responding to the roll call (https://lists.apache.org/thread/0191sz3nomyvd6yw2sf0ns09mohq1f9w): - Eric Johnson - Anthonuy Shaw - Tomaz Muraus (myself) In theory this means we have enough active people to perform the minimum duties which are required to keep the project viable and active. In addition to Eric and Anthony we usually also have Jerry Chen, another PMC member, participating in the release testing and voting. ## Project Activity Project activity over the last couple of months has remained stable. Last stable release (v3.8.0) was released in August and we are expecting to release v3.9.0 some time in the next couple of months. ## Community Health Over the past couple of months we have received a small amount of external contributions. ## Membership Data Apache Libcloud was founded 2011-05-19 (12 years ago) There are currently 24 committers and 16 PMC members in this project. The Committer-to-PMC ratio is 3:2. Community changes, past quarter: - No new PMC members. Last addition was Dimitris Moraitis on 2021-05-07. - No new committers. Last addition was Dimitris Moraitis on 2021-05-02. ----------------------------------------- Attachment AL: Report from the Apache Logging Services Project [Volkan Yazici] ## Description: The mission of the Apache Logging Services project is to create and maintain software for managing the logging of application behavior, and for related software components. ## Project Status: - Log4j project is "ongoing" with high activity. - Log4cxx is "ongoing" with moderate activity by 1 PMC member (rmiddleton) and 1 committer (swebb2066). - Log4net is "at risk", since it hardly gets updated and is maintained by 1 PMC member (davydm). - PMC is having conflicts regarding deprecation of certain components[1][2][3][4][5]. Trying to establish an objective baseline for what/how to keep has failed too[6]. - Except one objection from `vy`[7], Logging Services and Flume PMCs have decided to decommission the latter and merge its members and projects into the former[8][9]. [1] https://lists.apache.org/thread/gy8j0tgjk6d5njvpm7gy58d2lvwj5s0c [2] https://lists.apache.org/thread/fsykp5hxr9z0c2h85snnhnj2pq553t6q [3] https://lists.apache.org/thread/szvpxkgpvc1kgz4zbm4m9crwv3ml9xpg [4] https://lists.apache.org/thread/jwzx3k2onw8scyr7ts1sdpdj29x71g7v [5] https://lists.apache.org/thread/k3t25j3hpzsvtlt9fps354tg2hlqojwj [6] https://lists.apache.org/thread/zlqb94qyhvooxy72ym416r5yfg9oh4g2 [7] https://lists.apache.org/thread/cfyr6tdk8999rzbyo8k1v5crlhr8onx3 [8] https://lists.apache.org/thread/9y6cgvzbnhz6jds38v2o9xnfk52n8492 [9] https://lists.apache.org/thread/9c6sw1f4p50xdl82qj6nfgpsc3cncfkg ## Membership Data: Apache Logging Services was founded 2003-12-17 (20 years ago) There are currently 40 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Piotr Karwasz on 2022-07-19. - No new committers. Last addition was Piotr Karwasz on 2022-03-03. ## Project Activity: - The CI infrastructure based on GitHub Actions that was earlier experimented using Log4j Tools is moved to `logging-parent` and employed for *all* Java-based projects. It allowed the PMC to streamline various standards. As a result, all "active" projects' code base, website, dependencies, etc. are revamped and new releases are published. - Log4j is warming up to deliver its first release with complete SBOM and VDR/VEX support. Involved PMC members are in contact with Sonatype, OWASP, CycloneDX, and Tidelift to determine the best course of action. - Due to lack of consensus on several deprecation proposals, certain PMC members put up a "project activity monitor"[10] to increase the transparency towards users on unmaintained projects. - Log4cxx incorporated various minor improvements. - Log4net hasn't seen any activity. [10] https://logging-activity-monitor.staged.apache.org/ ## Community Health: - Log4j is currently the most active project across GitHub and mailing lists. The project has enabled GitHub Discussions and so far it has been a great success. This helped users reaching out to GitHub Issues for questions, even though Log4j support policy explicitly asks to not use issue tracking system for questions[11]. - Log4cxx and Log4net haven't seen any community activity. [11] https://logging.apache.org/log4j/2.x/support.html#discussions ----------------------------------------- Attachment AM: Report from the Apache ManifoldCF Project [Karl Wright] ## Description: The mission of ManifoldCF is the creation and maintenance of software related to Framework for connecting source content repositories to target repositories or indexes. ## Issues: In response to: clr: Please add a section that lists the most recent additions (names and dates) to both PMC membership and committers, regardless of when they were made. This helps the board to understand the health of the community. Thanks. We were explicitly asked to remove references to individual users in response to the August report. We obviously cannot meet both of those requests. Please decide which it is going to be. I am happy to adhere to either one but I need consistency. In response to: rbowen: I'm confused by an apparent contradiction in your report. You say that two pmc members were added, but also say only one was added. Can you clarify in your next report please? I was unclear. I apologize. Two were added, as pointed out by cdutz below, but only one in the reporting period. cdutz: Whimsy claims that Furkan was added on 2023-08-03 and Mingchun was added on 2023-06-07 (Which was not in this reporting period) However I have noticed that for almost half a year only one single person has been making commits. It this something we should be worried about? Committers have been committing via Github pull request and are unwilling to use svn. There have been in actuality at least three active committers but you don't see them in the svn logs for this reason. Converting MCF tooling to use github fully would require our release process to be retooled which requires a significant investment on someone's part that isn't happening right now. ## Membership Data: Apache ManifoldCF was founded 2012-05-15 (11 years ago) There are currently 25 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Recent community changes: - A PMC member was added on 2023-06-07 - Another PMC member was added on 2023-08-03 - No new committers. Last addition was on 2019-08-17. ## Project Activity: ManifoldCF graduated from the Apache Incubator on May 16, 2012. Since then, there have been numerous major releases, including a 2.26 release on November 1st, 2023. The next major release, 2.27, is tentatively scheduled for March 31st, 2024. The November release was delayed because of numerous issues with non- backwards-compatible changes to dependent libraries. Many previously inactive committers put in significant time to address these. Automated tools that check for "bad" versions of libraries are still a problem for us because many older jars have no replacement, e.g. Axis 1.4.x, and yet still come up as having CVE vulnerabilities. It is of little use to explain to users that ManifoldCF is a consumer of internal trusted content and exploits cannot be triggered unless such internal content is compromised. Redevelopment, or the discarding of many of ManifoldCF's connectors would be the only way to get past such concerns. Zookeeper issues, described in previous reports, have been resolved. These were due to a change in contract for Zookeeper instantiation. However, the development world has also shifted away from the infrastructure the project uses and this has put more load on the volunteers who remain, since committers today no longer can work with svn or even JIRA in many cases. Our processes and infrastructure are suddenly obsolete and we don't have bandwidth to retool at this time. A dev discussion about specific aspects of that (e.g. the release documentation) has begun. Our version of Forrest, which is what we use to build documentation, is incompatible with JDK 11, which means either we upgrade Forrest and also redo our customizations, or we abandon it in favor of a whole new technology and completely redo the documentation. ## Community Health: Issues around PMC members have now been resolved. Two recent PMC member additions have been made and this has fixed the difficulty getting a quorum. New committers who seemed like plausible additions six months ago did not remain active enough to warrant an invite, however. There are several consulting companies who work on the project as part of their business, but turnover there generally means we don't see the same people being involved for more than a few months at a time. It is difficult to know what to do given these patterns, since adding committers who will almost immediately go inactive seems like a non-helpful thing to do. We're always on the lookout for committers with an individual interest, but those are increasingly rare and everyone who has been involved in this project for the long term has less and less time for volunteer activities. ----------------------------------------- Attachment AN: Report from the Apache Mnemonic Project [Gordon King] ----------------------------------------- Attachment AO: Report from the Apache Oozie Project [Dénes Bodó] ## Description: The mission of Oozie is the creation and maintenance of software related to A workflow scheduler system to manage Apache Hadoop jobs. ## Project Status: Current project status: Ongoing Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache Oozie was founded 2012-08-28 (11 years ago) There are currently 28 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 7:6. Community changes, past quarter: - No new PMC members. Last addition was Dénes Bodó on 2021-04-08. - No new committers. Last addition was János Makai on 2022-12-28. ## Project Activity: Latest version of 5.2.1 was released on 2021-02-26. 5.2.0 was released on 2019-12-06. 5.1.0 was released on 2018-12-19. Slow but steady development is going on, mostly with bug fixes and stability improvements. We still have the need to move to Github PR methodology and upgrade the core Hadoop version to Hadoop 3. ## Community Health: Community activity is low but there are enough active people on the project to provide oversight. Some metrics about the last quarter: 2 issues opened in JIRA 1 issue closed in JIRA 1 commit ----------------------------------------- Attachment AP: Report from the Apache OpenJPA Project [Mark Struberg] ## Description: The mission of OpenJPA is the creation and maintenance of software related to JPA: Object Relational Mapping for Java ## Issues: There are no issues requiring board attention. ## Project Activity: We finished our JakartaEE9 migration and also implemented a big task by moving away from the unmaintained sourceforge Serp library to native ObjectWeb ASM. This also increased portability with the latest Java versions. Right now we are preparing a milestone release for OpenJPA-4.0.x ## Community Health: Small but active community. We've had 5 active committers in the last quarter and regular replies on the mailing list. ## Membership Data: Apache OpenJPA was founded 2007-05-16 (15 years ago) There are currently 35 committers and 18 PMC members in this project. The Committer-to-PMC ratio is roughly 9:5. ## Community changes, past quarter: - No new PMC members. Last addition was Maxim Solodovnik on 2019-04-13. - No new committers. Last addition was Matt Pavlovich on 2019-05-22. Recent releases: 3.2.2 was released on 2022-03-16. 3.2.1 was released on 2022-02-06. 3.2.0 was released on 2021-05-14. 4.0.x in preparation ----------------------------------------- Attachment AQ: Report from the Apache OpenOffice Project [Dave Fisher] ## Description The mission of OpenOffice is the creation and maintenance of software related to an open-source, office-document productivity suite ## Project Status Current project status: Ongoing Low Issues for the board: None ## Membership Data Apache OpenOffice was founded 2012-10-16 (11 years ago) There are currently 141 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 9:2. Community changes, past quarter — No new PMC members. The last addition was Czesław Wolański on 2023-01-14. — No new committers. The last addition was Francis Campos on 2022-06-06. ## Project Activity Recent releases: — 4.1.14 was released on 2023-02-27. — 4.1.13 was released on 2022-07-22. — 4.1.12 was released on 2022-05-04. Binary downloads (total over all) as of October 29: 360,813,536 Project Website Updates in the OpenOffice-project repository: — Updates related to OpenOffice.org language translations Codebase in OpenOffice repository: — Work continues on the 4.2 future release; recently this work included a review of release blockers. — The 4.1.15 rc1 is available for testing of maintenance and security releases as well as support for older operating systems. — dev@openoffice.apache.org had a 28% increase in traffic in the past quarter (263 emails compared to 205) — issues@openoffice.apache.org had a 60% increase in traffic in the past quarter (162 emails compared to 101) Documentation: — The OpenOffice-docs repository is where the small documentation team makes updates. There was activity here. — The OpenOffice-org repository has had the usual download count updates. — Translations were added to the OpenOffice.org website for Ukrainian. — MediaWiki (wiki.openoffice.org) is being maintained. User support: — User Forums (forum.openoffice.org) remain active in English, Spanish, French, Hungarian, Italian, Japanese, Dutch, and Polish. — users@openoffice.apache.org had a 0% increase in traffic in the past quarter (131 emails compared to 130) — users-de@openoffice.apache.org had a 72% increase in traffic in the past quarter (76 emails compared to 44) Translation interface: — Currently, we are improving the import / export handling. Pootle is no longer maintained and we need to consider alternatives. ## Community Health Community overall health is improving. ### Project Mission Here is the complete mission statement: https://openoffice.apache.org/mission.html ## Infrastructure With help from the crack ASF Infrastructure team, our Forum and Wiki VM HTTP setup was significantly updated to improve reliability and response. ### Binary Distributions — SourceForge mirrors are still the main way to get an OpenOffice binary release. — Windows builds are also published in the Microsoft Store (Windows 10/11). Windows users are by far as our largest user group. ### Binary Code Signing — Apple Code Signing. We do this, but would like to improve the process so that our users do not encounter Apple's Gatekeeper warning. However, our mission to support very old versions of macOS may limit our ability to do this for our Community Builds. — Windows Code Signing. ## Marketing ### Facebook We have no volunteer taking care of the presence. We will change to a static presence on Facebook. For feedback, we will guide to our standard channels. ### Twitter One person maintains our Twitter account. We need to decide if this should be continued. ## Development ### Unmaintained Python 2 code Python 2 is unmaintained. We have in the development tree the external python3 support. Internal python 3 support is difficult. We are checking alternatives. Planned for the next major release. ### ODF Version 1.3 Our default file format, the Open Document Format, has received a new Standard update. We plan to support this format. ----------------------------------------- Attachment AR: Report from the Apache OpenWhisk Project [Dave Grove] ## Description: The mission of Apache OpenWhisk is the creation and maintenance of software related to a platform for building serverless applications with functions ## Project Status: Current project status: Ongoing with low activity Issues for the board: none ## Membership Data: Apache OpenWhisk was founded 2019-07-16 (4 years ago) There are currently 54 committers and 22 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Cosmin Stanciu on 2022-02-22. - No new committers. Last addition was Luke Roy on 2023-03-06. ## Project Activity: There was a slight uptick in development activity in the core OpenWhisk project driven by bug reports and subsequent fixes to the scheduler. Progress was made towards upgrading our Akka dependencies to their last Apache licensed versions in preparation for switching to Apache Pekko. We made new releases of the Java, Node.js, Go, and PHP runtimes to keep current with the upstream language runtimes. Recent releases: + openwhisk-runtime-java-1.19.0 was released on 2023-09-21. + openwhisk-runtime-nodejs-1.22.0 was released on 2023-09-21. + openwhisk-runtime-go-1.23.0 was released on 2023-09-15. + openwhisk-runtime-php-1.19.0 was released on 2023-09-10. ## Community Health: As noted above, there was a slight uptick in activity this quarter vs. recent previous quarters. OpenWhisk continues to be used as an infrastructure base in the academic Severless research community. However, the project's design point of a dedicated/specialized FaaS runtime is becoming less relevant. The majority of this space is moving to Function-as-a-Service abstractions provided as thinner layers on top of fairly general Container-as-a-Service runtimes. ----------------------------------------- Attachment AS: Report from the Apache Ozone Project [Sammi Chen] ## Description Apache Ozone is a scalable, redundant, and distributed object and file store, designed to scale to billions of objects/files and run on clusters of thousands of nodes. Ozone supports S3 compatible object APIs as well as a Hadoop Compatible File System implementation. ## Issues None. ## Membership Data - Apache Ozone was founded 2020-10-21. - There are currently 71 comitters and 35 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. - In the last quarter, Kaijie Chen was added to the PMC on 2023-10-30 Swaminathan Balachandran was added as committer on 2023-10-18 ShaoHong Xu was added as committer on 2023-09-24 Hemant Kumar was added as committer on 2023-08-29 ## Project Activity - Feature update a. S3g, etag is supported for object upload and download through s3g. b. Namespace snapshot phase II, enhancement and bug fixes, is ongoing. c. Hsync support, development is ongoing. d. Improvements on container replication and block deletion, to address observed DN decommission slow and block deletion slow cases. e. Improvements on OM read performance, including lock efficiency, avoid buffer copying in Codec, etc. f. Streaming write, streaming write support is added in s3g. g. Lots of bug fixes and performance improvements for the overall performance and stability. h. A tool is under development, to offline migrate schema V2 containers to schema V3 containers. i. Migrating existing unit tests from junit4 to junit5. Checking and fixing flaky tests. - Release 1.3.1 release, cancelled after a consensus of community discussion. 1.4.0 release, has dependency on RATIS project's 3.0 release, which is ongoing in the RATIS community. - Community activity An in-person "Storage User Group Meetup" is hosted on Oct 25 in the US. Topics include a. Apache Ozone User adoptions b. Apache Ozone State of the Union c. Snapshots new innovations d. Apache Iceberg on Ozone ## Releases Data - 1.0.0 was released on 2020-09-02. - 1.1.0 was released on 2021-04-20. - 1.2.0 was released on 2021-11-17. - 1.2.1 was released on 2021-12-22. - 1.3.0 was released on 2022-12-18. ## Community Health Last board report was sent on 8th May. Since last report, - 383 PRs opened on GitHub, past quarter (-16% decrease) - 368 PRs closed on GitHub, past quarter (-18% decrease) - 387 commits in the past quarter (-16% decrease) - 58 code contributors in the past quarter (+1% increase) - dev@ozone.apache.org had 55 emails in the past quarter (-50% decrease) - Discussions at ozone github repository had 10 threads - Active discussions at ASF #ozone channel ----------------------------------------- Attachment AT: Report from the Apache Perl Project [Steve Hay] ## Description: The mission of Perl is the creation and maintenance of software related to Dynamic websites using Perl ## Project Status: Current project status: Ongoing, with low activity Issues for the board: none ## Membership Data: Apache Perl was founded 2000-03-10 (24 years ago) There are currently 21 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Steve Hay on 2012-03-01. - No new committers were added. ## Project Activity: The last release was mod_perl-2.0.13 on 2023-10-21. As expected, a new release was made in this last quarter with support for the recent Perl 5.38. Activity is likely to quieten down again for a while now, though there may be some follow-up activity to some test suite issues found when producing this new release. ## Community Health: Traffic on the mailing lists increased around the release time as people tried out the new release candidate and reported back on issues found. A couple of testers reported problems with mod_proxy and Apache::Test which will hopefully get looked at before the next release. ----------------------------------------- Attachment AU: Report from the Apache Phoenix Project [Rajeshbabu Chintaguntla] ## Description: The mission of Phoenix is the creation and maintenance of software related to High performance relational database layer over Apache HBase for low latency applications ## Project Status: No issues to report to the board at this time. ## Membership Data: Apache Phoenix was founded 2014-05-21 (9 years ago) There are currently 57 committers and 39 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - Jacob Isaac was added to the PMC on 2023-11-07 - Rushabh Shah was added as committer on 2023-08-15 ## Project Activity: Apache Phoenix had its last main release 5.1.3 on 2022-12-30. No Releases given in the past quarter. Discussion is ongoing to release Phoenix 5.1.4, Phoenix Omid 1.1.1 and Phoenix third party. In the past quarter 1) Added support for multiple connection registries like master, rpc and zookeeper in jdbc url 2) Removed the Kafka and Flume connectors support due to lack of maintainers. 3) Discussions happened to replace the HTrace with OpenTelemetry and other solutions to improve the query execution visibility. 4) Good number of security issues are fixed. 5) Active development is going in - Partial index development - Support native JSON data type. - Redesign of Phoenix TTL for views - Change Data Capture(CDC) feature. - Replace hadoop and hbase clients with shaded hadoop and hbase clients respectively. ## Community Health: The Phoenix community continues to remain active. Glad to see a huge increase in mail traffic, JIRA and commit activities compared to last quarter. 1) Traffic : dev - 647 emails compared to 300 (115%), issues - 1484 emails compared to 1218(21%) user - 22 emails compared to 6 (266%) 2) JIRA activity : 104 issues Opened(38%) and 66 issues Closed(26%) 3) Pull requests : 101 PRs Opened(57%) and 87 PRs Closed(-55%) 18 new code contributors were added ----------------------------------------- Attachment AV: Report from the Apache Pig Project [Koji Noguchi] ## Description: Apache Pig is a platform for analyzing large data sets on Hadoop. It provides a high-level language for expressing data analysis programs, coupled with infrastructure for evaluating these programs. ## Project Status: Current project status: Dormant Issues for the board: We have been postponing the release for too long. Maybe we should report every month till next release (0.18) is out. ## Membership Data: Apache Pig was founded 2010-09-21 (13 years ago) There are currently 31 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Koji Noguchi on 2016-08-04. - No new committers. Last addition was Nándor Kollár on 2018-09-06. ## Project Activity: Version 0.18 still not released yet. A couple of blockers. Currently working with another PMC on https://issues.apache.org/jira/browse/PIG-5444. ## Community Health: Overall activity is low as the project is mostly stable and contributions are mainly bug fixes. ----------------------------------------- Attachment AW: Report from the Apache Pinot Project [Kishore G] ## Description: The mission of Apache Pinot is the creation and maintenance of software related to distributed OLAP data store to provide Real-time Analytics to power wide variety of analytical use case ## Project Status: Current project status: Top level project with high activity. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache Pinot was founded 2021-07-20 (2 years ago) There are currently 32 committers and 12 PMC members in this project. The Committer-to-PMC ratio is 8:3. Community changes, past quarter: - Rong Rong was added to the PMC on 2023-09-11 - Ankit Sultana was added as committer on 2023-10-04 ## Project Activity: - Pinot community published release 1.0.0 on 2023-09-19. - Upsert, Queryy time JOIN support, Improving ANSI SQL compliance are the highlighted changes. - Apache Pinot Commiter presented the talk about how we improved "Query Processing Resiliency" at the ASF Conference. ## Community Health: - 936 commits in the past quarter - 65 code contributors in the past quarter. - #troubleshooting channel from Apache Pinot community slack has 3605 members. - Most of the design discussion happens through Github Issues. 368 issues opened and 184 issues closed in the past quarter. ----------------------------------------- Attachment AX: Report from the Apache POI Project [Dominik Stadler] ## Description: - Apache POI is a Java library for reading and writing Microsoft Office file formats. The Apache POI PMC also handles bugfixes for the XMLBeans project: XMLBeans is a tool that allows you to map XML files to generated Java classes via XML Schema definitions. ## Issues: - There are no issues requiring board attention at this time ## Membership Data: Apache POI was founded 2007-05-16 (16 years ago) There are currently 41 committers and 34 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Marius Volkhart on 2020-12-27. - No new committers. Last addition was Marius Volkhart on 2020-12-19. ## Project Activity: - Release 5.2.4 was published in September, providing updated dependencies and a number of bugfixes and smaller feature enhancements - Automated fuzzing via OSS-Fuzz continues, this provides cases where potential bugs and security issues can be detected, see https://github.com/google/oss-fuzz and https://bz.apache.org/bugzilla/show_bug.cgi?id=66425 for more details. - Releases 5.2.0 of XmlBeans and 5.2.5 of Apache POI are planned soon to provide some important fixes. ## Project Release Activity: - Apache POI 5.2.4 was released on 2023-09-28. - Apache XMLBeans-5.1.1 was released on 2022-08-29. ## Community Health: - There are constant bug-reports and user-questions which indicates that Apache POI is in active use. Questions via email or on Stackoverflow usually get answers quickly. - Bug-numbers increased over the last few quaters. Some newly reported issues were fixed, but we get more bugs/questions reported than are addressed by the small number of active committers, so some bugs do not get any attention any more. - We have a very small number of active committers. There are very few potential candidates ### XMLBeans - It seems there are is a small but active set of users of it besides Apache POI itself. - Bug influx for XMLBeans is very low in general because it is a stable project in maintenance-only mode. ## Bug Statistics: ### Apache POI - 587 bugs are open overall (+13) - Having 140 enhancements (+1) - Thus having 447 actual bugs (+12) - 101 of these are waiting for feedback (-2) - Thus having 346 actual workable bugs +14) - 4 of the workable bugs have patches available (+1) - Distribution of workable bugs across components: {XSSF=99, HSSF=81, SS Common=41, HWPF=35, XSLF=21, XWPF=21, POI Overall=16, SXSSF=9, OPC=6, HSMF=5, HPSF=4, POIFS=4, HSLF=2, HPBF=1, SL Common=1} ### Apache XMLBeans - 164 open issues (-2) - 116 Bug (-2) - 29 Improvement (+1) - 16 New Feature (+-0) - 2 Wish (+-0) - 1 Task (-1) ----------------------------------------- Attachment AY: Report from the Apache Pulsar Project [Matteo Merli] ----------------------------------------- Attachment AZ: Report from the Apache Qpid Project [Robbie Gemmell] Apache Qpid is a project focused on creating software based on the Advanced Message Queuing Protocol (AMQP), currently providing a protocol engine library, message brokers written in C++ and Java, a message router, and client libraries for C, C++, .Net, Go, Java/JMS, Python, and Ruby. # Releases: - Qpid Broker-J 9.1.0 was released on 8th September 2023. - Qpid JMS 1.11.0 was released on 30th October 2023. - Qpid JMS 2.5.0 was released on 30th October 2023. - Qpid ProtonJ2 1.0.0-M18 was released on 7th November 2023. # Community: - The main user and developer mailing lists continue to be active and JIRAs are being raised and addressed in line with prior activity levels. - There were no new PMC member additions in this quarter. The most recent new PMC member is Tomas Vavricka, added 16th February 2023. - There were no new committer additions in this quarter. The most recent new committer is Daniil Kirilyuk, added 17th February 2023. # Development: - Broker-J had its 9.1.0 release, containing various general improvements, dependency updates, transitioning the tests to using JUnit 5, and doing some code clean-up. More improvements, such as create a docker image, are being made toward a future release. - ProtonJ2 just had its 1.0.0-M18, with various documentation improvements and dependency updates. Work continues on more as arising. - Qpid JMS had its 1.11.0 and 2.5.0 releases, updating dependencies and also transitioning its test suite over to using JUnit 5. - Work is progressing on cleaning up various older areas of Proton C and its language bindings. A 0.40.0 release is planned to introduce some new APIs and allow for later application transition, with a new major version then later expected to make various updates and/or removals of older bits, with changes such as using OpenSSL for TLS support on Windows like with other platforms rather using Schannel for Windows as before. # Issues: There are no Board-level issues at this time. ----------------------------------------- Attachment BA: Report from the Apache Ranger Project [Selvamohan Neethiraj] ----------------------------------------- Attachment BB: Report from the Apache RocketMQ Project [Xiaorui Wang] ## Description: The mission of Apache RocketMQ is the creation and maintenance of software related to a fast, low latency, reliable, scalable, distributed, easy to use message-oriented middleware, especially for processing large amounts of streaming data ## Project Status: Current project status: * Ongoing RocketMQ and Kafka Meetup will be held by volunteers in Hangzhou, China on November 4th https://www.huodongxing.com/event/9725831485900 Issues for the board: * This project is running well and has sufficient oversight from the PMC. ## Membership Data: Apache RocketMQ was founded 2017-09-20 (6 years ago) There are currently 73 committers and 22 PMC members in this project. The Committer-to-PMC ratio is roughly 5:2. Community changes, past quarter: - Zhouxiang Zhan was added to the PMC on 2023-09-21 - No new committers. Last addition was Fan Wang on 2023-07-11. ## Project Activity: * ROCKETMQ-5.1.4 was released on 2023-10-09. * rocketmq-client-rust-5.0.0 was released on 2023-08-07. * ROCKETMQ-5.1.3 was released on 2023-06-29. ## Community Health: * Code Activity One of the most important signs of a healthy open source project is the level of code activity, which reflects how frequently the developers are updating, improving, and maintaining the code base. According to the GitHub statistics1, RocketMQ had 1,066 commits in the last quarter, which is an average of about 12 commits per day. This shows that RocketMQ is a very active project with a high rate of code development. * User Feedback The final aspect of community health that we will review is user feedback, which reflects how satisfied and engaged the users are with the project. User feedback can be obtained from various sources, such as surveys, ratings, reviews, comments, forums, blogs, social media, etc. For this report, we will use two sources: npm package health analysis3 and Stack Overflow questions4. According to the npm package health analysis3, RocketMQ has a high popularity score of 8.9 out of 10, which means that it has a large number of downloads and dependents. It also has a high security score of 9.6 out of 10, which means that it has no known vulnerabilities or license issues. These scores show that RocketMQ is a popular and safe package for Node.js developers. According to the Stack Overflow questions4, RocketMQ has 1,112 questions tagged with “rocketmq” as of October 16th, 2023. Out of these questions, 83% have at least one answer and 54% have an accepted answer. These percentages show that RocketMQ has a supportive and helpful user community that provides answers and solutions to other users’ questions. ----------------------------------------- Attachment BC: Report from the Apache Roller Project [David M. Johnson] ## Description: Apache Roller is a full-featured, Java-based blog server that works well on Tomcat, Postgres and MySQL, and is known to run on other Java servers and relational databases. Latest release is 6.1.2 on 2023-08-03. ## Project Status: The project is mostly dormant 😐 with most activity around updating dependencies, making sure the code runs on the latest Java releases and security fixes. ## Membership Data: Apache Roller was founded 2007-02-20 (16 years ago) There are currently 12 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Michael Bien on 2021-05-24. - No new committers. Last addition was Yash Maheshwari on 2021-09-01. ## Project Activity: Roller 6.1.2 was released on August 3, 2023. This past quarter has been fairly quiet, as usual. ## Community Health: The Roller community is healthy enough to maintain Roller and make bug fix and security releases. We're always on the lookout for new contributors. ----------------------------------------- Attachment BD: Report from the Apache Santuario Project [Colm O hEigeartaigh] ## Description: The mission of Santuario is the creation and maintenance of software related to XML Security in Java and C++ ## Project Status: Current project status: The Java project is actively maintained and PRs are getting merged and releases made. The C++ project is in a dormant state. There are no issues requiring board attention. ## Membership Data: Apache Santuario was founded 2006-06-27 (17 years ago) There are currently 17 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 9:4. Community changes, past quarter: - No new PMC members. Last addition was Daniel Kulp on 2018-10-01. - No new committers. Last addition was Daniel Kulp on 2018-10-01. ## Project Activity: Recent releases: Apache Santuario - XML Security for Java 2.2.6 was released on 2023-10-19. Apache Santuario - XML Security for Java 2.3.4 was released on 2023-10-19. Apache Santuario - XML Security for Java 3.0.3 was released on 2023-10-19. Apache Santuario - XML Security for Java 4.0.0 was released on 2023-10-19. We did a bunch of Java releases over the last quarter. A security advisory has been fixed in these releases: CVE-2023-44483: Apache Santuario: Private Key disclosure in debug-log output A new major version of the Java library was also released which featured extensive code refactoring, requiring Java 11, and using the Java System logger. ## Community Health: Apache Santuario is a mature and stable project that has reached a point where not too many fixes are required, as it is a set of implementations of some specifications that are quite old now. It is actively managed by the PMC ----------------------------------------- Attachment BE: Report from the Apache Sedona Project [Jia Yu] ## Description: The mission of Apache Sedona is the creation and maintenance of software related to a big geospatial data processing engine. It provides an easy to use APIs for spatial data scientists to manage, wrangle, and process geospatial data ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Sedona was founded 2022-12-20 (a year ago) There are currently 18 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Kristin Cowalcijk on 2023-04-04. - Nilesh Gajwani was added as committer on 2023-09-11 ## Project Activity: We recently made the 1.5.0 release on Oct 12. This is a major release consisting of many new raster processing functions and new geospatial visualization plugins. ## Community Health: The community is pretty active and the project received quite a lot PRs. One thing to note is that the number of code contributors is less than before. We need to think about how to engage more people to contribute. ----------------------------------------- Attachment BF: Report from the Apache Serf Project [Daniel Sahlberg] ## Description: Apache Serf creates and maintains HTTP client software for various non-browser applications. ## Project Status: Project state: Ongoing/dormant. Issues for the board: None. ## Membership Data: Apache Serf was founded 2015-08-18 (8 years ago). There are 13 committers and 13 PMC members in this project. The Committer-to-PMC ratio is 1:1. No new committers or PMC members have been added since the last report. Our most recently added PMC members, Nathan Hartman and Daniel Sahlberg joined the PMC in October 2023. ## Project Activity: There has been some minor cleanup of old Jira issues and the website has been updated to follow ASF requirements. No code changes but the PMC is present enough to handle (say) security issues that may arise in a released version of Apache Serf. ## Community Health: Given the maturity of the project the low energy is expected but the low level of activity can create a problem to grow the community. ----------------------------------------- Attachment BG: Report from the Apache ServiceComb Project [Bao Liu] ## Description: The mission of Apache ServiceComb is the creation and maintenance of software related to a microservice framework that provides a set of tools and components to make development and deployment of cloud applications easier. ## Project Status: Current project status: Trademark of servicecomb is transferring from Huawei. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache ServiceComb was founded 2018-10-17 (5 years ago) There are currently 34 committers and 21 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was ZhangJian He on 2023-03-21. - No new committers. Last addition was Baocheng Li on 2022-11-19. ## Project Activity: ServiceComb Java Chassis 2.8.12 was released on 2023-10-12. ServiceComb Java Chassis 2.8.11 was released on 2023-09-25. ServiceComb Java Chassis 2.8.10 was released on 2023-09-12. And ServiceComb Java Chassis 3.0.0 is in progress. Two staging versions 3.0.0.RC1, 3.0.0.RC2 for verifications. ServiceComb Service Center is preparing 2.2.0 to fix known CVE issues. ## Community Health: Overall, community health is good despite some decreases in mailing lists. ServiceComb Java Chassis is working for 3.x and have many PRs. ServiceComb Java Chassis did three patch releases in the past three months. There is some development around the ServiceCenter and Kie. ----------------------------------------- Attachment BH: Report from the Apache ShardingSphere Project [Liang Zhang] ## Description: The mission of Apache ShardingSphere is the creation and maintenance of software related to a database clustering system providing data sharding, distributed transactions, and distributed database management ## Project Status: Current project status: Good Issues for the board: None ## Membership Data: Apache ShardingSphere was founded 2020-04-15 (4 years ago) There are currently 59 committers and 20 PMC members in this project. The Committer-to-PMC ratio is roughly 8:3. Community changes, past quarter: - Guangyuan Wang was added to the PMC on 2023-08-23 - No new committers. Last addition was Jiahao Chen on 2023-07-29. ## Project Activity: Releases: - Release ShardingSphere 5.4.1 - Release ShardingSphere-ElasticJob 3.0.4 MeetUp and Conferences: - 2023.10.28 COSCon'23 (https://mp.weixin.qq.com/s/fIgbZHgcZCZtgzffl4zuCA) - 2023.10.24 OpenSource MeetUp 1024 (https://mp.weixin.qq.com/s/oUwQTrACmCAqtE8vCRj6lQ) - 2023.06.28 AWS Tech OpenSource MeetUp (https://blog.csdn.net/SphereEX/article/details/131372971) - 2023.08.20 CommunityOverCode Asia: ShardingSphere on Cloud: A developer's perspective (https://www.baidu.com/link?url=7hU867SSuD5x9Bymkhw2wEX6GIo_ RELw3NJH2qAnfgiSagpuFDCmcZsmdZuBBQ5qHaFouaLF-qERQWHS18QX8a&wd=&eqid=a6a4a7ff0077d0980000000565467212) - 2023.06.17 ShardingSphere MeetUp (https://mp.weixin.qq.com/s/7f127_3WBeVy5OPCd_M5Gg) ## Community Health: The issues that arise are completely submitted and resolved by GitHub, the community has formed a self running and good state. New versions are released steadily every quarter, and security vulnerabilities are fixed relatively promptly. In general, the community has matured and all indicators are very stable. ----------------------------------------- Attachment BI: Report from the Apache ShenYu Project [Yu Xiao] ## Description: ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance. ## Project Status: Current project status: Good Healthy. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache ShenYu was founded 2022-07-20 (a year ago) There are currently 53 committers and 24 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Fengen He on 2023-03-23. - Wenkang Chen was added as committer on 2023-09-24 - Chao Gong was added as committer on 2023-10-20 - Junwei Lian was added as committer on 2023-08-09 - Damon Xue was added as committer on 2023-09-06 ## Project Activity: Apache ShenYu 2.6.0 released in August 11. Software development activity: - We added discovery model for divide and websocket plugin. - We added e2e test for websocket plugin. - We added ingress controller for grpc plugin. - We added api doc register for admin . - We added maximum time to wait for the k8s cluster to start up. - We added ingress controller for brpc plugin . - We added alert model for admin. - We added discovery config registration for client. - We added proxy ping configuration for websocket plugin. - We added support http2 server . - We added support custom index for es-logging plugin. - We added auto checksum when packing distribution. - We fixed response plugin. - We fixed ingress controller for spring cloud plugin. - We fixed duplicate response header for httpclient plugin. - We fixed cpu surge for admin. - We fixed indexName not working for es-logging plugin. - We fixed path error for uri plugin. - We fixed package name in ingress yml file. - We fixed health check for zookeeper:3.8.0. - We refactor nettyClient as default httpclient for gateway . - We refactor http client properties for gateway. - We refactor e2e test. - We refactor update mvn install to verify. - We refactor migrate admin swagger from springfox to springdoc. - We refactor ci cache. - We refactor zero-copy for in TCP plugin. Meetups and Conferences: - Community meetings(6) to discuss development tasks and how to build an open governance community. - 2 topics Gsoc activities(end). - 4 topics in participating in OSPP activities(end). - 2 topics in glcc activities (end). ## Community Health: Overall community health is good. 331 commits in the past quarter (20% increase) 54 code contributors in the past quarter (12% increase) 308 PRs opened on GitHub, past quarter (11% increase) 309 PRs closed on GitHub, past quarter (14% increase) 108 issues opened on GitHub, past quarter (-22% change) 89 issues closed on GitHub, past quarter (-66% change) Since the last report, add new 17 contributors added (currently:369). add new 20 subscribers to dev@shenyu.apache.org mailing (currently:480) ----------------------------------------- Attachment BJ: Report from the Apache SIS Project [Martin Desruisseaux] ## Description: The mission of Apache SIS is the creation and maintenance of software providing data structures for developing geospatial applications compliant with the model of OGC/ISO international standards. ## Project Status: Current project status: ongoing with high activity. Issues for the board: none. ## Membership Data: Apache SIS was founded 2012-09-19 (11 years ago) There are currently 23 committers and 18 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Alexís Manin on 2021-05-27. - No new committers. Last addition was Bruno P. Kinoshita on 2021-06-23. ## Project Activity: Apache SIS 1.4 has been released in October 2023, with JPMS modularization applied. The source directory structure got major reorganization for better use of JPMS features, but we still have difficulties with the lack of support of "Module Source Hierarchy" in tools such as Maven and Gradle. We are trying to push for better JPMS support with emails and GitHub issues such as [1], but expect that it will take a long time. Some progress on Maven side is at [2]. Above-cited reorganization introduced an "incubator" group of modules. This group is now used by other contributor for pushing codes faster than what is done in the "endorsed" group of modules. Apache SIS had a join presentation with Ecere about "Geospatial in space" during the "Community over code" conference in Halifax. It was partially a report of an ongoing activity in the Open Geospatial Consortium (OGC) in which Apache SIS and Ecere are participating. The package name conflict with GeoTools seems resolved by the release of GeoTools 30 in October. That conflict was caused by the use of "org.opengis" package name by GeoTools, despite OpenGIS being an OGC registered trademark. Following the package renaming done in GeoTools 30, it should now be possible to have Apache SIS and GeoTools 30 or later coexisting in the same JVM. However, GeoTools communication on this topic is still misleading [3]. [1] https://github.com/gradle/gradle/issues/25974 [2] https://s.apache.org/bkhws [3] https://desruisseaux.github.io/history/GeoAPI.html#geotools30 ## Community Health: Apache SIS has few contributor diversity. However, the above-cited introduction of an "incubator" group of modules has made some contributions easier. But on the other hand, the "Module Source Hierarchy" has introduced a new technical barrier. This is a technical problem however, that we are trying to get resolved by Maven and Gradle. ----------------------------------------- Attachment BK: Report from the Apache Solr Project [David Smiley] ----------------------------------------- Attachment BL: Report from the Apache Spark Project [Matei Alexandru Zaharia] Description: Apache Spark is a fast and general purpose engine for large-scale data processing. It offers high-level APIs in Java, Scala, Python, R and SQL as well as a rich set of libraries including stream processing, machine learning, and graph analytics. Issues for the board: - None Project status: - We released Apache Spark 3.5 on September 15, a feature release with over 1300 patches. This release introduced more scenarios with general availability for Spark Connect, like Scala and Go client, distributed training and inference support, and enhancement of compatibility for Structured streaming. It also introduced new PySpark and SQL functionality, including the SQL IDENTIFIER clause, named argument support for SQL function calls, SQL function support for HyperLogLog approximate aggregations, and Python user-defined table functions; simplified distributed training with DeepSpeed; introduced watermark propagation among operators; and added the dropDuplicatesWithinWatermark operation in Structured Streaming. - We made a patch release, Spark 3.3.3, on August 21, 2023. - Apache Spark 4.0.0-SNAPSHOT is now ready for Java 21. [SPARK-43831] - We have begun planning for a Spark 3.4.2 maintenance release (discussion at https://lists.apache.org/thread/35o2169l5r05k2mknqjy9mztq3ty1btr) and a Spark 3.3.4 EOL branch release (targeting December 16th). - The vote on "Updating documentation hosted for EOL and maintenance releases" has passed. - The vote on the Spark Project Improvement Proposals (SPIPs) for "State Data Source - Reader" has passed. - The PMC has voted to add two new PMC members, Yuanjian Li and Yikun Jiang, and one new committer, Jiaan Geng, to the project. Trademarks: - No changes since the last report. Latest releases: - Spark 3.5.0 was released on September 13, 2023 - Spark 3.3.3 was released on August 21, 2023 - Spark 3.4.1 was released on June 23, 2023 Committers and PMC: - The latest committer was added on Oct 2nd, 2023 (Jiaan Geng). - The latest PMC members were added on Oct 2nd, 2023 (Yuanjian Li and Yikun Jiang). ----------------------------------------- Attachment BM: Report from the Apache StreamPipes Project [Philipp Zehnder] ## Description: The mission of Apache StreamPipes is the creation and maintenance of software related to a self-service Industrial IoT toolbox which enables non-technical users to connect, analyze and explore IoT data streams ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache StreamPipes was founded 2022-11-16 (a year ago) There are currently 29 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - Zhenyu Luo was added to the PMC on 2023-10-17 ## Project Activity: - We are currently preparing the release 0.93.0 - Enhanced update process between versions - Developers of processing elements now have the option of implement pdate scripts - Streamlining the adapter model - Improve StreamPipes documentation - Documentation system improved to automatically create up-to-date docs from pipeline elements - Increased End-to-End (e2e) Test Coverage ## Community Health: - Two projects were supervised by community members at the OSPP challenge - Maintained consistent engagement in social media outreach efforts - Successful contributions to the Hacktoberfest - Several new contributors have appeared with first-time contributions - We are very pleased with the progress of our Github discussion page, where users ask for help and background information ----------------------------------------- Attachment BN: Report from the Apache Subversion Project [Nathan Hartman] ## Description: The Apache Subversion® version control system exists to be universally recognized and adopted as an open-source, centralized version control solution characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects, from individuals to large-scale enterprise operations. ## Project Status: Current project status: Ongoing, mature. Issues for the board: None at this time. ## Membership Data: Apache Subversion was founded 2010-02-16 (13 years ago). Prior to joining ASF, the project began in 2000 (23 years ago). There are currently 86 committers and 47 PMC members in the project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Daniel Sahlberg on 2021-08-02. - No new committers. Last addition was Daniel Sahlberg on 2020-12-14. ## Project Activity: This quarter's activities were mainly related to ongoing maintenance and improvements. Discussion of the upcoming 1.14.3 release is taking place. There is a volunteer for release manager, for whom this will be the first time managing a release. The main challenge for a first-time release manager is getting the environment setup with the necessary clean dependencies. This is currently taking place and the actual release management process is expected to take place this month. ## Community Health: The community is healthy for a mature and stable project. Maintenance is ongoing. There are steady contributions to the codebase, website, documentation, backports, and other areas. User questions at our mailing lists and IRC channels have been receiving helpful responses. Our community is fully volunteer-driven and we would like to thank everyone for their support. ----------------------------------------- Attachment BO: Report from the Apache Superset Project [Maxime Beauchemin] ## Description: The mission of Apache Superset is the creation and maintenance of software related to data exploration, analysis, visualization, and dashboarding ## Project Status: Current project status: Busy as ever. We're fixing and improving both the product and our process daily. Issues for the board: None for now ## Membership Data: Apache Superset was founded 2020-11-17 (3 years ago) There are currently 60 committers and 33 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Kamil Gabryjelski on 2022-09-08. - No new committers. Last addition was Sam Firke on 2023-07-31. ## Project Activity: 3.0.1 was released on 2023-10-18. 3.0.0 was released on 2023-09-18. 2.1.0 was released on 2023-04-04. We're continuing to improve the process for organizing major releases, and the velocity of patch releases in general, as we navigate toward 3.0.x and 4.0.0. We've done a lot of organization around SIPs (Superset Improvement Proposals) to keep better track, catch up on bookkeeping, and create more community fora to bring ideas to the table and steer toward a more open and comprehensive roadmap. Security reports seem to have slowed down a bit, but things are being better tracked as we get accustomed to the new JIRA workflow and security mailing list. Things seem to be stabilizing overall. ## Community Health: In general, the community is growing at a healthy pace. We continue to see new first-time contributors to the repo, and a huge amount of engagement from folks on Slack, where we're now up to 12,617 members. dev@superset.apache.org had a 106% increase in traffic in the past quarter (130 emails compared to 63) 87 code contributors in the past quarter (12% increase) As always, lots of issues and PRs opened and closed... it's hard to tell whether more of either is a good or a bad thing, but one constant is that it's a challenge for the relatively few deeply-engaged committers to keep up with the growing audience. 912 PRs opened on GitHub, past quarter (-21% change) 873 PRs closed on GitHub,past quarter (-22% change) 657 issues opened on GitHub, past quarter (27% increase) 329 issues closed on GitHub, past quarter (-35% change) We're also attempting to grow our presense at various conferences, and spread the word about Superset and grow our adoption. ----------------------------------------- Attachment BP: Report from the Apache Synapse Project [Isuru Udana] ## Description: Apache Synapse is a high-performance, flexible, lightweight Enterprise Service Bus (ESB) and a mediation framework. ## Project Status: Current project status: Dormant Issues for the board: None ## Membership Data: Apache Synapse was founded 2007-12-19 (16 years ago) There are currently 36 committers and 27 PMC members in this project. The Committer-to-PMC ratio is 4:3. Community changes, past quarter: - No new PMC members. Last addition was Shafreen on 2021-05-09. - No new committers. Last addition was Nuwan Jayawardene on 2022-11-19. ## Project Activity: After the 3.0.2 release, there was not much activity in the project. However last week several people expressed their interest in contributing to the project. One person has expressed an interest in simplifying the Synapse release process which is one of the key items we are planning to focus on at the moment. We hope we will able to increase the activity a bit more with these new contributions. ## Community Health: dev@synapse.apache.org had a 183% increase in traffic in the past quarter (17 emails compared to 6) 0 commits in the past quarter (no change) 0 code contributors in the past quarter (no change) 1 PR opened on GitHub, past quarter (100% increase) 1 PR closed on GitHub, past quarter (100% increase) ----------------------------------------- Attachment BQ: Report from the Apache Syncope Project [Francesco Chicchiriccò] ## Description: The mission of Syncope is the creation and maintenance of software related to Managing digital identities in enterprise environments ## Project Status: Current project status:healthy. Issues for the board: none. ## Membership Data: Apache Syncope was founded 2012-11-21 (11 years ago) There are currently 25 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Lorenzo Di Cola on 2023-05-22. - No new committers. Last addition was Samuel Garofalo on 2022-07-29. ## Project Activity: Most of current work is around maintenance branch 3_0_X: after release of 3.0.5, we keep working on bug fixing and improvements GitHub's dependabot is helping keeping active branches 3_0_X and master updated with external dependencies. Recent releases: * 3.0.5 was released on 2023-07-07. * 3.0.4 was released on 2023-07-07. * 2.1.14 was released on 2023-05-05. * 3.0.3 was released on 2023-05-05. ## Community Health: Discussions about new features and improvements keep appearing and being followed up in dev@. Newcomers approach user@ and are getting supported by the community. GitHub's Pull Requests are confirmed to be the main contribution path, from both first-time contributors and committers. ----------------------------------------- Attachment BR: Report from the Apache SystemDS Project [Matthias Boehm] ## Description: Apache SystemDS is a machine learning (ML) system for the end-to-end data science lifecycle from data preparation and cleaning, over efficient ML model training, to scoring and debugging. ML algorithms or pipelines are specified in a high-level language with R-like syntax, or related Python and Java APIs, and the system automatically generates hybrid runtime plans of local, in-memory operations and distributed operations on Apache Spark. ## Issues for the Board: - None ## Project Status: - Current work focuses on extending the compression framework, multi-backend lineage-based reuse, various data-centric ML primitives (DSL-based builtins) for increased functionality, and an improved test framework for functionality and performance. - We are planning to release SystemDS 3.2 in December. ## Membership Data: - Apache SystemDS was founded 2017-05-16 (incubator process entered 2015-11-02) - Last PMC members added 2022-05-03 (Shafaq Siddiqi) - Last committer added 2022-12-14 (Badrul Chowdhury) - There are currently 35 committers and 26 PMC members in the project. ## Activity and Health: - Code activity is healthy with 109 commits (+6%) in the last 3 months. - Community growth is healthy with 10 active contributors (-9%) in the last 3 months - Communication is healthy, mailing list activity is improving, additional work on better documentation. ## Releases: - Apache SystemDS 3.1.0 was released on 2023-03-13. - Apache SystemDS 3.0.0 was released on 2022-06-20. - Apache SystemDS 2.2.2 was released on 2022-06-25. - Apache SystemDS 2.2.1 was released on 2021-12-02. - Apache SystemDS 2.2.0 was released on 2021-10-30. - Apache SystemDS 2.1.0 was released on 2021-06-28. - Apache SystemDS 2.0.0 was released on 2020-10-14. - Apache SystemML 1.2.0 was released on 2018-08-24. ----------------------------------------- Attachment BS: Report from the Apache TomEE Project [David Blevins] ----------------------------------------- Attachment BT: Report from the Apache Traffic Control Project [Eric Friedrich] ## Description: The mission of Apache Traffic Control is the creation and maintenance of software related to building, monitoring, configuring, and provisioning a large scale content delivery network (CDN) ## Project Status: Current project status: Ongoing Issues for the board: No issues requiring board attention ## Membership Data: Apache Traffic Control was founded 2018-05-15 (5 years ago) There are currently 31 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Steve Hamrick on 2023-02-07. - Abdulrahman Elawady was added as committer on 2023-09-21 ## Project Activity: A release vote for Traffic Control 8.0.0 is currently open. Another RC will likely be coming next week. This release includes: - Update to new client API v5 - Many small bug fixes and enhancements ## Community Health: Community Health is currently good. Participation is also good - we sponsored a Google Summer of Code project this past summer, resulting in a new committer. This GSoC project also widened the number of caches Traffic Control integrates with. Velocity on traffic control is slowing somewhat (PRs merged down about 20% in the last quarter), partly because the project is reaching maturity and partly because some contributors are moving on to other projects. ----------------------------------------- Attachment BU: Report from the Apache Turbine Project [Georg Kallidis] ## Description: The mission of Turbine is the creation and maintenance of software related to A Java Servlet Web Application Framework and associated component library. ## Project Status: Current project status: Ongoing with low activity and at least 3 PMC members ready to engage. Some components of the project are dormant. Issues for the board: No issues for the board this quarter. ## Membership Data: Apache Turbine was founded 2007-05-16 (16 years ago) There are currently 12 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 4:3. Community changes, past quarter: - No new PMC members. Last addition was Jeffery Painter on 2017-11-12. - No new committers. Last addition was Youngho on 2021-12-06. ## Project Activity: Last main release was Turbine Core 5.1 on 2021-12-13. Released components this quarter: Fulcrum Parser 3.0.0 was released on 2023-10-10. Fulcrum Testcontainer 2.0.0 was released on 2023-08-23. Completed GIT migration with only dormant or obsolete components now still in SVN. ## Community Health: Code contributions continue on a low level. Required component releases for a Turbine core release are completed or in progress (component Fulcrum SecuritY) and the next core release v5.2 is expected in the upcoming quarter. ----------------------------------------- Attachment BV: Report from the Apache Velocity Project [Nathan Bubna] ----------------------------------------- Attachment BW: Report from the Apache Whimsy Project [Shane Curcuru] ## Description: The mission of Apache Whimsy is the creation and maintenance of software related to tools that help automate various administrative tasks or information lookup activities ## Project Status: Current project status: Ongoing, low activity Issues for the board: None ## Membership Data: Apache Whimsy was founded 2015-05-19 (8 years ago) There are currently 12 committers and 10 PMC members in this project. The Committer-to-PMC ratio is 6:5. Community changes, past quarter: - No new PMC members. Last addition was Matt Sicker on 2020-04-11. - No new committers. Last addition was Matt Sicker on 2020-04-09. ## Project Activity: No major project activity this quarter, although questions are addressed and minor improvements made here and there. Minor updates made to roster display tool per infra request. ## Community Health: Low activity but more than three PMC members are always available for any serious bugs or issues. ----------------------------------------- Attachment BX: Report from the Apache Xalan Project [Gary D. Gregory] ----------------------------------------- Attachment BY: Report from the Apache Xerces Project [Michael Glavassevich] Apache Xerces is a collaborative software development project dedicated to providing robust, full-featured, commercial-quality, and freely available XML parsers and closely related technologies on a wide variety of platforms supporting several languages. ======== Xerces-J In September, Joseph Kessselman was voted in as a new committer and PMC member. Another vote was started to elect another individual as a committer and PMC member. Recent discussion from the community on a bug fix they have been interested in has re-sparked a discussion on having a Xerces-J 2.12.3 release. Hopefully the release moves forward this time. Mailing list traffic has been low; roughly 30+ posts on the j-dev and j-users lists since the beginning of September 2023. No new releases since the previous report. The latest release is Xerces-J 2.12.2 (January 24th, 2022). ======== Xerces-C There was no development activity since the last report. The developers are once again discussing the future of the project, considering the possible retirement of Xerces-C or how to move forward if the project continues. Mailing list traffic has been very low; roughly 5+ posts on the c-dev and c-users lists since the beginning of September 2023. No new releases since the previous report. The latest release is Xerces-C 3.2.4 (October 17th, 2022). ======== Xerces-P Nothing in particular to report. There was no development activity over the reporting period. ======== XML Commons No activity over the reporting period. ======== Committer / PMC Changes The most recent committers were added in April 2017 (Xerces-C) and September 2023 (Xerces-J). One new PMC member was added since the last report. The most recent addition to the PMC was in September 2023. There were no commits made to SVN or PRs merged in GitHub since September 2023. ----------------------------------------- Attachment BZ: Report from the Apache XML Graphics Project [Clay Leeds] Apache XML Graphics Project Board Report ================================== The Apache XML Graphics Project is responsible for software intended for the creation & maintenance of the conversion of XML formats to graphical output & related software components. Issues for the Board ===================== We have migrated the Apache XML Graphics repositories for XML Graphics Commons, FOP, FOP PDF Images and Batik to GitHub: https://github.com/apache/xmlgraphics-fop.git Activity ======== * All XMLGraphics project repositories have been migrated from Subversion to GitHub/GitBox: https://github.com/apache/xmlgraphics-fop.git * A proposal to migrate XMLGraphics projects from Jira to GitHub issues was passed. Preliminary work to effect this migration has started. The migration is ongoing. Latest Versions of Apache XML Graphics Project Projects: * Apache Batik 1.17 2023-08-22 * Apache FOP 2.9 released 2023-08-22 * Apache FOP PDF Images 2.9 released 2023-08-22 * Apache XML Graphics Commons 2.9 released 2023-08-22 Project Health Report ======================= The level of community and developer activity remains at a consistent, moderate, level with respect to the previous reporting period. Recent PMC Changes ================== Currently 11 PMC members. * Simon Steiner was added to the PMC on Tue Jan 19 2016 * Clay Leeds was approved for XML Graphics PMC Chair position on March 26, 2018. Committers ========== Currently 21 committers. * No new committers added in the last 3 months * Last committer added was Matthias Reischenbacher at Wed May 13 2015 Most Recent Releases ==================== * Apache Batik 1.17 2023-08-22 * Apache FOP 2.9 released 2023-08-22 * Apache FOP PDF Images 2.9 released 2023-08-22 * Apache XML Graphics Commons 2.9 released 2023-08-22 = SUB PROJECTS = ================ APACHE BATIK ===== Batik is a Java-based toolkit for applications or applets that want to use images in the Scalable Vector Graphics (SVG) format for various purposes, such as display, generation or manipulation. Latest Release ------------ Apache XML Graphics Apache Batik 1.17 was released on August 22, 2023 * Bug fixes APACHE FOP === Apache FOP (Formatting Objects Processor) is a print formatter driven by XSL formatting objects (XSL-FO) and an output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PS, PCL, AFP, XML (area tree representation), Print, AWT and PNG, and to a lesser extent, RTF and TXT. The primary output target is PDF. Latest Release -------------- Apache XML Graphics Apache FOP 2.9 was released on August 22, 2023 Apache XML Graphics Apache FOP PDF Images 2.9 was released on August 22, 2023 * Bug fixes XML GRAPHICS COMMONS ==================== Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D implementations that let you generate PDF & PostScript files, and much more. Latest Release ------------ Apache XML Graphics Commons 2.9 was released on August 22, 2023 * Bug fixes ----------------------------------------- Attachment CA: Report from the Apache YuniKorn Project [Wilfred Spiegelenburg] ## Description: The mission of Apache YuniKorn is the creation and maintenance of software related to a standalone resource scheduler responsible for scheduling batch jobs and long-running services on large scale distributed systems running in on-premises environments as well as different public clouds ## Project Status: Current project status: Ongoing, with high activity. Issues for the board: No issues to report. ## Membership Data: Apache YuniKorn was founded 2022-03-16 (2 years ago) There are currently 34 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 9:7. Community changes, past quarter: - No new PMC members. Last addition was Yu Teng Chen on 2023-06-06. - PoAn Yang was added as committer on 2023-08-25 - Hsuan Zong Wu was added as committer on 2023-09-06 ## Project Activity: Recent releases: 1.3.0 was released on 2023-06-12. 1.2.0 was released on 2023-02-02. The community is in the middle of the 1.4.0 release. Working on the last jiras to be included for a release mid November. YuniKorn as a community gave four presentations at community over code. One presentation for KubeCon NA 2023 in Chicago was accepted. ## Community Health: 31 new Jira accounts were requested. 206 new Jiras created and 203 resolved, with corresponding GitHub PRs: 226 created and 203 resolved. GitHub reviews for the translated documentation are taken more time as the documents that are translated are more complex. We're working on some long term goals around: performance and plugin deployment GA. Part of this goal is a large refactor that has just started to simplify the Kubernetes shim. Delivery spread over at least two releases. This should help not only stability and performance but also invite more contributions. CVEs in dependencies are occurring regularly, a more structured approach to include the updates with fixes needs to be setup by the community. ------------------------------------------------------ End of minutes for the November 15, 2023 board meeting.