The Apache Software Foundation Board of Directors Meeting Minutes February 21, 2024 1. Call to order The meeting was scheduled for 21:00 UTC and began at 21:03 when a sufficient attendance to constitute a quorum was recognized by the chair. Other Time Zones: https://timeanddate.com/s/43bd The meeting was held via teleconference, hosted by the Secretary via Zoom. The #asfboard channel on the-asf.slack.com was used for backup. 2. Roll Call Directors Present: Rich Bowen - joined :16 Shane Curcuru Bertrand Delacretaz Christofer Dutz Sharan Foga Willem Ning Jiang Justin Mclean Craig L Russell Sander Striker Directors Absent: none Executive Officers Present: Craig R. McClanahan David Nalley Matt Sicker Ruth Suehle Executive Officers Absent: none Guests: Brian Proffitt Chris Wells Daniel Gruno Dave Fisher Drew Foulks Greg Stein Jarek Potiuk Kanchana Pradeepika Welagedara - joined :31 Michael Semb Wever 3. Minutes from previous meetings Published minutes can be found at: https://www.apache.org/foundation/board/calendar.html A. The meeting of January 17, 2024 See: board_minutes_2024_01_17.txt Approved by General Consent. 4. Executive Officer Reports A. Board Chair [Sander Striker] I have sent the notifications for our annual Members Meeting on March 7th. Proxies are being registered, at this time we still require 70 members to turn up at the start of the meeting. Ideally we get more proxies over the line. It is clear we can still make some improvements to our messaging around this yearly event. Nominations are happening for new members as well as for new directors for the board. This is paired with civil discussions, which are all helpful in understanding different perspectives within the membership. For this month's meeting we saw automated reminders triggered by the board agenda creation, causing some projects to even report early. I'm sure more tweaks can be done to our processes, one step at a time. Like last month I will be using the new board agenda tool to drive the meeting as much as possible. B. President [David Nalley] I had the pleasure of attending FOSDEM and had with it a number of interesting conversations about open source, and the Foundation. As called out in more detail in the Public Affairs report, I spent time with Dirk-Willem and folks from Eclipse focused on how we might use our existing processes to become de facto or actual standards that the CRA holds us to. I am tracking a code of conduct complaint. Mark Thomas and I are planning to attend the US Cybersecurity and Infrastructure Security Agency's Open Source Security Summit on behalf of the foundation. I am appearing on a panel related to security threats facing open source. I am planning on holding a learning session on the 26th with legal counsel to advise prospective directors and officers about the responsibility, authority and liability of holding positions at the ASF. It will be recorded for later sharing. Additionally, please see Attachments 1 through 9. C. Treasurer [Craig R. McClanahan] Things continue to operate normally, with a couple things worthy of note: * Community over Code conferences in the US and EU have a joint sponsorship opportunity. We've set up a process for the appropriate revenue sharing with the company operating the EU conference. * Some questions have been raised around how physical checks to our Wilmington mail address get handled. I am investigating alternative approaches, but have not found one worthy of being transitioned to yet. D. Secretary [Matt Sicker] In January, the secretary received 77 ICLAs and two software grants. At the end of December and beginning of January, we worked with the Whimsy PMC to recreate our Whimsy server to address a security vulnerability. E. Executive Vice President [Ruth Suehle] Sponsorship for Community Over Code is much lower than usual this year. This seems to be true of a lot of events, so I'm not concerned that it's just us. Currently holding off on booking evening events for North America until we have a clearer picture of those numbers. This may mean that this year is not as profitable (or potentially even not profitable) as it has been the last few years. Co-locating Cassandra Summit may help. Current numbers: North America ============== Gold 3 Europe ====== Gold 2 Bronze 1 F. Vice Chair [Sharan Foga] - Minor admin tasks - Supporting chair prepare for annual members meeting Executive officer reports approved as submitted by General Consent. 5. Additional Officer Reports A. VP of W3C Relations [Andy Seaborne / Sharan] No report was submitted. B. Apache Legal Affairs Committee [Roman Shaposhnik / Sander] See Attachment 11 C. Apache Security Team Project [Mark J. Cox / Willem] See Attachment 12 D. VP of Jakarta EE Relations [Rob Tompkins / Bertrand] See Attachment 13 Additional officer reports approved as submitted by General Consent. 6. Committee Reports Summary of Reports The following reports required further discussion: # Doris [cdutz] # Empire-db [cdutz] # FreeMarker [rbowen] # Ignite [cdutz] # Jakarta EE Relations [rbowen] # Knox [cdutz] # Pivot [ningjiang] # ShenYu [ningjiang] A. Apache AGE Project [Eya Badal / Craig] See Attachment A B. Apache Ambari Project [Brahma Reddy Battula / Shane] See Attachment B C. Apache Ant Project [Jan Materne / Justin] No report was submitted. D. Apache Archiva Project [Olivier Lamy / Christofer] See Attachment D E. Apache BookKeeper Project [Enrico Olivelli / Rich] No report was submitted. F. Apache Brooklyn Project [Juan D. Cabrerizo / Bertrand] See Attachment F G. Apache BuildStream Project [Tristan Van Berkom / Willem] See Attachment G H. Apache Cassandra Project [Josh McKenzie / Shane] See Attachment H I. Apache Cocoon Project [Cédric Damioli / Christofer] See Attachment I J. Apache Community Development Project [Swapnil Mane / Rich] See Attachment J K. Apache CouchDB Project [Jan Lehnardt / Sander] See Attachment K L. Apache Creadur Project [Philipp Ottlinger / Justin] See Attachment L M. Apache CXF Project [Daniel Kulp / Sharan] See Attachment M N. Apache DataSketches Project [Lee Rhodes / Craig] See Attachment N O. Apache DeltaSpike Project [Mark Struberg / Craig] No report was submitted. P. Apache Doris Project [Mingyu Chen / Willem] See Attachment P @Willem: follow up on voting process Q. Apache Drill Project [Charles Givre / Rich] No report was submitted. R. Apache Druid Project [Gian Merlino / Bertrand] See Attachment R S. Apache Empire-db Project [Rainer Döbele / Justin] See Attachment S @Christofer: follow up on PMC member private subscriptions T. Apache EventMesh Project [Eason Chen / Sharan] See Attachment T U. Apache Flume Project [Balázs Donát Bessenyei / Sander] No report was submitted. V. Apache FreeMarker Project [Dániel Dékány / Shane] See Attachment V W. Apache Geode Project [Mark Bretl / Christofer] See Attachment W X. Apache Geronimo Project [Jean-Louis Monteiro / Justin] No report was submitted. Y. Apache Gora Project [Kevin Ratnasekera / Shane] No report was submitted. Z. Apache Groovy Project [Paul King / Justin] See Attachment Z AA. Apache HAWQ Project [Lei Chang / Justin] No report was submitted. AB. Apache Hop Project [Hans Van Akelyen / Christofer] See Attachment AB AC. Apache HTTP Server Project [Joe Orton / Bertrand] See Attachment AC AD. Apache HttpComponents Project [Michael Osipov / Willem] See Attachment AD AE. Apache Ignite Project [Dmitry Pavlov / Rich] See Attachment AE @Christofer: follow up on email to ignite AF. Apache Impala Project [Jim Apple / Sander] No report was submitted. AG. Apache Incubator Project [Justin Mclean] No report was submitted. AH. Apache Juneau Project [James Bognar / Sharan] See Attachment AH AI. Apache Kafka Project [Mickael Maison / Craig] See Attachment AI AJ. Apache Kibble Project [Sharan Foga] See Attachment AJ AK. Apache Knox Project [Larry McCay / Shane] See Attachment AK AL. Apache Kylin Project [Shao Feng Shi / Rich] See Attachment AL AM. Apache Libcloud Project [Tomaž Muraus / Christofer] No report was submitted. AN. Apache Logging Services Project [Volkan Yazici / Sander] No report was submitted. AO. Apache ManifoldCF Project [Piergiorgio Lucidi / Justin] See Attachment AO AP. Apache Mesos Project [Qian Zhang / Shane] See Attachment AP AQ. Apache Mnemonic Project [Gordon King / Bertrand] No report was submitted. AR. Apache Oozie Project [Dénes Bodó / Willem] See Attachment AR AS. Apache OpenDAL Project [Hao Ding / Justin] See Attachment AS AT. Apache OpenJPA Project [Mark Struberg / Sharan] See Attachment AT AU. Apache OpenOffice Project [Dave Fisher / Bertrand] See Attachment AU AV. Apache OpenWebBeans Project [Mark Struberg / Craig] See Attachment AV AW. Apache OpenWhisk Project [Dave Grove / Sander] See Attachment AW AX. Apache Ozone Project [Sammi Chen / Sharan] See Attachment AX AY. Apache Perl Project [Steve Hay / Willem] See Attachment AY AZ. Apache Phoenix Project [Rajeshbabu Chintaguntla / Craig] See Attachment AZ BA. Apache Pinot Project [Kishore G / Justin] No report was submitted. BB. Apache Pivot Project [Roger Lee Whitcomb / Bertrand] See Attachment BB @Craig: follow up on final release BC. Apache POI Project [Dominik Stadler / Shane] See Attachment BC BD. Apache Qpid Project [Robbie Gemmell / Christofer] See Attachment BD BE. Apache Ranger Project [Selvamohan Neethiraj / Rich] No report was submitted. BF. Apache RocketMQ Project [Xiaorui Wang / Sharan] No report was submitted. BG. Apache Roller Project [David M. Johnson / Christofer] See Attachment BG BH. Apache Samza Project [Jagadish Venkatraman / Justin] See Attachment BH BI. Apache Santuario Project [Colm O hEigeartaigh / Craig] See Attachment BI BJ. Apache Sedona Project [Jia Yu / Sander] See Attachment BJ BK. Apache Serf Project [Daniel Sahlberg / Sharan] See Attachment BK BL. Apache ServiceComb Project [Bao Liu / Rich] No report was submitted. BM. Apache ShardingSphere Project [Liang Zhang / Bertrand] See Attachment BM BN. Apache ShenYu Project [Yu Xiao / Willem] See Attachment BN @Willem: follow up on formalizing meeting minutes BO. Apache SIS Project [Martin Desruisseaux / Shane] See Attachment BO BP. Apache Solr Project [David Smiley / Bertrand] See Attachment BP BQ. Apache Spark Project [Matei Alexandru Zaharia / Craig] See Attachment BQ BR. Apache StreamPipes Project [Philipp Zehnder / Shane] See Attachment BR BS. Apache Submarine Project [Kevin Su / Christofer] No report was submitted. BT. Apache Subversion Project [Nathan Hartman / Willem] See Attachment BT BU. Apache Superset Project [Maxime Beauchemin / Sander] No report was submitted. BV. Apache Syncope Project [Francesco Chicchiriccò / Justin] See Attachment BV BW. Apache SystemDS Project [Matthias Boehm / Rich] See Attachment BW BX. Apache TomEE Project [David Blevins / Sharan] No report was submitted. BY. Apache Traffic Control Project [Eric Friedrich / Willem] See Attachment BY BZ. Apache TsFile Project [Jialin Qiao / Sander] No report was submitted. CA. Apache Turbine Project [Georg Kallidis / Sharan] See Attachment CA CB. Apache Velocity Project [Nathan Bubna / Willem] See Attachment CB CC. Apache Whimsy Project [Shane Curcuru] See Attachment CC CD. Apache Xalan Project [Gary D. Gregory / Shane] See Attachment CD CE. Apache Xerces Project [Michael Glavassevich / Christofer] No report was submitted. CF. Apache XML Graphics Project [Clay Leeds / Justin] See Attachment CF CG. Apache YuniKorn Project [Wilfred Spiegelenburg / Craig] See Attachment CG Committee reports approved as submitted by General Consent. 7. Special Orders A. Terminate the Apache Archiva Project WHEREAS, the Project Management Committee of the Apache Archiva project has chosen by vote to recommend moving the project to the Attic; and WHEREAS, the Board of Directors deems it no longer in the best interest of the Foundation to continue the Apache Archiva project due to inactivity; NOW, THEREFORE, BE IT RESOLVED, that the Apache Archiva project is hereby terminated; and be it further RESOLVED, that the Attic PMC be and hereby is tasked with oversight over the software developed by the Apache Archiva Project; and be it further RESOLVED, that the office of "Vice President, Apache Archiva" is hereby terminated; and be it further RESOLVED, that the Apache Archiva PMC is hereby terminated. Special Order 7A, Terminate the Apache Archiva Project, was approved by Unanimous Vote of the directors present. B. Change the Apache Storm Project Chair WHEREAS, the Board of Directors heretofore appointed P. Taylor Goetz (ptgoetz) to the office of Vice President, Apache Storm, and WHEREAS, the Board of Directors is in receipt of the resignation of P. Taylor Goetz from the office of Vice President, Apache Storm, and WHEREAS, the Project Management Committee of the Apache Storm project has chosen by vote to recommend Richard Zowalla (rzo1) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that P. Taylor Goetz is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Storm, and BE IT FURTHER RESOLVED, that Richard Zowalla be and hereby is appointed to the office of Vice President, Apache Storm, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7B, Change the Apache Storm Project Chair, was approved by Unanimous Vote of the directors present. C. Remove Joe Schaefer from HTTP Server PMC RESOLVED, that Joe Schaefer is removed from the Apache HTTP Server Project Management Committee. Special Order 7C, Remove Joe Schaefer from HTTP Server PMC, was approved by Unanimous Vote of the directors present. D. Terminate office of VP, Jakarta EE Relations WHEREAS, the Vice President of Jakarta EE Relations has recommended terminating the office of "Vice President, Jakarta EE Relations"; and WHEREAS, the Board of Directors deems it no longer in the best interest of the Foundation to continue the office of "Vice President, Jakarta EE Relations"; NOW, THEREFORE, BE IT RESOLVED, that the office of "Vice President, Jakarta EE Relations" is hereby terminated. Special Order 7D, Terminate office of VP, Jakarta EE Relations, was approved by Unanimous Vote of the directors present. 8. Discussion Items A. Board agenda review comments Do we now have a process for handling agenda review comments? @Craig: initiate discussion around board agenda review comments on the board list B. Project web site checks failing There is a tool for checking that project web sites conform to policy. https://whimsy.apache.org/site/ But there are hundreds of deficiencies reported. What should the board do to encourage projects to fix these? @Craig: follow up on filing bug report to Whimsy around project web site checker 9. Review Outstanding Action Items * Christofer: pursue a roll call for VCL [ VCL 2023-09-20 ] Status: I had reported in the last meeting, that I think the activity has gone up to a level that I don't think we need a roll call. * Justin: follow up about the attic and how to plan for it [ Geronimo 2023-10-18 ] Status: Done * Justin: follow up on current status of project [ HAWQ 2023-10-18 ] Status: Done * Sander: follow up about PMC removal process [ Mahout 2023-10-18 ] Status: Given Mahout's message of 2023-10-23 no further action is required. * Sander: clarify members of committers and PMC [ ManifoldCF 2023-10-18 ] Status: The November report clarified the October report. * Shane: follow up about attic [ Mesos 2023-10-18 ] Status: Done: Project has resumed work for the time being! * Justin: follow up on direction [ Streams 2023-10-18 ] Status: Done * Shane: follow up about trademark usage policy [ Traffic Server 2023-10-18 ] Status: Done; not really a board issue here. * Justin: follow up on mentioning people's names in reports [ ManifoldCF 2023-11-15 ] Status: Done * Sharan: check with Chris about vendor neutrality concerns [ Ozone 2023-11-15 ] Status: Already followed up with Chris on this and this action item can be closed * Willem: follow up with PMC about community health [ Traffic Control 2023-11-15 ] Status: Traffic Control 8 was released on Jan 30, 2024. Currently, PMC roll call vote is OK, but the commits number dropped very quickly, we need to work with the project to figure out a way to reboot the community. * David: follow up VP Privacy [ Data Privacy 2023-12-20 ] Status: This was already marked Done last month; it's an erroneous carry-over. * Christofer: follow up with roll call for PMC [ Griffin 2024-01-17 ] Status: They asked for some time, but I made it clear that we're happy to give them that time, if we see something is happening ... just hoping for things to magically go back to normal is not what we'll be willing to do. So I asked them what they are actively doing to change the current state ... let's see what they respond. - Sent an initial email on 14th January 2024 - Got a reply that they need more time on 20th January 2024 - Asked what they are actually doing to grow the community on 5th February 2024 - Told them if I don't get answers to my questions, the board will take action on 13th February 2024 * Rich: follow up on MADlib report prior to April [ MADlib 2024-01-17 ] Status: * Sander: discuss use of kapa.ai with VP Data Privacy [ SkyWalking 2024-01-17 ] Status: This was raised on both legal and privacy lists by jmclean: https://lists.apache.org/thread/jm17p9l1ocl7v161phv0pc5xzgtnvdnv * Willem: follow up with PMC around release procedure [ TinkerPop 2024-01-17 ] Status: The release process is OK; I missed some emails on the list. * Bertrand: pursue a roll-call for Mnemonic [ Mnemonic 2024-01-17 ] Status: Roll call request sent late, on Feb 19th, no answer at the time of the meeting, more than 48 hours later. The only activity since last August are commits from a single committer, mostly trivial things like reformatting code. No discussions, no activity on the private list, no response to our numerous requests from reports. I think the project is ready for the Attic unless there's a solid response to this roll call. 10. Unfinished Business 11. New Business 12. Announcements 13. Adjournment Adjourned at 22:01 UTC ============ ATTACHMENTS: ============ ----------------------------------------- Attachment 1: Report from the VP of Brand Management [Mark Thomas] Covering the period January 2024 * ISSUES FOR THE BOARD None. * OPERATIONS Responded to the following queries, liaising with projects as required: - provided advice around a champions program for AIRFLOW - two requests to use multiple project logos in books - provided advice to CASSANDRA and PEKKO around the use of OpenCollective - one request to use a project logo in an event booth - approved used of ASF marks for two 3rd party events Worked with PULSAR and OPENDAL to better align project website with branding guidelines. When a project brings a query to tradeamrks@ I am now trying (when I don't forget) to check the project's website against the branding requirements and requesting changes where necessary as this often helps with resolving the issue the project has raised. * REGISTRATIONS Continued to work with counsel to progress the GUACAMOLE registration. Worked with ASF counsel to renew the following registrations: - MADLIB - HAWQ - HADOOP * INFRINGEMENTS Worked with the IOTDB PMC to resolve some issues with a commercial website. Raised issues with use of ASF marks in a conference booth with the vendor. ----------------------------------------- Attachment 2: Report from the VP of Fundraising [Bob Paulin] 1) ASF Sponsors: a --New: we recognized two corporate contributors as new Bronze Sponsors. b --Renewals: we have confirmed renewals from one Platinum, one Silver, and one Bronze Sponsor. c --Payments: 1 --New: we received payment from a new Silver Sponsor. 2a --Renewing: we received one Gold, two Silver and three Bronze Sponsor renewal payments. 2b --Incoming: we await payment from two renewing Platinum, four renewing Gold, two renewing Silver, and one renewing Bronze Sponsor. 2) Targeted Sponsors: we are discussing donation processes and options with two potential new Targeted sponsors. 3) Sponsor Relations: ongoing Sponsor engagement with both ASF (paid) and Targeted (in-kind) Sponsors continues, with focus on identifying and forging new connections with those Sponsors whose ASF points-of-contact have left the organization. We are also discussing 2024 philanthropic giving budgets and corporate contribution strategies with select Sponsors. 4) Event Sponsorship: we are promoting all three Community Over Code events (Europe, Asia, and North America) to our Sponsors, including the combined event sponsorship prospectus for Europe and North America’s events, for which we are onboarding new sponsors. 5) Individual Donations and Corporate Giving: we received $1,225 in online donations via https://donate.apache.org/ during this timeframe. 6) Administrivia: we continue to liaise closely with the Treasury and Accounting teams on a few remaining Sponsor invoicing issues as well as reconcile a Targeted Sponsor’s donation allocations. ----------------------------------------- Attachment 3: Report from the VP of Marketing and Publicity [Brian Proffitt] Foundation Comms Community Over Code EU[1]: last call for CFP submissions EU Software Regulations[2]: Dirk-Willem van Gulik wrote blog providing updates; published and promoted Proactive Storytelling Why Generative AI Guidance is Essential to Contributors of Open Source[3] published to ASF blog and shared on social with attribution to Roman Shaposhnik Website M&P Services for Projects: Developed short template questionnaire for project use case development; added to Wiki Branding Project Messaging finalized and moved to next phase of Visual Identity. Reached out to designer to discuss next steps. We are _aspirationally_ targeting the 25th anniversary date for the ASF as a release date for a new logo, which may be voted on starting at the annual members meeting next month. Social Media Posts In total, 43 posts were published: 34 Tweets + 9 LinkedIn. Notable Takeaway: While engagements and link clicks were down overall, ASF experienced a 23% increase in engagement including nearly 50% increase in link clicks on its X channel. The downward trend can be attributed to LinkedIn, which might indicate that we should increase posting frequency for that channel. Social Highlights (X + LinkedIn) * Total Audience: 135,642 * New Followers in January: 470 * Total Impressions: 87,562 (11.4% increase MoM) * Total Engagements: 2,147 (-4.3%) * Post Link Clicks: 1,048 (-5.8%) January Website Analytics 873,836 visits, 873,811 unique visitors +11.1% 1min, 53s average visit duration -25.7% 47% visits have bounced (left the website after one page) 0% 2.6 actions (page views, downloads, outlinks, and internal site searches) per visit -55.2% 10,000 max actions in one visit 0% 1,479,799 pageviews,1,053,616 unique pageviews -61.8% 14 total searches on your website, 8 unique keywords +16.7% 471,014 downloads, 33,165 unique downloads +12.3% 295,383 outlinks, 203,670 unique outlinks +12.5% [1] https://news.apache.org/foundation/entry/new-year-new-goals [2] https://news.apache.org/foundation/entry/update-on-eu-software-regulation-lots-of-improvements-good-news [3] https://news.apache.org/foundation/entry/why-generative-ai-guidance-is-essential-to-contributors-of-open-source ----------------------------------------- Attachment 4: Report from the VP of Infrastructure [Myrle Krantz] General ======= Infrastructure is operating as expected, and has no current issues requiring escalation to the President or the Board. Highlights ========== - We started a monthly newsletter (to be called "Inside Infra") as part of our outreach to the broader community. The first issue is at https://infra.apache.org/blog/newsletter_01_24.html Finances ======== - We will soon begin budgeting for FY25 General Activity ================ - Lots of progress on "asfquart", a Python package to provide a lot of basic features for Infra's web-based applications. It is built upon the standard "Quart" package, bringing in our typical ways to configure authentication, configuration, and other ASF-isms. - Additional work on the Agenda Tool, based on its use for the January meeting. It will again be used for the February board meeting. - The integration of our LDAP/keycloak service with the Atlassian cloud services is now working. We now have some months of testing before switching to the cloud versions of Jira and Confluence. - We are moving many servers over to LetsEncrypt for their specific hostname, rather than using our *.a.o certificate. This assists with maintenance, and reduces our threat landscape. - Reducing custom svn accounts, in favor of LDAP service accounts. - Lots of work on hardening our systems, ACLs, and 2FA. - Successful February Roundtable. - Moving the asf.yaml stuff into a more available repository for review, PRs, issues, and feedback. - Some long work on Bugzilla to perform an upgrade. There are some mixed dependencies that made this difficult. ----------------------------------------- Attachment 5: Report from the VP of Conferences [Brian Proffitt] Community Over Code EU: * Sessions are nearly finalized * Two sponsors are in process of payment, more needed (see Exec VP's report) * TAC and event organizers are reviewing arrangements for passes and hotel room blocks * The next board's F2F will be held the weekend before C/C EU, in Bratislava. Details to come. Community Over Code NA: * CFP will launch week of Feb. 26 * Two sponsors are in process of payment, more needed * Cassandra Summit will be co-located with C/C NA 2024. We are in the process of figuring out logistics, sponsorships ----------------------------------------- Attachment 6: Report from the Apache Travel Assistance Committee [Gavin McDonald] Current Events ============== Applications are open for Community Over Code EU. With 10 days to go until applications close for EU, we have 24 applications in so far and expect more before the closing date. Community Over Code Asia applications are also now open and a notice went out to all dev/user lists on the 20th of this month. Keeping an eye on timeline of things for Community Over Code NA to determine the best time to open for that one. Monthly Meetings ================ For at least the run up to events, we will now hold monthly meetings on the second Tuesday. With multiple events to support at the same time and different people running each event we though a monthly live call will compliment our mailing list and Slack Channels. Any interested members or other Operations folk are welcome to attend these. TAC App ======= TAC App is open and accepting applications. An INFRA ticket was opened to migrate it out of one DC and into another as the app is having some stability issues. (So we are migrating to rule our any DC/Hardware issues.) Future Events ============= Looking into a few other events as always. Berlin Buzzwords is happening in June soon after the Community Over Code EU event. We usually support a few people going to this event but it may be too close to have volunteers to organize the event from the TAC side. Short/Medium Term Priorities ============================ Keeping an eye out for other smaller events to support. We are keen to hear about projects events. Example would be Flink Forward, Cassandra Summit etc. Ideally we would have one TAC volunteer committee member look after these smaller events and reach out to projects, will pose that to the list. Mailing List Activity ===================== Discussions happening around current and future events, call for judges etc. Membership ========== No changes to the membership this month. We reached out to the membership late January as a call for new TAC volunteers to help on this end of things. We have had two people volunteer to be Judges for EU (Paul King and Christian Grobmeier) and one has volunteered to be a Judge for Asia (Willem Jiang), which is great. These people will be added to the Committee in the next day or two. A 4th person volunteered to help on-site at EU as they would be there anyway and we have accepted Daan Hooglands' kind offer. ----------------------------------------- Attachment 7: Report from the VP of Diversity and Inclusion [David Nalley] ----------------------------------------- Attachment 8: Report from the VP of Data Privacy [Christian Grobmeier] # General There are no issues that need urgent attention. # Newly identified tasks TAC deals with personal data, so a particular form of privacy policy may be needed. Related to Matomo, one question came up that needs clarification: In late 2022, it seemed ASF Infra took over responsibility for the Matomo VM: https://lists.apache.org/thread/6c7dn3ot494pxdlfxfn1pngbcpzj5g08 This issue indicated otherwise: https://issues.apache.org/jira/browse/INFRA-25432 The DP office will follow up with the Infra team to clarify this situation. Currently, 42 projects have requested a Matomo code; 1 is about to be created. Thirty-one projects are actively using Matomo, and 9 of them appear not to include the Matomo code. # Open tasks - Follow up on the idea of blocking 3rd party tracking on the infra-level. Tracked on: https://issues.apache.org/jira/browse/INFRA-25518 - Add "canned responses" and instructions on how to run the privacy office to the website - Investigate TAC for data privacy and develop a targeted version for the committee ----------------------------------------- Attachment 9: Report from the VP of Public Affairs [Dirk-Willem van Gulik] CRA & PLD - Informal reports are that the final text of the CRA has been translated in all languages; and that the legal/linguistic experts have not flagged issues that require an extra clarification cycle by policy makers/politicians. However, with the election near and the various significant global events, the legislation train is said to be stalled. This makes it likely that the CRA will not make it through the process before the EU election. This means that we’re looking at Q3 or perhaps Q4 (once a new parliament and commission have formed) before a formal vote. This also means that the start some of the implementation funding and standards-processes may get delayed, which is helpful. Given this and the elections - it does not seem likely that extra time will help us improve the (open source) definitions in the PLD. So that means no changes, which is not ideal. But not a disaster either. Also of note is the AI act, that now contain a usable exception for open source. But there are major puzzles: the open source definition is copyright based, while a lot of key 'IP' of AI is more Database Rights/TRIPS convention related. And there is a lack of technical understanding at the policy makers when it comes to things such weights/models, tests, training data and so on. Michael Wechner has volunteered on the AI act, and is now actively following that (with coordination on public-affairs-private). I expect OFE to play the same cross-community coordination/information role for the AI act as it did for the PLD and CRA. As is customary, the European Commission and Open Forum Europe arranged for an 'open source week' in the period around FOSDEM, and at FOSDEM, to touch base with policy makers. With Craig Russell, David Nalley, several ASF members/committers and me (Dirk) in attendance. The impact of the CRA and PLD were the main topic at the EU Workshop Open Source Area for Digital Autonomy, with open source position generally well represented. And with the point, repeatedly made and generally accepted, that open source is not just key to innovation; but also the main and only foundation of the modern (internet) software industry. It was also clear that the concept of Open Source Steward, even though introduced late in the legislative process, was fully accepted by all stakeholders and seen as a lasting solution. I.e. as a 4th economic actor. Less positive was the repeated insistence by some that the onus to 'fix bad regulation' is squarely on open source in general, and the industry in particular; i.e. the expectation us that we as open source communities, actively follow, and 'meddle' in policy and nascent legislation. And that it is assumed to be our job to fix what the policy makers throw over the fence. And that this is part and parcel of a 'responsible open source community' that can be trusted as 'open source stewards'. And with not much give by the Commission (which controls the key standards bodies) on ensuring the required level of access by open source foundations (even though the CRA mandates this). This workshop also stressed quite a few financial support packages to prepare, aid and create capacity for CRA and PLD implementation. We’ll discuss these with our peers, but our (ASF) participation is likely to be extremely limited, for the simple reason that most require a fully/exclusive EU legal entity and 'paid developers'; so this is more for the SMEs in our community. The more general EU Open Source Policy Summit more or less matched the EU Workshop - but with a bit more emphasis on countries outside the EU and USA (where one should expect the same) and a lot of concern for creating the capacity and capability required to actually implement this legislation. At FOSDEM we, as part of the open source community, backed the EU reporting back to the wider open source community on the process the EC went through after the EU gave their 2023 plenary talk on software regulation. Our collective message there has generally been a cautiously positive one; i.e. not as total a disaster as the original plan was. The role defined in the legislation for open source stewards is very helpful, but the devil is in the details of the 40+ international standards that need to be written. With a lot of emphasis on how hard these standard processes have traditionally been to participate in. FOSDEM held a full Sunday 'devroom' spent on the same topic (credits to Open Forum Europe, NLNet and the Open Source Initiative). Here too, the concerns around standards came up repeatedly, and with not much give (yet) by commission/standards representatives. Some time was given to the European Interoperability Act — which will soon set minimal levels of interoperability; some of which is most likely only 'practical' if the parties involved use the same (and hence open source) software. We’re also exploring if the ASF wants to participate in some of the European Call for Tenders that ask the market/open source stewards for feedback, And where the EU provides funding for developing the documentation and processes that may facilitate the implementation of the CRA. Given the complexity of our being a US organisation - it may well be that we’re only passively supportive here — and rely on interested SMEs in Europe that are part of our downstream community for the actual involvement. ----------------------------------------- Attachment 10: Report from the VP of W3C Relations [Andy Seaborne] ----------------------------------------- Attachment 11: Report from the Apache Legal Affairs Committee [Roman Shaposhnik] Past month has been pretty calm. Committee members took good care of resolving most issues on time. After resolving a handful of LEGAL issues, we are slightly up at 19 issues (from 17 last month). M&P reached out to VP Legal regarding clarifying implications for running sweepstakes. There was a brief discussion around patent implications of the Apache License v2. The takeaway, as always, has been that the ASF's official position is the text of the license. It is self-descriptive, but we do provide a reasonable amount of FAQ material as well. ----------------------------------------- Attachment 12: Report from the Apache Security Team Project [Mark J. Cox] - Deployments that are vulnerable because they did not change the default keys in Apache Superset appear to be actively exploited. The project has removed the default keys from recent versions, and published CVE-2023-27524 for this issue, which was included in the CISA Known Exploited Vulnerabilities (KEV) database. - We have integrated the experimental Apache OIDC 2FA provider to give access to our experimental SBOM platform to all Apache volunteers. - We provided input for a number of press pieces on OFBiz issue CVE-2023-51467 - We worked with Google to improve access to Commons oss-fuzz results Stats for Jan 2024: 30 [license confusion] 19 [support request/question not security notification]] 12 [report/question relating to dependencies] Security reports: 86 (last months: 70, 74, 76) 13 ['airflow'] 7 ['website or other infrastructure'] 5 ['superset'] 4 ['commons', 'dolphinscheduler', 'tomcat'] 3 ['answer', 'inlong', 'maven'] 2 ['ambari', 'camel', 'dubbo', 'fineract', 'hive', 'httpd', 'nifi', 'ofbiz', 'zeppelin'] 1 ['brpc', 'cisa', 'cocoon', 'druid', 'flink', 'groovy', 'hc', 'hop', 'ignite', 'iotdb', 'kafka', 'kudu', 'mynewt', 'openjpa', 'pdfbox', 'roller', 'santuario', 'seata', 'servicecomb', 'sling', 'streampipes', 'struts'] In total, as of 1st February 2024, we're tracking 199 (last months: 175, 180) open issues across 64 projects, median age 90 days (last months: 119, 122). 73 of those issues have CVE names assigned. 27 (last month: 29) of these issues, across 9 projects, are older than 365 days. ----------------------------------------- Attachment 13: Report from the VP of Jakarta EE Relations [Rob Tompkins] Is this position needed? I'm not sure if it is any more. I had correspondence with the Eclipse foundation in the fall. But I don't know that the position is indeed needed. ----------------------------------------- Attachment A: Report from the Apache AGE Project [Eya Badal] ## Description: The mission of Apache AGE is the creation and maintenance of software related to a multi-model database that enables graph and relational models built on PostgreSQL ## Project Status: Current project status: Ongoing with high activity. Issues for the board: Issues for the board: none. ## Membership Data: Apache AGE was founded 2022-05-17 (2 years ago) There are currently 20 committers and 14 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - Rafsun Masud was added to the PMC on 2024-01-28 - Zainab Saad was added as a committer on 2024-01-31 ## Project Activity: Recent releases: PG15-1.5.0 was released on 2024-02-06. PG16-1.5.0 was released on 2024-01-26. PG11-1.4.0 was released on 2023-11-03. ## Community Health: The Apache AGE community has shown resilience and growth in certain areas over the past quarter. Notably, there was a 3% increase in the number of code contributors, indicating a positive trend in community engagement and participation in development activities. This increase in contributors is a healthy sign of an active and growing developer base, which is essential for the continuous improvement and innovation of the Apache AGE project. Additionally, the consistent activity in commits, pull requests (PRs), and issue management on GitHub reflects a steady pace of development and collaboration within the community. These metrics collectively suggest a committed and active developer community focused on advancing the Apache AGE project. ----------------------------------------- Attachment B: Report from the Apache Ambari Project [Brahma Reddy Battula] ## Description: The mission of Apache Ambari is the creation and maintenance of software related to Hadoop cluster management ## Project Status: Current project status: Ongoing with moderate Issues for the board: There are no Board-level issues at this time. ## Membership Data: Apache Ambari was founded 2022-06-15 (2 years ago) There are currently 20 committers and 16 PMC members in this project. The Committer-to-PMC ratio is 5:4. Community changes, past quarter: - No new PMC members. Last addition was Zhiguo Wu on 2022-08-23. - No new committers. Last addition was Mohammad Arshad on 2023-08-15. - There is discussion to add PMC members and committers mostly next report will have the update ## Project Activity: . 2.7.8 was released on 2024-02-01. . metrics-3.0.0 was released on 2023-03-13. . 2.7.7 was released on 2022-12-11. . Working on the roadmap for 2.8.0 and 3.0.0 like jdk17 support ## Community Health: . Overall health is good. 14 commits in the past quarter (27% increase) . The development mailing list saw a decrease in traffic and slow on PR's closure because of the only one release planned. Mostly coming quarter can be improved as we are planning for 2.8.0 and 3.0.0 releases. ----------------------------------------- Attachment C: Report from the Apache Ant Project [Jan Materne] ----------------------------------------- Attachment D: Report from the Apache Archiva Project [Olivier Lamy] ## Description: The mission of Archiva was the creation and maintenance of software related to Build Artifact Repository Manager ## Project Status: Current project status: Moving to Attic vote done Issues for the board: no issues ## Membership Data: Apache Archiva was founded 2008-03-19 (16 years ago) There are currently 21 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 7:3. Community changes, past quarter: - No new PMC members. Last addition was Martin Stockhammer on 2017-04-10. - No new committers. Last addition was Martin Schreier on 2016-09-22. ## Project Activity: Moving to Attic vote. ## Community Health: Moving to Attic vote. ----------------------------------------- Attachment E: Report from the Apache BookKeeper Project [Enrico Olivelli] ----------------------------------------- Attachment F: Report from the Apache Brooklyn Project [Juan D. Cabrerizo] ## Description: The mission of Apache Brooklyn is the creation and maintenance of software related to a software framework for modeling, monitoring and managing cloud applications through autonomic blueprints. ## Project Status: Current project status: Ongoing Most of the activity happening in the `brooklyn-server` submodule: https://github.com/apache/brooklyn-server Issues for the board: There are no issues requiring board attention ## Membership Data: Apache Brooklyn was founded 2015-11-18 (8 years ago) There are currently 20 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Iuliana Cosmina on 2021-06-04. - No new committers. Last addition was Mykola Mandra on 2022-03-08. ## Project Activity: - The last major Brooklyn release was 1.0.0, released on 3rd March 2020. - A new release is under votation. The draft release notes can be checked at https://github.com/apache/brooklyn-docs/pull/382. - Vulnerable dependencies updated - Improve the release frequency has been raised as it's planned to create two releases per year ## Community Health: Most of the latest updates have been focused on fixing vulnerabilities, bugs and improving the workflow framework Stadistics: - 55 commits in the past quarter (17% increase) - 4 code contributors in the past quarter (no change) - 11 PRs opened on GitHub, past quarter (37% increase) - 13 PRs closed on GitHub, past quarter (116% increase) ----------------------------------------- Attachment G: Report from the Apache BuildStream Project [Tristan Van Berkom] ## Description: The mission of Apache BuildStream is the creation and maintenance of software related to efficiently and correctly developing, building and integrating software stacks ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache BuildStream was founded 2022-09-21 (a year ago) There are currently 6 committers and 6 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Abderrahim Kitouni on 2022-09-21. - No new committers were added. ## Project Activity: * Low activity, regular patches to keep up with evolving python * Work ongoing on a new feature to make source mirroring more flexible ## Community Health: Not exactly a thriving community, which is strange because we do have a user base and an interesting project. There have been some build meetups, I think I heard rumors at FOSDEM about an upcoming build meetup, they could at least drop an email on our dev list and let us know about it. That said, there is still a regular but slow flow of patches to take care of on GitHub. ----------------------------------------- Attachment H: Report from the Apache Cassandra Project [Josh McKenzie] ## Description: Apache Cassandra software is a highly scalable second-generation distributed database. ## Project Status: Current project status: The project is Ongoing and healthy. We had a successful Cassandra Summit back in December and we're lined up for a C* track at Community Over Code EU and CoC US in 2024. We're pushing towards a 5.0 release with many new features the community is excited for. Stabilizing that now, and hope to have that out H1'24. Committer roster continues to grow with diverse folks from many different areas, and the subprojects are providing smoother easier on-ramps into the ecosystem for new contributors as hoped. Issues for the board: No issues for the board at this time. ## Membership Data: Apache Cassandra was founded 2010-02-16 (14 years ago) There are currently 79 committers and 36 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Dinesh Joshi on 2021-05-19. - Bret McGuire was added as committer on 2024-02-07 - Alexandre Dutra was added as committer on 2024-01-03 - Brad Schoening was added as committer on 2024-02-09 - Francisco Guerrero was added as committer on 2023-11-28 - Mike Adamson was added as committer on 2023-12-10 - Maxim Muzafarov was added as committer on 2024-01-08 - Olivier Michallat was added as committer on 2024-01-18 NOTE: When we bring in a subproject, our approach is to offer the commit bit to the top contributors on that project (barring any argument otherwise by existing PMC / committers), so they can continue to work on that project with momentum. We don't want donating to the foundation to be a hit and run because people can't continue working on the thing they built or are blocked on review, etc. In the event a large project largely funded by one entity is donated to the foundation, we expect to see several people raised to committer that work for one company at that time. Since we treat "area of committing" as a social contract (i.e. only commit code to the area you know about; we don't enforce limitations on commit bit from a technical perspective), this doesn't represent any change in control or influence across the full project ecosystem. ## Project Activity: 5.0-beta1 was released on 2023-12-05. 4.1.4 vote passed morning of 2024-02-14 and should release shortly. Holiday periods are always slower for us, as are ramps up to a major release as people focus on burning down CI flakies. No exception this quarter, but activity remains healthy and within expectations. We're pushing to validate a 5.0 release and hope to fast-follow with 5.1 as soon as the Accord feature (distributed ACID transactions w/novel Paxos algorithm) is stabilized. ## Community Health: Participation on dev list, user list, forums, slack, etc continues at similar paces to previous years. Project remains healthy. ## Other notes: ### Subprojects, governance Cassandra isn't an umbrella project nor pushing to be one. We're a distributed system that has multiple dependencies and components in its ecocystem which only work with the core DB, and the core DB ultimately only works if they're present or some other component like them is (i.e. k8s operator, sidecar, driver, etc). Historically the drivers were in-tree then moved out; we've now brought them back in. The ecosystem is large enough that no one person can be deep experts in the entire set of codebases so we've split up to the "social contract" of a global commit-bit with agreed-upon expectations to not review or commit code in a place you're not familiar with. Not different than how we've always operated on the core database just with more clearly articulated boundaries. We require at least 3 PMC members to volunteer to be accountable for a subproject as we need at least 3 members to vote on releases and need the broader view of the ecosystem to integrate w/those projects. The entire PMC remains fully responsible for the health, integration, and releases of all subprojects. So far this has worked well. No sub-project will come into the ecosystem without a 100% explicit dependency on the core apache cassandra database. ### Planet Cassandra, mark management, marketing We've reached out to brand about handling potential mark infringement on https://cassandra.alteroot.org. We've had to go back and forth educating users and vendors on appropriate boundaries and balancing / excluding bias, as well as clear respect for the foundation and project's marks. The site continues to improve in this regard. We've had discussions with the folks who run Planet Cassandra about potentially donating the site to the ASF (dns record, hosting). They're very excited and receptive to this idea; the PMC hasn't had cycles to move on that yet due to holiday season and upcoming release. Also, ASF Infra has historically indicated to us a general reluctance to take on more domain name registrations or site hosting. We'll have to continue to thread the needle of allowing self-promoting, ASF project complementary content on that site that's by definition not vendor neutral while the PMC continues to push for keeping the entire property as both vendor-neutral and vendor-enabling as possible. Having the site under the foundation could only make this process easier for us to continue to refine; we'll continue to pursue that. Project marketing group has been renamed to comdev as seen as more fitting for an ASF project. ----------------------------------------- Attachment I: Report from the Apache Cocoon Project [Cédric Damioli] ## Description: The mission of Cocoon is the creation and maintenance of software related to Web development framework: separation of concerns, component-based ## Project Status: Current project status: Dormant/At risk Issues for the board: Issues for the board: none. ## Membership Data: Apache Cocoon was founded 2003-01-22 (21 years ago) There are currently 80 committers and 34 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - Christofer Dutz was added to the PMC on 2024-01-30 - Torsten Curdt was added to the PMC on 2024-01-30 - No new committers. Last addition was Christofer Dutz on 2023-05-10. ## Project Activity: Statistically, the project seems to be in good shape, with 2 new PMC members, a new release less than 3 months ago, and the declared will to move on with a Git migration ## Community Health: It's still hard to have active PMC members. The current chair has expressed its will to step down a month ago, but so far there's no volunteer to replace him. ----------------------------------------- Attachment J: Report from the Apache Community Development Project [Swapnil Mane] ## Description: The mission of Community Development is the creation and maintenance of software related to Resources to help people become involved with Apache projects ## Project Status: Current project status: Ongoing with high activity Issues for the board: none ## Membership Data: Apache Community Development was founded 2009-11-01 (14 years ago) There are currently 46 committers and 38 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Justin Mclean on 2023-07-18. - No new committers. Last addition was Carolina Escobar on 2023-08-11. ## Project Activity: ### Google Summer of Code 2024 We have filled out the application for GSoC 2024. So far 13 projects submitted 26 project ideas. Currently, the GSoC team is reviewing all the applications, and the results of accepted mentoring organizations will be published on February 21, 2024. ### ALC We have established a new ALC, the ALC Hangzhou (China) Chapter, and have received a great response to setting up this new ALC. In total, 27 volunteers have shown their interest, out of which 5 are ASF members. ALC Beijing is currently preparing for CoC Asia 2024, which will be held in Hangzhou from July 26-28, 2024. This time, we had fewer ALC activities compared to the previous quarter, likely due to the holiday season. ### ASF Booth at OpenSource Experience, Paris We had an ASF booth at OpenSource Experience, Paris [OSE 1]. Our booth attracted attendees with varying levels of familiarity with the Foundation; most of the people were aware of the HTTP server project. Among the attendees were students and individuals transitioning their careers towards software and technology. Many expressed interest in contributing to open-source projects to enhance their skills. Overall, we received a good response and positive feedback. Huge thanks to Olivier Heintz, Ryan Skraba, Hervé Boutemy, Jean-Baptiste Onofré, and Ismaël Mejía for volunteering and managing our booth at the event. [OSE 1] https://www.opensource-experience.com/en/ ### Working Groups Around Specific Topics or Problem Spaces ComDev has begun to propose a structure for creating working groups around specific topics or problem spaces, as a way to encourage people to get involved in work that they might not take on individually. These are being discussed on the dev@community.apache.org mailing list, and there’s a repo at https://github.com/apache/comdev-working-groups where suggestions of some of these groups are being worked out. All are welcome to come be part of this process, and to bring your ideas for possible other working groups that have not yet been suggested. ### Community Building Guide Rich Bowen has begun crafting concrete, practical advice for our project communities on growing their developer communities. Here is the outline: https://community.apache.org/communitybuilding/ More progress is expected this quarter. Huge thanks to Rich for initiating this valuable asset, with additional members joining to contribute. ### ASF volunteers Page Previously, we had a "nearby ASF people" app at [1], aimed at helping individuals find mentors or ASF speakers. However, it was not effectively maintained and contains outdated information. To address this, Bertrand Delacretaz suggested and created a page listing ASF community members who volunteer to mentor new members or speak at ASF-related events. Thanks so much to Bertrand for these efforts. The initial draft and progress can be found here [2]. [1] https://community.zones.apache.org/map.html [2] https://s.apache.org/uwhba ## Community Health: On our dev@community.apache.org mailing list, we had a slight 12% decrease in traffic in the past quarter (303 emails compared to 343) but overall, we had a good quarter, thanks to our community members. ----------------------------------------- Attachment K: Report from the Apache CouchDB Project [Jan Lehnardt] ## Description: Apache CouchDB software is a document-oriented database that can be queried and indexed in a MapReduce fashion using JavaScript. CouchDB also offers incremental replication with bi-directional conflict detection and resolution. ## Project Status: Current project status: Ongoing Issues for the board: none. ## Membership Data: Apache CouchDB was founded 2008-11-19 (15 years ago) There are currently 72 committers and 18 PMC members in this project. The Committer-to-PMC ratio is 4:1. In response to rbowen’s note about our high Committer-to-PMC ratio: most active committers are on the PMC. We collected a lot of committers over the last 15 years that dropped off the project before making it into the PMC. We are not in the habit of forcibly retiring committers. Community changes, past quarter: - No new PMC members. Last addition was Glynn Bird on 2023-03-14. - No new committers. Last addition was Jiahui Li on 2023-08-24. ## Project Activity: - 3.3.3 was released on 2023-12-04 (h/t cdutz) - we are still preparing the next feature release 3.4.0 which is currently held up by a single remaining issue. ## Community Health: - community interaction is steady with a slight uptick as is normal after a release. - dev activity has slowed a little, but not unreasonably so for this quarter. ----------------------------------------- Attachment L: Report from the Apache Creadur Project [Philipp Ottlinger] ## Description: The mission of Creadur is the creation and maintenance of software related to Comprehension and auditing of software distributions ## Project Status: Current project status:ongoing - high Issues for the board: none ## Membership Data: Apache Creadur was founded 2012-04-18 (12 years ago) There are currently 13 committers and 12 PMC members in this project. The Committer-to-PMC ratio is roughly 7:6. Community changes, past quarter: - Claude Warren was added to the PMC on 2024-01-23 - Jean-Baptiste Onofré was added to the PMC on 2024-01-23 ## Project Activity: Apache Rat 0.16.1 was released on 2024-01-24. Apache Rat 0.16 was released on 2023-12-28. RAT 0.16 was a major change as the new SPDX feature was introduced. RAT 0.16.1 is a small feature release and contains multiple changes to the webpage to further comply with the ASF rules (added privacy menu item, do not load fonts from Google anymore). Development on 0.17 started off as more and more people seem to use RAT from the cli. Subprojects Tentacles and Whisker are mainly in dormant state, receive dependency updates but no real code change at the moment. ## Community Health: We were able to add 2 people to the PMC. Development skyrocketed compared to the time before 0.16. Due to some problems in 0.16 we had to provide a new release 0.16.1 rather quick to address missing information on the project webpage and fixed the underlying issues. dev@creadur.apache.org had a 738% increase in traffic in the past quarter (956 emails compared to 114) 13 issues opened in JIRA, past quarter (225% increase) 7 issues closed in JIRA, past quarter (133% increase) 284 commits in the past quarter (222% increase) 8 code contributors in the past quarter (100% increase) 93 PRs opened on GitHub, past quarter (520% increase) 92 PRs closed on GitHub, past quarter (513% increase) ----------------------------------------- Attachment M: Report from the Apache CXF Project [Daniel Kulp] ## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: In the last quarter, there have been a lot of fixes/patches applied to the main branch and back ported to the fixes branches. We are definitely overdue for releases. A discussion about that was started a couple days ago, but we discovered we also need releases of Santuario and WSS4J first for some of the fixes. That process should be starting soon. Hopefully we'll get updated CXF releases by the end of the month. I (dkulp) normally drive the releases, but with my recent retirement, it's a low priority. I'm hoping to find someone else to drive these releases to help transition that knowledge to others. No releases were done this period. Recent releases: 3.5.7 was released on 2023-09-18. 3.6.2 was released on 2023-09-18. 4.0.3 was released on 2023-09-18. Last Fediz Release: Apache CXF Fediz 1.6.1: 2022-12-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon. ----------------------------------------- Attachment N: Report from the Apache DataSketches Project [Lee Rhodes] ## Description: The mission of Apache DataSketches is the creation and maintenance of software related to an open source, high-performance library of streaming algorithms commonly called "sketches" in the data sciences. Sketches are small, stateful programs that process massive data as a stream and can provide approximate answers, with mathematical guarantees, to computationally difficult queries orders-of-magnitude faster than traditional, exact methods ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache DataSketches was founded 2020-12-15 (3 years ago) There are currently 16 committers and 14 PMC members in this project. The Committer-to-PMC ratio is 8:7. Community changes, past quarter: - No new PMC members. Last addition was Charlie Dickens on 2023-07-04. - No new committers. Last addition was Will Lauer on 2022-03-07. ## Project Activity: We now have a separate repo for our Python library which largely parallels our C++ and Java libraries. The Python library started out as a sub-folder of the C++ repo, but it has grown and now it is large enough to be in its own repo. All of the Python code is backed by C++ for high performance. We also have in development a parallel GoLang library in development. This will be a valuable contribution to the overall codebase so that our users will be able to access our sketches in 4 languages: Java, C++, Python, and Go! During this period we released 2 new C++ versions, 2 new Python versions (in the new repo), and 2 new Java versions. ## Community Health: Our project is healthy. We have a small but loyal community of users that contact us when they have questions or issues. Of special interest is that our project is now frequently referenced in scientific papers in the area of streaming sketches. In these papers the Apache DataSketches project is often referenced as the most widely used and best known library of open source sketches (in the research community anyway!). ----------------------------------------- Attachment O: Report from the Apache DeltaSpike Project [Mark Struberg] ----------------------------------------- Attachment P: Report from the Apache Doris Project [Mingyu Chen] ## Description: The mission of Apache Doris is the creation and maintenance of software related to a MPP-based interactive SQL data warehousing for reporting and analysis ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Doris was founded 2022-06-15 (2 years ago) There are currently 67 committers and 22 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. Community changes, past quarter: - Di Wu was added to the PMC on 2024-01-16 - Jie Wen was added to the PMC on 2024-01-16 - Kang Xiao was added to the PMC on 2024-01-26 - Lijia Liu was added to the PMC on 2024-01-25 - Zhang Wenxin was added to the PMC on 2024-01-16 - Xiangyu Wang was added as committer on 2024-01-19 - Jack Teng was added as committer on 2024-02-01 - Calvin Kirs was added as committer on 2024-01-25 - Xin Liao was added as committer on 2024-02-01 - Jibing Li was added as committer on 2024-01-23 - Jerry Hu was added as committer on 2024-02-01 - Cheng Yuxuan was added as committer on 2024-02-06 - Bowen Yang was added as committer on 2024-02-03 ## Project Activity: We have released - Doris 2.0.3/2.0.4 - Doris Flink Connector 1.5.1/1.5.2 - Doris Spark Connector 1.3.0/1.3.1 - Doris Streamloader 1.0.1 - Doris Shade 1.0.3/1.0.4 All above versions are mainly for bug fixed. In addition, we are working on releasing 2.1.0, which contains lots of new features and improvements, and provide better out-of-box performance. ## Community Health: Overall community health is good. We try to invite more contributor to be the committer of PMC member. And also try to establish "Active Contributor" to encourage more people getting involed. ----------------------------------------- Attachment Q: Report from the Apache Drill Project [Charles Givre] ----------------------------------------- Attachment R: Report from the Apache Druid Project [Gian Merlino] Report date: 2/13/2024 ## Description Apache Druid is a high performance real-time analytics database. It is designed for workflows where low-latency query and ingest are the main requirements. It implements ingestion, storage, and querying subsystems. Users interface with Druid through built-in SQL and JSON APIs, as well as third-party applications. Druid has an extensive web of connections with other Apache projects: Calcite for SQL planning, Curator and ZooKeeper for coordination, Kafka and Hadoop as data sources, Avro, ORC, or Parquet as supported data input formats, and DataSketches for scalable approximate algorithms. Druid can also be used as a data source by Superset. ## Issues There are no issues requiring board attention at this time. ## Activity Our last major release was Druid 28.0.0, which contained 420 new features, bug fixes, performance enhancements, documentation improvements, and additional test coverage from 57 contributors. Druid Summit 2023, a virtual conference, was held December 5–6, 2023. It featured 22 sessions from over 30 speakers, and over 200 attendees. In the past three months (mid Nov 2023 to mid Feb 2024), mailing list traffic is down 19%, GitHub commits are slightly down (-7%), and GitHub PRs opened are also slightly down (-10%). This may be attributed to the end-of-year holidays, which are traditionally a slow period for contributions. Meanwhile, our Slack workspace at https://apachedruidworkspace.slack.com/ stands at 2,431 members, up 482 members (25%) since our last report. A Helm chart for Druid was contributed after the helm/charts repository on GitHub was deprecated. However, we have not included this in any release since then, due to uncertainty about whether or not we need to perform formal IP clearance for this contribution. Due to lack of volunteers to do this specific work, the author of this report recently raised a PR to remove the code from the Apache Druid repository. ## Recent PMC changes - Currently 35 PMC members. - No new PMC members since the last report. - Most recent PMC members added: - Karan Kumar (2023-07-17) - Kashif Faraz (2023-07-17) ## Recent committer changes - Currently 66 committers. - Two new committers since the last report: - Brian Le (2023-10-11) - George Wu (2023-10-06) ## Recent releases - 28.0.1, a patch release, on 2023-12-21. - 28.0.0, a major release, on 2023-11-15. - 27.0.0, a major release, on 2023-08-11. ## Development activity by the numbers In the last quarter: - 833 commits from 65 contributors - 882 pull requests opened - 978 pull requests merged/closed - 140 issues opened - 550 issues closed ----------------------------------------- Attachment S: Report from the Apache Empire-db Project [Rainer Döbele] ## Description: Empire-db is a lightweight relational database access library dealing with all aspects of storing, manipulating, retrieving and modelling data in relational database management systems (RDBMS). As an alternative to traditional OR-Mapping solutions, it provides an SQL centric, no-compromise approach that uses a Java-Object-Model rather than Mapping Files or Annotations. ## Project Status: Current project status: Ongoing with low activity Issues for the board: none ## Membership Data: Apache Empire-db was founded 2012-01-24 (12 years ago) There are currently 10 committers and 9 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Jan Glaubitz on 2016-07-10. - No new committers. Last addition was Ralf Eichinger on 2022-03-15. ## Project Activity: Latest release is empire-db-3.1.0 released on 2023-04-22. Given the maturity of the code base there has been little demand for major improvments or new features. However some modules will have to be updated soon due to the Javax to Jakarta Namespace change. ## Community Health: Our community is still alive and healthy albeit low activity with 2 commits from 2 code contributors in the past quarter. ----------------------------------------- Attachment T: Report from the Apache EventMesh Project [Eason Chen] ## Description: The mission of Apache EventMesh is the creation and maintenance of software related to a fully serverless platform used to build distributed event-driven applications ## Project Status: Current project status: With high activity. Issues for the board: none ## Membership Data: Apache EventMesh was founded 2023-03-22 (a year ago) There are currently 51 committers and 16 PMC members in this project. The Committer-to-PMC ratio is roughly 7:2. Community changes, past quarter: - Jianbo Liu was added to the PMC on 2024-01-05 - Mingjun Liu was added as committer on 2024-01-06 - Fabian Bao was added as committer on 2024-01-25 - Tian Xia was added as committer on 2024-01-08 - Rongzhen Yan was added as committer on 2024-01-06 ## Project Activity: - 1.10.0 was released on 2023-12-24. - participate in GSOC 2024(Google summer of code): Enhance the serverless ability for EventMesh - New Feature EventMesh Dashboard under the developing ## Community Health: 14 new contributors The new features were under designing or developing, so the commits and PR activity seems a slight increase. Contributors increased slightly compared to the previous quarter. Overall community health is good. ----------------------------------------- Attachment U: Report from the Apache Flume Project [Balázs Donát Bessenyei] ----------------------------------------- Attachment V: Report from the Apache FreeMarker Project [Dániel Dékány] ## Description: Apache FreeMarker is a template engine, i.e. a generic tool to generate text output based on templates. Apache FreeMarker is implemented in Java as a class library for programmers. FreeMarker 2 (the current stable line) produces releases since 2002. The FreeMarker project has joined the ASF in 2015, and graduated from the Incubator in early 2018. ## Issues: There are no issues requiring board attention at this time. ## Activity: Activity was higher as usual in recent months. ## Health report: Activity is relatively low, as usual for this project, though was higher in recent few months than usual. Several pending non-trivial PR-s were resolved, and Jira issues were addressed in recent few months. Voting for the next release (2.3.33) looks very close. User questions (mostly on StackOverflow) and new Jira issues are being answered. Post 2.3.33, the goal is to finish the java.time support (FREEMARKER-35), and release it with 2.3.34. The very long term goal is continuing the ongoing development on the 3.0 branch, so that the project can innovate and the code base can become much cleaner and more attractive for new committers. ## PMC changes: - Currently 7 PMC members. - No changes since the graduation on 2018-03-21 ## Committer base changes: - Currently 8 committers. - Last added: Siegfried Goeschl on 2020-01-07 ## Releases: - 2.3.32 was released on 2023-01-14 ----------------------------------------- Attachment W: Report from the Apache Geode Project [Mark Bretl] ## Description: The mission of Apache Geode is the creation and maintenance of software related to a data management platform that provides real-time, consistent access to data-intensive applications throughout widely distributed cloud architectures. ## Project Status: Current project status: Ongoing low activity, at-risk to being dormant Issues for the board: None ## Membership Data: Apache Geode was founded 2016-11-15 (7 years ago) There are currently 118 committers and 31 PMC members in this project. The Committer-to-PMC ratio is roughly 4:1. Community changes, past quarter: - No new PMC members. Last addition was Calvin Kirs on 2022-11-14. - No new committers. Last addition was Calvin Kirs on 2022-11-15. ## Project Activity: Little overall project activity, however, there is some talk of doing a maintenance release for some of the fixes in the main branch. Unfortunately, the test infrastructure needs work still before an official release can be done. ## Community Health: After a call out on the dev list for help with some issues, there were a few responses but not much materialized. There have been a few discussions among community members on what it will take to take to get test running on Apache Infra, so it is encouraging ----------------------------------------- Attachment X: Report from the Apache Geronimo Project [Jean-Louis Monteiro] ----------------------------------------- Attachment Y: Report from the Apache Gora Project [Kevin Ratnasekera] ----------------------------------------- Attachment Z: Report from the Apache Groovy Project [Paul King] ## Description: Apache Groovy is responsible for the evolution and maintenance of the Groovy programming language. ## Project Status: Current project status: Ongoing with moderate activity. Issues for the board: No issues requiring board attention at this time. ## Membership Data: Apache Groovy was founded 2015-11-18 (8 years ago) There are currently 21 committers and 12 PMC members in this project. The Committer-to-PMC ratio is 7:4. Community changes, past quarter: - No new PMC members. Last addition was Remko Popma on 2022-07-13. - Zongle Wang was added as committer on 2023-08-22. ## Project Activity: The project is responding well to raised issues for previous releases and making steady progress towards our next major goal of releasing Groovy 5. Recent releases: 4.0.18 was released on 2024-01-19. 5.0.0-alpha-5 was released on 2024-01-19. 3.0.20 was released on 2023-12-22. 4.0.17 was released on 2023-12-22. 5.0.0-alpha-4 was released on 2023-12-22. 4.0.16 was released on 2023-11-29. 5.0.0-alpha-3 was released on 2023-11-29. ## Community Health: Activity for the issue tracker was slightly down but activity for the mailing lists, commit traffic and GitHub PRs was slightly increased. This quarter on our main branch (which corresponds to Groovy 5) of our core repo, 201 commits were contributed from 12 contributors including 4 non-committer contributors (3 new). There were 456 commits from 12 contributors across all branches. We look forward to participating in CommunityOverCode EU in June. ----------------------------------------- Attachment AA: Report from the Apache HAWQ Project [Lei Chang] ----------------------------------------- Attachment AB: Report from the Apache Hop Project [Hans Van Akelyen] ## Description: The mission of Apache Hop is the creation and maintenance of software related to a platform for data orchestration ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Hop was founded 2021-12-15 (2 years ago) There are currently 23 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Bart Maertens on 2021-12-15. - No new committers. Last addition was Shuiliang Xue on 2022-09-28. ## Project Activity: Since the previous report 2.7 was released. We are working on a 2.8 release which should be available shortly. For the near future the community is working on following items: - An external contribution of two plugins for Amazon SQS and SNS these were made for a prior project a few years ago and he agreed to let us port and include them in Hop. - Extra information, documentation and terraform templates for a reference architecture incorporating Apache Hop deployed using Fargate. - analyze and implement a new way to resolve variables using `lookup plugins’. - A new expression language close to SQL to offer powerful transformations and actions to the product. - explore the possibility of integrating observability with OpenTelemetry. ## Community Health: We have invited a new committer, the acceptance has not happened yet and is an action for our PMC chair to follow up. A community member created a training course in English and Spanish for Hop and had an overwhelmingly positive reception in the first round (reached the limit of 50 registrations in a couple of hours on a Saturday morning). This training is a welcome addition. We also see various training initiatives in the Brazilian community which brings training to a more global and international community. Though our metrics show a bit of a downward trend, which is partially caused by the end-of-year period, we are seeing a better mix of contributors and participants in the project. ----------------------------------------- Attachment AC: Report from the Apache HTTP Server Project [Joe Orton] ## Description: The mission of HTTP Server is the creation and maintenance of software related to Apache Web Server (httpd) ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache HTTP Server was founded 1995-02-27 (29 years ago) There are currently 128 committers and 55 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Giovanni Bechis on 2021-06-11. - No new committers. Last addition was Emmanuel Dreyfus on 2022-11-05. ## Project Activity: The release of 2.4.58 in October last year appears to have been successful with no regressions reported. There have been no releases since that time and project activity has been relatively quiet over the new year. Focus continues to be on trunk development with selected backports merged to the 2.4.x branch as required. There are a number of changes already merged to for a future 2.4 release, mainly bug fixes with some feature work. ## Community Health: Mailing list activity and the volume of commits were both down compared to the previous quarter but still ticking over at a reasonable rate. GitHub PRs continue to be actively used by committers and by non-committers submitting patches. It is encouraging to see patches arrive in GitHub from new developers which might previously have been submitted in Bugzilla at best, and quiet possibly lost in the noise there. ----------------------------------------- Attachment AD: Report from the Apache HttpComponents Project [Michael Osipov] ## Description: The mission of HttpComponents is the creation and maintenance of software related to Java toolset of low level HTTP components ## Project Status - There are no issues requiring board attention at this time. ## Membership Data: Apache HttpComponents was founded 2007-11-14 (16 years ago) There are currently 20 committers and 9 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Arturo Bernal on 2023-10-27. - No new committers. Last addition was Arturo Bernal on 2023-06-20. ## Project Activity: - Development on master has moved to 5.4 for Client and 5.3 for Core ## Community Health: - Overall the project remains active. Issues and dicussions are resolved in time. ----------------------------------------- Attachment AE: Report from the Apache Ignite Project [Dmitry Pavlov] ## Description: The mission of Ignite project is the creation and maintenance of software related to high-performance distributed database engine providing in-memory and persistent data caching, partitioning, processing, and querying components. ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Ignite was founded 2015-08-19 (8 years ago) There are currently 76 committers and 40 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - Nikita Amelchev was added to the PMC on 2023-11-20 - Iurii Gerzhedovich was added as committer on 2024-02-09 ## Project Activity: - 2.16.0 (latest stable) was released on 2022-11-17. - ML has been moved to the separate extenstion. - This extracted ML Extension 1.0 was released on 2022-11-17. - Maintainers are fixing a number of Apache Calcite integration issues, this will allow us to discontinue H2 and overcome H2-related security concerns. ## Community Health: - Community started to discuss end of JDK 8 support - There is decrease in the dev list activity (-30%) and in the number of open/closed issues(-70%), but other activity metrics are almost the same. - Project attracts new contributors. ----------------------------------------- Attachment AF: Report from the Apache Impala Project [Jim Apple] ----------------------------------------- Attachment AG: Report from the Apache Incubator Project [Justin Mclean] ----------------------------------------- Attachment AH: Report from the Apache Juneau Project [James Bognar] ## Description: The mission of Apache Juneau is the creation and maintenance of software related to a toolkit for marshalling POJOs to a wide variety of content types using a common framework, and for creating sophisticated self-documenting REST interfaces and microservices using VERY little code ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Juneau was founded 2017-10-17 (6 years ago) There are currently 13 committers and 13 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Gary D. Gregory on 2023-04-02. - No new committers. Last addition was Gary D. Gregory on 2023-04-03. ## Project Activity: 9.0.1 was release Sept 6, 2023. No new releases currently in plan. Minor development ongoing (mostly security updates, bug fixes). ## Community Health: Community involvement is low but existing. Last release had no problems passing vote. ----------------------------------------- Attachment AI: Report from the Apache Kafka Project [Mickael Maison] ## Description: The mission of Kafka is the creation and maintenance of software related to Distributed publish-subscribe messaging system ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Kafka was founded 2012-11-21 (11 years ago) There are currently 59 committers and 35 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - Divij Vaidya was added to the PMC on 2023-12-27 - No new committers. Last addition was Lucas Brutschy on 2023-09-21. The PMC is currently considering adding new committers. We provided feedback to some contributors and still have ongoing discussions for others (that will end with either providing feedback or an invitation to become a committer). ## Project Activity: Kafka 3.7.0 is nearing release. We published the first release candidate on Jan 11. It is expected to release in February. Kafka 3.5.2 and 3.6.1 both released in December 2023. ## Community Health: The project activity has been steady since the last quarter (very small differences in mailing list activities and commits). The decrease in Jiras is a return to normal after a spike last quarter due to large work items in progress (Tiered Storage, JBOD support in KRaft, ZK to KRaft migration and Kafka 4.0). ----------------------------------------- Attachment AJ: Report from the Apache Kibble Project [Sharan Foga] ## Description: The mission of Apache Kibble is the creation and maintenance of software related to an interactive project activity analyzer and aggregator ## Project Status: Current project status: Dormant, low activity Issues for the board: None ## Membership Data: Apache Kibble was founded 2017-10-18 (6 years ago) There are currently 15 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 8:7. Community changes, past quarter: - No new PMC members. Last addition was Michał Słowikowski on 2021-05-03. - No new committers. Last addition was Kaxil Naik on 2021-02-21. ## Project Activity: The project has not yet made a release. There has been no activity since our last report and our mailing lists have been quiet. It was hoped that we could begin to kick off some activity in the previous quarter but this has not happened. ## Community Health: We are a small community and perhaps just need to start something rather than taking on a large activity such as a complete codebase rewrite (which was our planned intention). We are probably losing potential contributors due to incomplete documentation so kicking off a small activity such as cleaning up our existing documentation could be a way of gathering more community participation. By mid to late March I should have more free cycles to begin that documentation tidy up work and we will see what results that brings. ----------------------------------------- Attachment AK: Report from the Apache Knox Project [Larry McCay] ## Description: The mission of Knox is the creation and maintenance of software related to Simplify and normalize the deployment and implementation of secure Hadoop clusters ## Project Status: Current project status: The Apache Knox project is ongoing and healthy even if mature. We continue to have new features described in Knox Improvement Proposals (KIPs) which provide a one-pager view of a proposal and facilitates discussion. Issues for the board: Nothing needing to be addressed by the board at this time. ## Membership Data: Apache Knox was founded 2014-02-18 (10 years ago) There are currently 24 committers and 20 PMC members in this project. The Committer-to-PMC ratio is 6:5. Community changes, past quarter: - No new PMC members. Last addition was Marton Balázs on 2022-11-27. - No new committers. Last addition was Marton Balázs on 2022-11-28. ## Project Activity: The last release for Apache Knox was release on 02/27/2023 as 2.0.0. We continue to mature the project with more improvements to the Admin UI and and user experience. We have started to cleanup the codebase to remove unused and/or tech debt that requires changes to be made across multiple plugins even though no one is using them. We have begun working on usecases that are more targeted towards kubernetes and istio based deployments as well. Dpendency management for CVEs are an ongoing effort. ## Community Health: dev@knox.apache.org had a 4% increase in traffic in the past quarter (430 emails compared to 410) 4 issues opened in JIRA, past quarter (-89% change) 4 issues closed in JIRA, past quarter (-87% change) 14 commits in the past quarter (-57% change) 4 code contributors in the past quarter (no change) 20 PRs opened on GitHub, past quarter (-39% change) 15 PRs closed on GitHub, past quarter (-54% change) The health related metrics above show a downturn but given the relative maturity of the project and the holidays during the quarter the actual numbers involved are quite reasonable. ----------------------------------------- Attachment AL: Report from the Apache Kylin Project [Shao Feng Shi] ## Description: The mission of Apache Kylin is the creation and maintenance of software related to a distributed and scalable OLAP engine ## Project Status: Current project status: Dormant Issues for the board: none ## Membership Data: Apache Kylin was founded 2015-11-18 (8 years ago) There are currently 48 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Xiaoxiang Yu on 2020-10-08. - No new committers. Last addition was Qian Xia on 2023-08-16. We also want to invite new people to the committer and PMC, but current new contributors' contribution are not that solid; When Kylin 5 is released, we plan to recognize some of them as committer. ## Project Activity: 4.0.4 was released on 2024-01-28 5.0.0-beta was released on 2023-08-30. 5.0.0-alpha was released on 2023-04-26. 4.0.3 was released on 2022-12-23. The Kylin 5.0.0 GA release was delayed, due to the resource issue and new security bugs. After the 4.0.4 got released, the release for 5.0.0 will be resumed. ## Community Health: dev@kylin.apache.org had a 32% increase in traffic in the past quarter (142 emails compared to 107) user@kylin.apache.org had a 328% increase in traffic in the past quarter (60 emails compared to 14) 35 issues opened in JIRA, past quarter (105% increase) 1 issue closed in JIRA, past quarter (-98% change) 55 commits in the past quarter (-14% change) 20 code contributors in the past quarter (25% increase) 7 PRs opened on GitHub, past quarter (-30% change) 7 PRs closed on GitHub, past quarter (-30% change) ----------------------------------------- Attachment AM: Report from the Apache Libcloud Project [Tomaž Muraus] ----------------------------------------- Attachment AN: Report from the Apache Logging Services Project [Volkan Yazici] ----------------------------------------- Attachment AO: Report from the Apache ManifoldCF Project [Piergiorgio Lucidi] ## Description: The mission of ManifoldCF is the creation and maintenance of software related to Framework for connecting source content repositories to target repositories or indexes. ## Issues: No issues to report at this time. ## Membership Data: Apache ManifoldCF was founded 2012-05-15 (9 years ago) There are currently 25 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, since last report in October: - No new PMC member. Last addition made on 2023-08-03. - No new committers. Last addition was on 2019-08-17. ## Project Activity: 2.26 was released on 2023-11-01 2.25 was released on 2023-06-01 The Community sets the following goals: - Facilitating the adoption - Making easier for any developer to contribute - Migrating the website from Docbook / Forrest to ASF Pelican - Making the release scripts agnostic The current action plan is the following: We introduced Apache ManifoldCF SDK, a new Maven / Docker SDK to simplify the development of connectors, extensions and containers. We are currently finalizing the migration of all the source code repositories from SVN to GitHub in order to faciliate the adoption for developers. We are working on migrating all the subprojects converting all the release scripts into GitHub workflows. We have pull requests to manage and this will facilitate the management of all these contributions. ## Community Health: We currently have 19 pull requests to manage, 4 created starting from October 2023 and we have two new contributors. Guylaine Bassette created some PRs to fix and extend Solr and Active Directory connector. Michele Piazzolla is working on the new website based on ASF Pelican. ----------------------------------------- Attachment AP: Report from the Apache Mesos Project [Qian Zhang] ## Description: The mission of Mesos is the creation and maintenance of software related to a cluster manager that provides efficient resource isolation and sharing across distributed applications ## Project Status: Current project status: There were a number of PRs merged in this month to enhance Mesos agent, so community is relatively active, please hold off on moving Mesos to attic. Issues for the board: None. ## Membership Data: Apache Mesos was founded 2013-06-19 (11 years ago) There are currently 50 committers and 50 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Charles-François Natali on 2021-08-08. - No new committers. Last addition was Charles-François Natali on 2021-08-07. ## Project Activity: A number of PRs were merged this month for enhancing Mesos agent. ## Community Health: We have a new contributor: Devin Leamy who created 11 PRs which have been merged by Ben Mahler. ----------------------------------------- Attachment AQ: Report from the Apache Mnemonic Project [Gordon King] ----------------------------------------- Attachment AR: Report from the Apache Oozie Project [Dénes Bodó] ## Description: The mission of Oozie is the creation and maintenance of software related to A workflow scheduler system to manage Apache Hadoop jobs. ## Project Status: Current project status: Dormant Issues for the board: none ## Membership Data: Apache Oozie was founded 2012-08-28 (11 years ago) There are currently 28 committers and 23 PMC members in this project. The Committer-to-PMC ratio is roughly 7:6. Community changes, past quarter: - No new PMC members. Last addition was Dénes Bodó on 2021-04-08. - No new committers. Last addition was János Makai on 2022-12-28. ## Project Activity: Recent releases: 5.2.1 was released on 2021-02-26. 5.2.0 was released on 2019-12-06. 5.1.0 was released on 2018-12-19. Otherwise, the usual: Slow but steady development is going on, mostly with bug fixes and stability improvements. We still have the need to move to Github PR methodology and upgrade the core Hadoop version to Hadoop 3. ## Community Health: Community activity is low but there are enough active people on the project to provide oversight. Some metrics about the last quarter: 3 issues opened in JIRA 1 code contributor was accepted ----------------------------------------- Attachment AS: Report from the Apache OpenDAL Project [Hao Ding] ## Description: Apache OpenDAL is a data access layer that allows users to easily and efficiently retrieve data from various storage services in a unified way. Its vision centers on enabling **access data freely**, with the goal of empowering ALL users to freely access ANY storage service in ANY way they choose. ## Project Status: Current project status: New Issues for the board: None ## Membership Data: Apache OpenDAL was founded 2024-01-17 (21 days ago) There are currently 22 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - Liuqing Yue was added to the PMC on 2024-01-22 - Yang Shuai was added as committer on 2024-01-23 ## Project Activity: OpenDAL community made two releases after TLP setup: - 0.45.0 was released on 2024-02-05. - 0.44.2 was released on 2024-01-20. The community has just set its 2024 goal: - Improve the stability of its Rust core. - Enhance the usability of its language bindings, including Python, Node.js, and Java. - Implement more possible ways for users to access data: FUSE, WebDAV, FTP. - Explore additional platforms like WASM. ## Community Health: ### Mailing List dev@opendal.apache.org had a 150% increase in traffic in the past quarter (260 emails compared to 104). This mainly discusses OpenDAL's recent graduation discussion and release efforts. We expect to see a drop in new report. ### Contributors Since becoming a TLP, the OpenDAL community has merged 95 PRs, affecting 368 files, thanks to the efforts of 26 contributors. Our contributor count has now reached 180, an increase of 16 from the initial 164 at TLP establishment. We're setting our sights on expanding our project with more components such as fuse, webdav, and ftp support. Additionally, we're excited to participate in GSoC events. We look forward to welcoming even more contributors in our next report. ----------------------------------------- Attachment AT: Report from the Apache OpenJPA Project [Mark Struberg] ## Description: The mission of OpenJPA is the creation and maintenance of software related to JPA: Object Relational Mapping for Java ## Issues: There are no issues requiring board attention. ## Project Activity: We did finish our work towards JakartaEE 9 and released a first version. This still does not pass the TCK, so we do not claim compatibility though. ## Community Health: Activity was fine, we did test our first JakartaEE release. Thus mainly stabilisation and feedback did happen. ## Membership Data: Apache OpenJPA was founded 2007-05-16 (15 years ago) There are currently 35 committers and 18 PMC members in this project. ## Community changes, past quarter: - No new PMC members. Last addition was Maxim Solodovnik on 2019-04-13. - No new committers. Last addition was Matt Pavlovich on 2019-05-22. Recent releases: 4.0.0 was released on 2024-02-14. 3.2.2 was released on 2022-03-16. 3.2.1 was released on 2022-02-06. ----------------------------------------- Attachment AU: Report from the Apache OpenOffice Project [Dave Fisher] ## Description The mission of OpenOffice is the creation and maintenance of software related to an open-source, office-document productivity suite ## Project Status Current project status: Ongoing Issues for the board: None ## Project Composition Apache OpenOffice was founded 2012-10-16 (11 years ago) There are currently 141 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 9:2. ## Membership Data — No new PMC members. The last addition was Czesław Wolański on 2023-01-14. — No new committers. The last addition was Francis Campos on 2022-06-06. ## Project Activity Recent releases — 4.1.15 was released on 2023-12-22 — 4.1.14 was released on 2023-02-27 — 4.1.13 was released on 2022-07-22 Binary downloads (total over all) as of February 1: 369,511,258 Project Website Updates in the OpenOffice-project repository are related to the OpenOffice.org language translations. ### Codebase in OpenOffice repository — Work continues on the 4.2 future release; This included: - A review of release blockers. https://cwiki.apache.org/confluence/display/OOOUSERS/Blocker+issues+4.2.0 - A community build for dev purposes. https://dist.apache.org/repos/dist/dev/openoffice/4.2.0-Dev5/ — dev@openoffice.apache.org had an increase in traffic in the past quarter. — issues@openoffice.apache.org had an increase in traffic in the past quarter. — l10n@openoffice.apache.org had similar traffic in the past quarter ### Documentation — The OpenOffice-docs repository is where the small documentation team makes updates. — The Chapters for the Writer Guide are completed and ready to published, and compilation of the complete book is in process. — The Chapters of the Calc Guide are ready for final review. — Work has started on the update of the Impress Guide from the old 3.3 Version. — doc@openoffice.apache.org had an increase in traffic in the past quarter. — The OpenOffice-org repository has had the usual download count updates. — Translations were added to the OpenOffice.org website for Ukrainian. — MediaWiki (wiki.openoffice.org) is being maintained. ### User support — User Forums (forum.openoffice.org) remain active in English, Spanish, French, Hungarian, Italian, Japanese, Dutch, and Polish. — users@openoffice.apache.org had a increase in traffic in the past quarter. — users-de@openoffice.apache.org had an increase in traffic in the past quarter around the release. ### Translation interface — Currently, we are improving the import / export handling. Pootle is no longer maintained and we need to consider alternatives. ## Community Health Community overall health is improving. We are seeing several developers taking on ODF 1.3, Boost, and NSS updates. Documentation is being updated after a long time and we are getting translation volunteers. ## Infrastructure We continue to get excellent help from the crack ASF Infrastructure team. ### Binary Distributions — SourceForge mirrors are still the main way to get an OpenOffice binary release. — Windows builds are also published in the Microsoft Store (Windows 10/11). Windows users are by far our largest user group. ### Binary Code Signing — Apple Code Signing. We do this, but would like to improve the process so that our users do not encounter Apple's Gatekeeper warning. However, our mission to support very old EOL versions of macOS may limit our ability to do this for our Community Builds. — Windows Code Signing. ### Facebook We have no volunteer taking care of the presence. We still plan to change to a static presence on Facebook. ### X, formerly Twitter The PMC voted to continue our handle and we have new volunteer PMC members who will handle our presence. ## Development ### Unmaintained Python 2 code Python 2 is unmaintained. We have in the development tree the external python3 support. Internal python 3 support is difficult. We are checking alternatives. Planned for the next major release. ### ODF Version 1.3 Our default and best supported file format, the OpenDocument Format, has received a new Standard update. As we plan to support this format, we started work checking the ODF 1.3 specification and what we have to do to support documents in OpenDocument Format version 1.3 (see https://cwiki.apache.org/confluence/display/OOOUSERS/ODF+1.3+Changes), as well as some early development. ## Security ### Closed issue: "Use after free" fixed in expat >= 2.5.0 A vulnerability in the expat library was published as CVE-2022-43680. We updated our embedded version of expat, adapting it to the C standard our current compilers support. The issue was resolved in release 4.1.15, recently published. ### Closed issue: Arbitrary file write in Base A vulnerability in the HSQLDB library was found, that allows to create arbitrary files containing certain SQL commands using HSQLDB's function SCRIPT. This issue was assigned CVE-2023-1183 by Red Hat Product Security. The issue was resolved in release 4.1.15, recently published, by applying a patch that was prepared from upstream. ### Closed issue: Loading internal / external resources without warning. Documents may contain links constructed to access the World Wide Web, for example to download images. Links were followed with no warning nor request to the user. This issue was reported back in 2012 and was assigned CVE-2012-5639. The issue, as reported on our Bugzilla, was resolved in release 4.1.15, recently published. ### Closed issue: Run macro without warning. This is a corner case of CVE-2022-47502: approval for certain "links" calling internal macros were not requested; when activated, such links could therefore result in arbitrary script execution. This issue was assigned CVE-2023-47804 and was resolved in release 4.1.15, recently published. ----------------------------------------- Attachment AV: Report from the Apache OpenWebBeans Project [Mark Struberg] ## Description: Apache OpenWebBeans is an ALv2-licensed implementations of the "Contexts and Dependency Injection for the Java EE platform" specifications which are defined as JSR-299 (CDI-1.0), JSR-346 (CDI-1.1 and CDI-1.2 MR), JSR-365 (CDI-2.0) and Jakarta CDI (CDI-4.0). The OWB community also maintains a small server as Apache Meecrowave subproject. Meecrowave bundles latest releases of the ASF projects Tomcat + OpenWebBeans + CXF + Johnzon + log4j2. ## Issues: There are no issues requiring board attention at this time. ## Activity: We just shipped our 3rd CDI-4.0 release. We've had 86 commits in the last quarter. But it seems the reporter statistics are broken as it still shows 0 commits? ## Community Health Rather fine. We really lack new people, but have still easily enough active ones. ## PMC changes: - Currently 13 PMC members, 20 committers - Last PMC addition was Reinhard Sandtner on 2017-10-09. - Last committer addition was John D. Ament on 2017-10-09. ## Recent Releases - 4.0.2: 2024-02-14 - 4.0.1: 2023-11-16 - 4.0.0: 2023-09-07 ----------------------------------------- Attachment AW: Report from the Apache OpenWhisk Project [Dave Grove] ## Description: The mission of Apache OpenWhisk is the creation and maintenance of software related to a platform for building serverless applications with functions ## Project Status: Current project status: ongoing Issues for the board: low ## Membership Data: Apache OpenWhisk was founded 2019-07-16 (5 years ago) There are currently 54 committers and 22 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Cosmin Stanciu on 2022-02-22. - No new committers. Last addition was Luke Roy on 2023-03-06. ## Project Activity: Project activity was fairly minimal last quarter with no significant new development progress. Recent Releases: openwhisk-client-js-3.21.8 was released on 2023-12-01. ## Community Health: Overall community activity as measured by dev-list traffic, GitHub activity and Slack usage was quite a bit lower than usual. Some of this is probably a function of end-of-year vacations, but it is also symptomatic of declining interest in the project. ----------------------------------------- Attachment AX: Report from the Apache Ozone Project [Sammi Chen] ## Description Apache Ozone is a scalable, redundant, and distributed object and file store, designed to scale to billions of objects/files and run on clusters of thousands of nodes. Ozone supports S3 compatible object APIs as well as a Hadoop Compatible File System implementation. ## Issues None. ## Membership Data - Apache Ozone was founded 2020-10-21. - There are currently 75 comitters and 36 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. - In the last quarter, Guo Hao was added as committer on 2023-10-30 Christos Bisias was added as committer on 2023-11-04 Janus Chow was added to the PMC on 2023-11-22 Maksim Myskov was added as committer on 2023-11-30 Xi Chen was added as committer on 2024-01-23 ## Project Activity - Feature update a. Namespace snapshot phase II, enhancement and bug fixes, is continuing. b. Support MPU(multi part upload) expired key cleanup in OM c. Replication manager improvements, many corner cases are found and fixed. d. Support ranged GET requests for a specified part through S3G. e. Migrate existing unit tests from junit4 to junit5 is continuing. f. Fix flaky tests is continuing. g. A tool that helps to migrate Schema V2 containers to Schema V3 containers is under development. h. Hbase on Ozone development(hsync/hflush API) is resumed and continuing. i. GRPC channel performance improvement by leveraging GRPC library capability. j. Recon UI improvement. k. The Root CA auto rotation feature development is finished. l. Hadoop 3.2.2, 2.7.3 runtime support are dropped after a consensu in the community. Now Hadoop 2.10.2, 3.1.2 and 3.3.6 are supported. m. Lots of other bug fixes and performance improvements for the overall performance and stability. - Release 1.4.0 is finally released on 19/01/2024, after months' preparation, with 1584 JIRAs resolved, and following major features and improvements, a. Snapshots b. Erasure Coding V2: offline reconstruction, container balancer support c. Recon: heat maps, more diagnose info d. Certificate auto-rotation e. SCM decommissioning f. Improved OM decommissioning g. Symmetric key-based block/container token implementation h. Quota on FSO bucket ## Releases Data - 1.0.0 was released on 2020-09-02. - 1.1.0 was released on 2021-04-20. - 1.2.0 was released on 2021-11-17. - 1.2.1 was released on 2021-12-22. - 1.3.0 was released on 2022-12-18. - 1.4.0 was released on 2024-01-19. ## Community Health Last board report was sent on 9th Nov. Due to the Christmas season impact, since last report, - 151 PRs opened on GitHub, past quarter (-64% decrease) - 150 PRs closed on GitHub, past quarter (-63% decrease) - 182 commits in the past quarter (-58% decrease) - 43 code contributors in the past quarter (-25% change) - dev@ozone.apache.org had 99 emails in the past quarter (+80% increase) ----------------------------------------- Attachment AY: Report from the Apache Perl Project [Steve Hay] ## Description: The mission of Perl is the creation and maintenance of software related to Dynamic websites using Perl ## Project Status: Current project status: Ongoing, with low activity Issues for the board: none ## Membership Data: Apache Perl was founded 2000-03-10 (24 years ago) There are currently 21 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Steve Hay on 2012-03-01. - No new committers were added. ## Project Activity: The last release was mod_perl-2.0.13 on 2023-10-21. As predicted, activity has quietened down following the new release. Further releases will be made in due course, either when the trickle of commits amounts to a worthwhile new release, or if/when any critical changes are made. ## Community Health: Mailing list traffic is low compared to the previous quarter because of the release that was made in that quarter, but is otherwise at a normal level. There are some test issues still to be looked at: Some from the release, plus a new issue raised since then. ----------------------------------------- Attachment AZ: Report from the Apache Phoenix Project [Rajeshbabu Chintaguntla] ## Description: The mission of Phoenix is the creation and maintenance of software related to High performance relational database layer over Apache HBase for low latency applications ## Project Status: Current project status: Super Healthy Issues for the board: No issues to report to the board at this time. ## Membership Data: Apache Phoenix was founded 2014-05-21 (10 years ago) There are currently 58 committers and 39 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Jacob Isaac on 2023-11-07. - Lokesh Khurana was added as committer on 2024-01-16 ## Project Activity: Apache Phoenix had its last main release 5.1.3 on 2022-12-30. Phoenix Thirdparty 2.1.0 released on 20th December 2023. Phoenix Omid 1.1.1 released on 8th February 2024. Planning to release 5.1.4 and 5.2.0 sooner in the next quarter. Active development is going on to release phoenix connectors 6.0.0. In the past quarter - Added support of partial indexes - Fixed critical data integrity issues - Separated phoenix-core into client, server modules. - Added support for JDK 17 for Phoenix and Omid. - Added TLS support in Omid. - Fixed good number of security issues. Active development is going in - Support native JSON data type. - Redesign of Metadata APIs - Change Data Capture(CDC) feature. - Support for HBase 2.6 and 3.0 ## Community Health: The Phoenix community continues to remain active. There is an Increase in mail traffic for dev and issues, decrease in the JIRA and commit activities compared to last quarter because of focused development on few features. Mail Traffic: - Dev-related emails increased by 20%, from 633 to 763. - Issue-related emails increased by 23%, from 1473 to 1823. - User-related emails decreased by 48%, from 22 to 11. JIRA Activity: - The number of issues opened decreased by 76%, from 30 to 7. - The number of issues closed decreased by 70%, from 28 to 8. Pull Requests: - The number of PRs opened decreased by 75%, from 26 to 6. - The number of PRs closed decreased by 70%, from 30 to 9. New Code Contributors: - There were 14 new code contributors added. ----------------------------------------- Attachment BA: Report from the Apache Pinot Project [Kishore G] ----------------------------------------- Attachment BB: Report from the Apache Pivot Project [Roger Lee Whitcomb] ## Description: The mission of Pivot is the creation and maintenance of software related to Rich Internet applications in Java ## Project Status: Current project status: Vote was taken and passed to retire Pivot to the Attic. PMC is currently preparing a terminal release to end the project. Issues for the board: No issues for the board at this time. Apologies for missing this report the last few months due to personal issues. ## Membership Data: Apache Pivot was founded 2009-12-15 (14 years ago) There are currently 10 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - No new PMC members. Last addition was Gavin McDonald on 2022-04-13. - No new committers. Last addition was Gavin McDonald on 2022-04-14. ## Project Activity: Build area setup for the terminal release. All pending code changes have been committed. But we're having difficulty preparing the lists of bug fixes and other changes since it is a huge list after the 778 revisions, 96 resolved issues, and 314 other revisions over the last 10 years since the last significant release. But we'll get there. ## Community Health: Dead community, hence the Attic. Fortunately we still have 3 PMC members to finish this last release. ----------------------------------------- Attachment BC: Report from the Apache POI Project [Dominik Stadler] Report from the Apache POI committee [Dominik Stadler] ## Description: - Apache POI is a Java library for reading and writing Microsoft Office file formats. The Apache POI PMC also handles bugfixes for the XMLBeans project: XMLBeans is a tool that allows you to map XML files to generated Java classes via XML Schema definitions. ## Issues: - There are no issues requiring board attention at this time ## Membership Data: Apache POI was founded 2007-05-16 (17 years ago) There are currently 41 committers and 34 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Marius Volkhart on 2020-12-27. - No new committers. Last addition was Marius Volkhart on 2020-12-19. ## Project Activity: - Release 5.2.5 was published in November, providing some regression fixes for 5.2.4 and updated dependencies as well as a number of bugfixes and smaller feature enhancements - Release 5.2.0 of XmlBeans was published in November to accompany the release of Apache POI 5.2.5. It provides a few smaller bugfixes and updates of third party dependencies. - Automated fuzzing via OSS-Fuzz continues, this provides cases where potential bugs and security issues can be detected, see https://github.com/google/oss-fuzz and https://bz.apache.org/bugzilla/show_bug.cgi?id=66425 for more details. ## Project Release Activity: - Apache POI 5.2.5 was released on 2023-11-25. - Apache XMLBeans-5.2.0 was released on 2023-11-16. ## Community Health: - There are some bug-reports and user-questions which indicates that Apache POI is in active use. Questions via email or on Stackoverflow usually get answers quickly. - Bug-numbers increased over the last few quarters. Some newly reported issues were fixed, but we get more bugs/questions reported than are addressed by the small number of active committers, so some bugs do not get any attention any more. - We have a very small number of active committers. There are very few potential candidates ### XMLBeans - It seems there are is a small but active set of users of it besides Apache POI itself. - Bug influx for XMLBeans is very low in general because it is a stable project in maintenance-only mode. ## Bug Statistics: ### Apache POI - 587 bugs are open overall (+13) - Having 140 enhancements (+1) - Thus having 447 actual bugs (+12) - 101 of these are waiting for feedback (-2) - Thus having 346 actual workable bugs +14) - 4 of the workable bugs have patches available (+1) - Distribution of workable bugs across components: {XSSF=99, HSSF=81, SS Common=41, HWPF=35, XSLF=21, XWPF=21, POI Overall=16, SXSSF=9, OPC=6, HSMF=5, HPSF=4, POIFS=4, HSLF=2, HPBF=1, SL Common=1} - 609 bugs are open overall (+22) - Having 140 enhancements (+-0) - Thus having 469 actual bugs (+22) - 111 of these are waiting for feedback (+10) - Thus having 358 actual workable bugs (+12) - 4 of the workable bugs have patches available (+-0) - Distribution of workable bugs across components: {XSSF=103, HSSF=81, SS Common=42, HWPF=35, XWPF=23, XSLF=22, POI Overall=16, SXSSF=11, OPC=6, POIFS=6, HSMF=5, HPSF=4, HSLF=2, HPBF=1, SL Common=1} ### Apache XMLBeans - 167 open issues (+3) - 116 Bug (+-0) - 31 Improvement (+2) - 16 New Feature (+-0) - 2 Task (+1) - 2 Wish (+-0) ----------------------------------------- Attachment BD: Report from the Apache Qpid Project [Robbie Gemmell] Apache Qpid is a project focused on creating software based on the Advanced Message Queuing Protocol (AMQP), currently providing a protocol engine library, message brokers written in C++ and Java, a message router, and client libraries for C, C++, .Net, Go, Java/JMS, Python, and Ruby. # Releases: - Qpid JMS 1.11.0 was released on 30th October 2023. - Qpid JMS 2.5.0 was released on 30th October 2023. - Qpid ProtonJ2 1.0.0-M18 was released on 7th November 2023. - Qpid ProtonJ2 1.0.0-M19 was released on 12th January 2024. - Qpid Broker-J 9.2.0 was released on 12th February 2024. # Community: - The main user and developer mailing lists continue to be active and JIRAs are being raised and addressed in line with prior activity levels. - Daniil Kirilyuk was added as a PMC member on 22nd January 2024. - There were no new committer additions in this quarter. The most recent new committer is Daniil Kirilyuk, added 17th February 2023. # Development: - ProtonJ2 had its 1.0.0-M18 and M19 releases, with various fixups, improvements, documentation updates, and dependency updates. Work continues on more as arising. - Broker-J had its 9.2.0 release, containing various bug fixes, general improvements, dependency updates, and addition of docker image. Work will turn to more of the same for future releases. - Qpid JMS had its 1.11.0 and 2.5.0 releases, updating its test suite to use JUnit 5, and updating various dependencies. More of the same continues. - Work continues on cleaning up older areas of Proton C and its language bindings. A 0.40.0 release will be done once some new APIs are introduced, to aid transition before later removal of deprecated APIs/features in a following new major version release. # Issues: There are no Board-level issues at this time. ----------------------------------------- Attachment BE: Report from the Apache Ranger Project [Selvamohan Neethiraj] ----------------------------------------- Attachment BF: Report from the Apache RocketMQ Project [Xiaorui Wang] ----------------------------------------- Attachment BG: Report from the Apache Roller Project [David M. Johnson] ## Description: Apache Roller is a full-featured, Java-based blog server that works well on Tomcat, Postgres and MySQL, and is known to run on other Java servers and relational databases. Latest release is 6.1.2 on 2023-08-03. ## Project Status: Current project status: [The project is mostly dormant with most activity around updating dependencies, making sure the code runs on the latest Java releases and security fixes. Issues for the board: None ## Membership Data: Apache Roller was founded 2007-02-20 (17 years ago) There are currently 12 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Michael Bien on 2021-05-24. - No new committers. Last addition was Yash Maheshwari on 2021-09-01. ## Project Activity: Roller 6.1.2 was released on August 3, 2023. The project is preparing for a Roller 6.1.3 release with dependency updates and some input valitation enhancements. ## Community Health: The Roller community is healthy enough to maintain Roller and make bug fix and security releases. We're always on the lookout for new contributors. ----------------------------------------- Attachment BH: Report from the Apache Samza Project [Jagadish Venkatraman] ## Description: The mission of Samza is the creation and maintenance of software related to distributed stream processing framework ## Project Status: Current project status: Healthy Issues for the board: No issues require the board's attention ## Membership Data: Apache Samza was founded 2015-01-22 (8 years ago) There are currently 29 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Bharath Kumarasubramanian on 2020-02-13. - No new committers. Last addition was Ajo Thomas on 2022-12-14. ## Project Activity: - Stream Processing Meetup@LinkedIn on Kafka, Samza held on Thu 1/18/2024 - multiple talks on Apache Samza, Apache Kafka and collab with Apache Beam. ## Community Health: dev@samza.apache.org had a 34% decrease in traffic in the past quarter 4 issues opened in JIRA, past quarter (-20% change) 1 issue closed in JIRA, past quarter (100% increase) 7 commits in the past quarter (-12% change) 2 code contributors in the past quarter (-50% change) 4 PRs opened on GitHub, past quarter (-60% change) 6 PRs closed on GitHub, past quarter (-33% change) ----------------------------------------- Attachment BI: Report from the Apache Santuario Project [Colm O hEigeartaigh] ## Description: The mission of Santuario is the creation and maintenance of software related to XML Security in Java and C++ ## Project Status: Current project status: The Java project is actively maintained and PRs are getting merged and releases made. The C++ project is in a dormant state. There are no issues requiring board attention. ## Membership Data: Apache Santuario was founded 2006-06-27 (18 years ago) There are currently 17 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 9:4. Community changes, past quarter: - No new PMC members. Last addition was Daniel Kulp on 2018-10-01. - No new committers. Last addition was Daniel Kulp on 2018-10-01. ## Project Activity: There was one release over the last quarter: - Apache Santuario - XML Security for Java 4.0.1 was released on 2023-11-28. This was a bugfix release to fix a single bug with a security provider. Support was added for ECDH-ES support by a contributor and we expect to release that over the next month or so. ## Community Health: Apache Santuario is a mature and stable project that has reached a point where not too many fixes are required, as it is a set of implementations of some specifications that are quite old now. It is actively managed by the PMC ----------------------------------------- Attachment BJ: Report from the Apache Sedona Project [Jia Yu] ## Description: The mission of Apache Sedona is the creation and maintenance of software related to a big geospatial data processing engine. It provides an easy to use APIs for spatial data scientists to manage, wrangle, and process geospatial data ## Project Status: Current project status: Ongoing: with high activities and several active contributors Issues for the board: all good ## Membership Data: Apache Sedona was founded 2022-12-20 (a year ago) There are currently 19 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Kristin Cowalcijk on 2023-04-04. - Furqaan Khan was added as committer on 2024-02-09 ## Project Activity: The project is very active. We made a new release in January 2024 with the help of several contributors. We currently keep the 3-month release cadence. The overall downloads of this project have exceeded 24 millions. ## Community Health: The community is healthy. Several people actively contribute to the project and new contributors also joined. We also added a new committer to this project. Recently we have been focusing on the improvement of raster data management capability. ----------------------------------------- Attachment BK: Report from the Apache Serf Project [Daniel Sahlberg] ## Description: The mission of the Apache Serf project is creating software related to HTTP and associated protocols. ## Project Status: Current project status: Dormant Issues for the board: None ## Membership Data: Apache Serf was founded 2015-08-18 (8 years ago) There are currently 15 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 8:7. Community changes, past quarter: - No new PMC members. Last addition was Daniel Sahlberg and Nathan Hartman on 2023-10-06. - No new committers. Last addition was Daniel Sahlberg and Nathan Hartman on 2023-10-09. ## Project Activity: No activity since last report. ## Community Health: Some minor activity in October cleaning up open Jira issues but otherwise very quiet. ----------------------------------------- Attachment BL: Report from the Apache ServiceComb Project [Bao Liu] ----------------------------------------- Attachment BM: Report from the Apache ShardingSphere Project [Liang Zhang] ## Description: The mission of Apache ShardingSphere is the creation and maintenance of software related to a database clustering system providing data sharding, distributed transactions, and distributed database management ## Project Status: Current project status: Good Issues for the board: None ## Membership Data: Apache ShardingSphere was founded 2020-04-15 (4 years ago) There are currently 60 committers and 20 PMC members in this project. The Committer-to-PMC ratio is 3:1. Community changes, past quarter: - No new PMC members. Last addition was Guangyuan Wang on 2023-08-23. - Zihao Niu was added as committer on 2023-11-21 ## Project Activity: Preparing for the release of version 5.5.0, with milestone adjustments to the encrypt API and enhanced pluggable architecture capabilities. There has also been a significant improvement in theoperability of DistSQL. Books on ShardingSphere are currently in the publishing proofreading process, and it is hoped that they can be released as soon as possible in the next quarter. ## Community Health: With the stability of the project's functionality and community, there are fewer and fewer modifications and disruptive changes to product features. More and more users are using ShardingSphere stably, and there is a decreasing trend in PRs and issues on GitHub. The activity of the project tends to be inversely proportional to the increase in maturity. With the connection of more types of databases in the future, it is hoped that the activity of the community can be increased again. ----------------------------------------- Attachment BN: Report from the Apache ShenYu Project [Yu Xiao] ## Description: ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance. ## Project Status: Current project status: Good Healthy. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache ShenYu was founded 2022-07-20 (2 years ago) There are currently 53 committers and 24 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Fengen He on 2023-03-23. - No new committers. Last addition was Chao Gong on 2023-10-20. ## Project Activity: Apache ShenYu 2.6.1 released in 19 Jan 2024. Software development activity: - We added dubbo annotation analysis for shenyu ingress controller. - We added shenyu-sdk-client by openFeign. - We added motan plugin and Spring Cloud to shenyu ingress-controller - We added shenyu context-path plugin ingress controller . - We added shenyu grpc plugin ingress controller. - We added nacos, etcd, eureka as discovery service . - We added basic-auth plugin. - We added logging-rabbitmq plugin. - We added binding selector by shenyu-discovery. - We added alert notice module . - We added discovery register center for client. - We fixed plugin page sorting bug. - We fixed password rules, add special characters '#' and '.'. - We fixed springcloud plugin can't get scheme. - We fixed the wrong request type in HttpUtils. - We fixed webSocket plugin to support rewrite plugin. - We fixed response plugin memory leak. - We fixed upload plugin jar bug in shenyu admin. - We fixed plugin can not load resource path file. - We refactor plugin classloader . - We refactor compiled pattern in WebClientMessageWriter. - We refactor startup banner. - We refactor log plugin selector handler. - We refactor netty allocator to unpooled. - We refactor motan pojo as rpc method parameter. - We refactor github action version. Meetups and Conferences: - Community meetings(6) to discuss development tasks and how to build an open governance community. ## Community Health: Overall community health is good. Since the last report, add new 9 contributors added (currently:378). add new 16 subscribers to dev@shenyu.apache.org mailing (currently:496) ----------------------------------------- Attachment BO: Report from the Apache SIS Project [Martin Desruisseaux] ## Description: The mission of Apache SIS is the creation and maintenance of software providing data structures for developing geospatial applications compliant with the model of OGC/ISO international standards. ## Project Status: Current project status: ongoing with high activity. Issues for the board: none. ## Membership Data: Apache SIS was founded 2012-09-19 (11 years ago) There are currently 22 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Alexís Manin on 2021-05-27. - No new committers. Last addition was Bruno P. Kinoshita on 2021-06-23. ## Project Activity: We are close to be able to submit an Apache SIS 1.5 release candidate, 6 months after the 1.4 release. New features include a GeoTIFF writer (completing the reader provided in the 1.4 release), better support of Cloud Optimized GeoTIFF, better support of Geographic Markup Language (GML) for coordinate operations, etc. Some of those features have been developed for the Open Geospatial Consortium (OGC) Testbed-19 — Geospatial in space [1] where Apache SIS has been used as a prototype for GeoTIFF and coordinate operations in space. The "incubator" group of modules got the premise of a renderer, a Coverage JSON reader and a refactoring of the Shapefile reader. Contributions to the Maven project are underway for trying to improve JPMS support in Maven 4. Apache SIS goes far in the use of the Java Platform Module System (JPMS, a.k.a. Jigsaw). SIS source code is structured as Module Source Hierarchy [2], something that not many projects do. The use of JPMS to that extent is currently difficult with both Maven and Gradle, which is a source of irritation for developers. We submitted a first pull request to Maven for trying to improve the situation, and review goes well [3]. More will follow if accepted. Apache SIS will participate to the OGC / OSGeo / ASF joint code sprint. We proposed to work with Apache Sedona for helping them to replace their LGPL dependency by Apache SIS. We do not know yet which activities will finally happen. [1] https://portal.ogc.org/files/?artifact_id=104098#ThreeD [2] https://docs.oracle.com/en/java/javase/21/docs/specs/man/javac.html [3] https://github.com/apache/maven/pull/1401 [4] https://developer.ogc.org/sprints/23/ ## Community Health: Contributions from another developer increased thanks to the "incubator" group of modules. One thing that may be an issue is how long it will take before codes in incubator get sufficient reviews for moving to the "endorsed" group of modules. ----------------------------------------- Attachment BP: Report from the Apache Solr Project [David Smiley] ## Description: The mission of Apache Solr is the creation and maintenance of software related to highly scalable distributed document search and analytics ## Project Status: Current project status: Ongoing with moderate activity. Issues for the board: none. ## Membership Data: Apache Solr was founded 2021-02-16 (3 years ago) after 15 years as a Lucene sub project. There are currently 95 committers and 61 PMC members in this project. Many are inherited from the Lucene project split. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Michael Gibney on 2022-12-20. - No new committers. Last addition was Alex Deparvu on 2023-08-02. ## Project Activity: Recent releases: * 9.5.0 was released on 2024-02-12 * 8.11.3 was released on 2024-02-08 * 9.4.1 was released on 2024-01-18 * solr-operator-v0.8.0 was released on 2023-10-20 Security: A number of CVEs were announced with recommendations to upgrade to 8.11.3 or 9.4.1. Areas of development & interest: * SIP-20: Project "Zero": indexes in an object-store like S3. Initial feedback * The Solr Operator can now auto-scale a cluster up/down with HPA * Debating switching from JIRA to GitHub Issues * SIP-21: Standardizing sys-prop / env access and naming * CLI: Migration of all CLI needs into one bin/solr * GitHub: auto-labeling PRs for "abandoned" and also Solr module * API: Continued progress on our revamped "V2" API with JAX-RS & OpenAPI * Resolving security matters * Multi-threaded search; getting very close now * Our OpenAPI spec is now a release artifact * ... there are always more ... ## Community Health: * Virtual meetups: We continue to have monthly online meetups open to the public, which have been a key element of Solr's health. * Newsletter: This is a key initiative but it has stalled at the moment. We’re aiming for a larger presence at C/C NA this year with a hackathon. Community health metrics are all pointing down. Some KPIs: * Issues list (JIRA + PRs): 36% down. * Unique contributors: 44: -8% fewer contributors to the main repo ----------------------------------------- Attachment BQ: Report from the Apache Spark Project [Matei Alexandru Zaharia] Description: Apache Spark is a fast and general purpose engine for large-scale data processing. It offers high-level APIs in Java, Scala, Python, R and SQL as well as a rich set of libraries including stream processing, machine learning, and graph analytics. Issues for the board: - None Project status: - We made two patch releases: Spark 3.3.4 (EOL release) on December 16, 2023, and Spark 3.4.2 on November 30, 2023. - We have begun voting for a Spark 3.5.1 maintenance release. - The vote on "SPIP: Structured Streaming - Arbitrary State API v2" has passed. - We transitioned to an ASF-hosted analytics service, Matomo. For details, visit https://analytics.apache.org/index.php?module=CoreHome&action=index&date=yesterday&period=day&idSite=40. - Arrow Datafusion Comet, a plugin designed to accelerate Spark query execution by leveraging DataFusion and Arrow, is in the process of being open-sourced under the Apache Arrow project. For more information, visit https://github.com/apache/arrow-datafusion-comet. Trademarks: - No changes since the last report. Latest releases: - Spark 3.3.4 was released on December 16, 2023 - Spark 3.4.2 was released on November 30, 2023 - Spark 3.5.0 was released on September 13, 2023 Committers and PMC: - The latest committer was added on Oct 2nd, 2023 (Jiaan Geng). - The latest PMC members were added on Oct 2nd, 2023 (Yuanjian Li and Yikun Jiang). ----------------------------------------- Attachment BR: Report from the Apache StreamPipes Project [Philipp Zehnder] ## Description: The mission of Apache StreamPipes is the creation and maintenance of software related to a self-service Industrial IoT toolbox which enables non-technical users to connect, analyze and explore IoT data streams ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache StreamPipes was founded 2022-11-16 (a year ago) There are currently 30 committers and 15 PMC members in this project. The Committer-to-PMC ratio is 2:1. Community changes, past quarter: - No new PMC members. Last addition was Zhenyu Luo on 2023-10-17. - MuYang Ye was added as committer on 2023-11-29 ## Project Activity: - New Release: 2023-11-28 (v0.93.0) - Refactoring Data Explorer (Migrated visualizations to Apache Echarts) - Working towards improved permission management - Working on a new go client ## Community Health: - We have a lot more people opening discussions on GitHub - Several new contributors have opened PRs - We had a talk at the AI for Industry Event of the Hanover Fair, highlighting the need for open source in manufacturing ----------------------------------------- Attachment BS: Report from the Apache Submarine Project [Kevin Su] ----------------------------------------- Attachment BT: Report from the Apache Subversion Project [Nathan Hartman] ## Description: The Apache Subversion® version control system exists to be universally recognized and adopted as an open-source, centralized version control solution characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects, from individuals to large-scale enterprise operations. ## Project Status: Current project status: Ongoing, mature. Issues for the board: None at this time. ## Membership Data: Apache Subversion was founded 2010-02-16 (14 years ago). Prior to joining ASF, the project began in February of 2000 (24 years ago). There are currently 87 committers, of which 48 are PMC members, in the project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - One new PMC member: Vincent Lefevre joined the PMC on 2024-01-23. - One new committer: Same. ## Project Activity: Apache Subversion 1.14.3 was released on 29 December 2023. This is the latest bugfix release on the 1.14.x Long Term Support (LTS) release line. The release announcement is archived here: https://lists.apache.org/thread/gcbmxzyssxk4693c7lcwv8yp1lfhsg7g In addition, the Subversion PMC is happy to welcome Vincent Lefevre as its newest member. Discussions regarding the next release line, 1.15, have been taking place gradually. This new release line will bring two major new features: Pristines On Demand and Streamy Checkouts. Currently there is one unresolved question regarding whether (and, if so, how) to change the hash codes used to check for file modification in local working copies. ## Community Health: The community is healthy for a mature and stable project: This quarter, a new patch release was made and a new PMC member was added. There are steady contributions to the codebase, website, documentation, backports, and other areas. Issues are being triaged and addressed. Development questions are being debated. User questions usually receive helpful responses. Our community is fully volunteer-driven and we would like to thank everyone for their support. ----------------------------------------- Attachment BU: Report from the Apache Superset Project [Maxime Beauchemin] ----------------------------------------- Attachment BV: Report from the Apache Syncope Project [Francesco Chicchiriccò] ## Description: The mission of Syncope is the creation and maintenance of software related to Managing digital identities in enterprise environments ## Project Status: Current project status: healthy. Issues for the board: none. ## Membership Data: Apache Syncope was founded 2012-11-21 (11 years ago) There are currently 25 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Lorenzo Di Cola on 2023-05-22. - No new committers. Last addition was Samuel Garofalo on 2022-07-29. ## Project Activity: Besides maintenance of branch 3_0_X (which led to release 3.0.6), the work has started its long way towards next stable release 4.0.0. GitHub's dependabot is helping keeping active branches 3_0_X and master updated with external dependencies. Recent releases: * 3.0.6 was released on 2023-12-22. ## Community Health: Discussions about new features and improvements keep appearing and being followed up in dev@. Newcomers approach user@ and are getting supported by the community. GitHub's Pull Requests are confirmed to be the main contribution path, from both first-time contributors and committers. ----------------------------------------- Attachment BW: Report from the Apache SystemDS Project [Matthias Boehm] ## Description: Apache SystemDS is a machine learning (ML) system for the end-to-end data science lifecycle from data preparation and cleaning, over efficient ML model training, to scoring and debugging. ML algorithms or pipelines are specified in a high-level language with R-like syntax, or related Python and Java APIs, and the system automatically generates hybrid runtime plans of local, in-memory operations and distributed operations on Apache Spark. ## Issues for the Board: - Sorry for missing the "comments w/o responses" (2023-05/2023-02). Thanks for the suggestions on improving the dev-list, we will have a look and reach out if needed. Regarding new committer candidates, we do have a continuous stream of new contributors (mostly students), but need to find better ways to bring them on-board as committers (beyond their initial one-off projects). We are very optimistic though to get multiple new committers in 2024. ## Project Status: - Current work focuses on extending the compression framework, multi-backend lineage-based reuse, various data-centric ML primitives (DSL-based builtins) for increased functionality, and an improved test framework for functionality and performance. - We are in the process of releasing SystemDS 3.2 (cut first RC). ## Membership Data: - Apache SystemDS was founded 2017-05-16 (incubator process entered 2015-11-02) - Last PMC members added 2022-05-03 (Shafaq Siddiqi) - Last committer added 2022-12-14 (Badrul Chowdhury) - There are currently 35 committers and 26 PMC members in the project. ## Activity and Health: - Code activity is healthy with 75 commits (-32%) in the last 3 months. - Community growth is healthy with 13 active contributors (+30%) in the last 3 months - Communication is healthy, mailing list activity is improving, additional work on better documentation. ## Releases: - Apache SystemDS 3.1.0 was released on 2023-03-13. - Apache SystemDS 3.0.0 was released on 2022-06-20. - Apache SystemDS 2.2.2 was released on 2022-06-25. - Apache SystemDS 2.2.1 was released on 2021-12-02. - Apache SystemDS 2.2.0 was released on 2021-10-30. - Apache SystemDS 2.1.0 was released on 2021-06-28. - Apache SystemDS 2.0.0 was released on 2020-10-14. - Apache SystemML 1.2.0 was released on 2018-08-24. ----------------------------------------- Attachment BX: Report from the Apache TomEE Project [David Blevins] ----------------------------------------- Attachment BY: Report from the Apache Traffic Control Project [Eric Friedrich] ## Description: The mission of Apache Traffic Control is the creation and maintenance of software related to building, monitoring, configuring, and provisioning a large scale content delivery network (CDN) ## Project Status: Current project status: At risk - see community health Issues for the board: No issues ## Membership Data: Apache Traffic Control was founded 2018-05-15 (6 years ago) There are currently 31 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Steve Hamrick on 2023-02-07. - No new committers. Last addition was Abdulrahman Elawady on 2023-09-21. ## Project Activity: Traffic Control 8 was release on Jan 30, 2024. This included the following features: - Client Certificate Authentication for the control API - Origin connection count limitation - New Role based permissions to enable key rotation specific users - OAuth for user login to web portal There is no currently planned next release. As a community we'll be evaluating what the next steps are given the exit of many of the active contributors. ## Community Health: The Traffic Control community is currently in a state of flux. A large number of active contributors with a shared employer have recently stopped participation in the project. Since that time, the number of commits has dropped drastically (down 90%). However, we passed a Roll Call vote and were able to successfully vote on a release. This shows that we still have enough engagement from PMC members to stay as an active TLP project. We will now be discussing ways to refocus the project to better address the needs and goals of the active participants. ----------------------------------------- Attachment BZ: Report from the Apache TsFile Project [Jialin Qiao] ----------------------------------------- Attachment CA: Report from the Apache Turbine Project [Georg Kallidis] ## Description: The mission of Turbine is the creation and maintenance of software related to A Java Servlet Web Application Framework and associated component library ## Project Status: Current project status: Ongoing with low activity and at least 3 PMC members ready to engage. Some components of the project are dormant. Issues for the board: No issues for the board this quarter. ## Membership Data: Apache Turbine was founded 2007-05-16 (17 years ago) There are currently 12 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 4:3. Community changes, past quarter: - No new PMC members. Last addition was Jeffery Painter on 2017-11-12. - No new committers. Last addition was Youngho on 2021-12-06. ## Project Activity: Released components this quarter: - Fulcrum Security 3.0.0: 2023-11-03 Turbine Core 6.0.0 release candidate is currently in approved voting state and expected to be released soon. ## Community Health: As last quarter, code contributions continue on a low level. Turbine core release is almost completed, which includes some effort in more up-to-date build processes (reproducible build). Having finished the current release, and as already discussed in 2022, Java support will now move on to at least Java version 17 or above for upcoming releases. ----------------------------------------- Attachment CB: Report from the Apache Velocity Project [Nathan Bubna] ## Description: The mission of Velocity is the creation and maintenance of software related to A Java Templating Engine ## Project Status: Current project status: Active, fresh releases imminent Issues for the board: PMC Chair (me) was negligent due to temporary family issues. ## Membership Data: Apache Velocity was founded 2006-10-24 (17 years ago) There are currently 15 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 5:3. Community changes, past quarter: - No new PMC members. Last addition was Michael Osipov on 2017-07-27. - No new committers. Last addition was Thomas Mortagne on 2020-03-09. ## Project Activity: Feb 6 - released new Velocity Master POM New releases for both Velocity Tools and Velocity Engine are under active work. ## Community Health: Stable, with few active committers. Big short-term jump in activity as Michael Osipov is preparing new releases, mostly tech debt focused, as the project is in maintenance mode. ----------------------------------------- Attachment CC: Report from the Apache Whimsy Project [Shane Curcuru] ## Description: The mission of Apache Whimsy is the creation and maintenance of software related to tools that help automate various administrative tasks or information lookup activities ## Project Status: Current project status: Mostly dormant, except urgent bugfixes Issues for the board: None ## Membership Data: Apache Whimsy was founded 2015-05-19 (9 years ago) There are currently 12 committers and 10 PMC members in this project. The Committer-to-PMC ratio is 6:5. Community changes, past quarter: - No new PMC members. Last addition was Matt Sicker on 2020-04-11. - No new committers. Last addition was Matt Sicker on 2020-04-09. ## Project Activity: Important bugs or issues are addressed in core tools. A number of annual meeting-related fixes have been made. Separately, a potential security issue was reported to Whimsy; many thanks to the Security Team and Infra for their clear and prompt assistance throughout the process. The reported issue was not a code vulnerability; rather was a misconfiguration of sample development code we used. Out of an abundance of caution, the server was stopped and a new server rebuilt from scratch; we also removed the unneeded sample code. The security issue was reported to a related upstream component, which separately issued a fix for anyone using the same sample code in production. ## Community Health: Sebb is owed many thanks for almost single handedly taking care of most of the important issues that have cropped up over the quarter. While we don't have much commit activity from others, we do have sufficient PMC oversight. ----------------------------------------- Attachment CD: Report from the Apache Xalan Project [Gary D. Gregory] ## Description: Apache Xalan exists to promote the use of XSLT. We view XSLT (Extensible Stylesheet Language Transformations) as a compelling paradigm that transforms XML documents, thereby facilitating the exchange, transformation, and presentation of knowledge. The ability to transform XML documents into usable information has great potential to improve the functionality and use of information systems. We intend to build freely available XSLT processing components in order to engender such improvements. ## Project Status: Current project status: Ongoing, with high activity. Issues for the board: none. ## Membership Data: Apache Xalan was founded 2004-09-30 (19 years ago) There are currently 57 committers and 5 PMC members in this project. The Committer-to-PMC ratio is roughly 8:1. Community changes, past quarter: - No new PMC members. Last addition was Joseph Kessselman on 2023-08-07. - No new committers. Last addition was Joseph Kessselman on 2023-06-29. ## Project Activity: We are putting effort toward a new Xalan-J 2.x release and are working toward supporting XSLT 3. Xalan-C activity is low. ## Community Health: We welcomed Joseph Kessselman as a new PMC member in August 2023. While the numbers show a decline in raw activity, we consider Xalan-J development active using GitHub, Jira, and the mailing list. ----------------------------------------- Attachment CE: Report from the Apache Xerces Project [Michael Glavassevich] ----------------------------------------- Attachment CF: Report from the Apache XML Graphics Project [Clay Leeds] Apache XML Graphics Project Board Report ================================== The Apache XML Graphics Project is responsible for software intended for the creation & maintenance of the conversion of XML formats to graphical output & related software components. Issues for the Board ===================== We have migrated the Apache XML Graphics repositories for XML Graphics Commons, FOP, FOP PDF Images and Batik to GitHub: https://github.com/apache/xmlgraphics-fop.git Activity ======== * All XMLGraphics project repositories have been migrated from Subversion to GitHub/GitBox: https://github.com/apache/xmlgraphics-fop.git * A proposal to migrate XMLGraphics projects from Jira to GitHub issues was passed. Preliminary work to effect this migration has started. The migration is ongoing. Latest Versions of Apache XML Graphics Project Projects: * Apache Batik 1.17 2023-08-22 * Apache FOP 2.9 released 2023-08-22 * Apache FOP PDF Images 2.9 released 2023-08-22 * Apache XML Graphics Commons 2.9 released 2023-08-22 Project Health Report ======================= The level of community and developer activity remains at a consistent, moderate, level with respect to the previous reporting period. Recent PMC Changes ================== Currently 11 PMC members. * Simon Steiner was added to the PMC on Tue Jan 19 2016 * Clay Leeds was approved for XML Graphics PMC Chair position on March 26, 2018. Committers ========== Currently 21 committers. * No new committers added in the last 3 months * Last committer added was Matthias Reischenbacher at Wed May 13 2015 Most Recent Releases ==================== * Apache Batik 1.17 2023-08-22 * Apache FOP 2.9 released 2023-08-22 * Apache FOP PDF Images 2.9 released 2023-08-22 * Apache XML Graphics Commons 2.9 released 2023-08-22 = SUB PROJECTS = ================ APACHE BATIK ===== Batik is a Java-based toolkit for applications or applets that want to use images in the Scalable Vector Graphics (SVG) format for various purposes, such as display, generation or manipulation. Latest Release ------------ Apache XML Graphics Apache Batik 1.17 was released on August 22, 2023 * Bug fixes APACHE FOP === Apache FOP (Formatting Objects Processor) is a print formatter driven by XSL formatting objects (XSL-FO) and an output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PS, PCL, AFP, XML (area tree representation), Print, AWT and PNG, and to a lesser extent, RTF and TXT. The primary output target is PDF. Latest Release -------------- Apache XML Graphics Apache FOP 2.9 was released on August 22, 2023 Apache XML Graphics Apache FOP PDF Images 2.9 was released on August 22, 2023 * Bug fixes XML GRAPHICS COMMONS ==================== Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D implementations that let you generate PDF & PostScript files, and much more. Latest Release ------------ Apache XML Graphics Commons 2.9 was released on August 22, 2023 * Bug fixes ----------------------------------------- Attachment CG: Report from the Apache YuniKorn Project [Wilfred Spiegelenburg] ## Description: The mission of Apache YuniKorn is the creation and maintenance of software related to a standalone resource scheduler responsible for scheduling batch jobs and long-running services on large scale distributed systems running in on-premises environments as well as different public clouds ## Project Status: Current project status: Ongoing, with high activity. Issues for the board: No issues to report. ## Membership Data: Apache YuniKorn was founded 2022-03-16 (2 years ago) There are currently 34 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 9:7. Community changes, past quarter: - Rainie Li was added to the PMC on 2023-11-16 - No new committers. Last addition was Hsuan Zong Wu on 2023-09-06. ## Project Activity: Recent releases: 1.4.0 was released on 2023-11-20. 1.3.0 was released on 2023-06-12. The 1.4.0 release was large with a total of 300 jiras fixed (after cleanup). The community is finishing up release 1.5.0. The release planning has worked around Lunar New Year dates and creating a smaller release than 1.4.0. We have started working on major features for 1.6.0. ## Community Health: 9 new Jira accounts were requested. 276 new Jiras created and 237 resolved, with corresponding GitHub PRs: 218 created and 223 resolved. Translating documentation was taking a lot of time as documents that are getting translated were more complex. The Chinese speaking part of the community has now started a vote to remove the Chinese documentation to reduce maintenance. The YuniKorn web UI is getting some well deserved attention from a group of new contributors. Dependency updates are scheduled before every release, this provides a more structured approach to fixing CVEs. Target is to fix all known CVEs before a release. ------------------------------------------------------ End of minutes for the February 21, 2024 board meeting.