Board of Directors Meeting Minutes April 17, 2024 1. Call to order The meeting was scheduled for 21:00 UTC and began at 21:02 when a sufficient attendance to constitute a quorum was recognized by the chair. Other Time Zones: https://timeanddate.com/s/43e2 The meeting was held via teleconference, hosted by the Secretary via Zoom. The #asfboard channel on the-asf.slack.com was used for backup. 2. Roll Call Directors Present: Rich Bowen Shane Curcuru Christofer Dutz Willem Ning Jiang - joined :03 Jeff Jirsa Justin Mclean Jean-Baptiste Onofré Craig L Russell Sander Striker Directors Absent: none Executive Officers Present: Craig R. McClanahan David Nalley Matt Sicker Executive Officers Absent: Ruth Suehle Guests: Brian Proffitt Chris Lambertus Chris Thistlethwaite - joined :23 Chris Wells - joined :08 Daniel Gruno Dave Fisher - joined :07 Drew Foulks Ed Coleman Gavin McDonald Greg Stein Kanchana Pradeepika Welagedara - joined :08 Myrle Krantz Sally Khudairi 3. Minutes from previous meetings Published minutes can be found at: https://www.apache.org/foundation/board/calendar.html A. The meeting of March 20, 2024 See: board_minutes_2024_03_20.txt Approved by General Consent. 4. Executive Officer Reports A. Board Chair [Shane Curcuru] We are celebrating the ASF's twenty-fifth anniversary with our M&P team launching the #ASF25Years series of posts about our open and welcoming communities and the public good they bring. It's truly inspiring to see our all-volunteer led organization continue to grow, and provide more software that the world relies on. We send our heartfelt thanks to the countless volunteers on all Apache projects, and our own small staff behind the scenes who keeping our corporate being and online services healthy and running. With the advancement of the EU's Cyber Resilience Act (CRA) and the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) in the US, attention on software development processes is at an all time high. Our VP of Public Affairs, Dirk-Willem van Gulik, is joining with counterparts at other major open source foundations to establish common specifications for secure software development based on open source best practices [1]. This critical policy work starts with our organizations' existing open source processes and will improve them to meet future legislative requirements. Many thanks to all the volunteers at the ASF and other foundations involved, and to the Eclipse Foundation AISBL for hosting this work that will help the open source ecosystem as a whole. I plan to continue the efforts our past chair Sander and other Members have been working on to improve our project-facing processes. Ensuring processes are simple for our projects to follow, and are scalable and transparent enough that our board can provide oversight is important for healthy growth. I also will continue the drive to keep the board focused on organized communication, so we can efficiently make as many decisions asynchronously as practical. This effort will start with planning our annual Board face to face meeting, held this June along with our flagship Community Over Code event in Bratislava. Agenda planning includes writing up detailed proposals and leading on-list discussions well before the face to face meeting, so in-person time is saved for truly difficult questions. I'm also very thankful to the rest of our directors who have entrusted me as Chair for the upcoming board term. There are many big shoes to fill from past Chairs, so it's definitely a bit intimidating! But I know we can get the board working even more effectively going forward, to have more time to tackle the larger issues facing us in the world ahead. [1] https://news.apache.org/foundation/entry/open-source-community-unites-to-build-cra-compliant-cybersecurity-processes B. President [David Nalley] This month has been extraordinarily busy for me from a $dayjob perspective, and thus I haven't had as much time as I'd like to spend on matters at the ASF. The xz-utils attack has increased scrutiny of open source again. I'll note that even the Economist covered this attack, something that didn't happen with Log4shell. Security, Marketing & Publicity, Infrastructure, and Public Affairs responded with applomb in first triaging and then messaging the results. I've spent several hours discussing with US-based regulators and other open source foundations the implications of this situation on the open source software ecosystem. Additionally, please see Attachments 1 through 9. C. Treasurer [Craig R. McClanahan] Things continue to operate smoothly, with nothing significant to report about past activities. As we approach the budgeting cycle for the next fiscal year (which starts on May 1, 2024), I have developed some reporting in QuickBooks that can document all of the current fiscal year transactions for particular areas. If you have budget responsibility for a particular area, and would like a copy of the report for that area, let me know. D. Secretary [Matt Sicker] In March, the Secretary received 51 ICLAs, 3 CCLAs, 5 software grants, 59 membership applications, and 19 CoI affirmations. The Secretary worked with the new Board Chair to go over board meetings and how we coordinate them with the Chair. E. Executive Vice President [Ruth Suehle] Sponsorships for CoC NA are still low, but improving. From conversations with our peers in other organizations, this seems to be normal this year. Others are also seeing lower renewals from corporate members, so we definitely should be nurturing those relationships. Also pleased with the progress on the new brand and looking forward to launching that this year! Have begun drafting a budget based on last year's spending for the president to complete. F. Vice Chair [Justin Mclean] I helped the Chair out with a couple of minor things, including setup for the board face-to-face. Executive officer reports approved as submitted by General Consent. 5. Additional Officer Reports A. VP of W3C Relations [Andy Seaborne / Willem] See Attachment 10 B. Apache Legal Affairs Committee [Roman Shaposhnik / Craig] See Attachment 11 C. Apache Security Team Project [Mark J. Cox / Christofer] See Attachment 12 Additional officer reports approved as submitted by General Consent. 6. Committee Reports Summary of Reports The following reports required further discussion: # CarbonData [cdutz] # Fineract [rbowen] # Griffin [cdutz] # HAWQ [rbowen] # HBase [rbowen] # Hadoop [jmclean] # MADlib [cdutz] # Mesos [rbowen] # MyFaces [clr] # Pig [cdutz] # Samza [jmclean] # Submarine [cdutz] # Synapse [cdutz] # Tcl [cdutz] # Tez [striker] # Traffic Server [rbowen] A. Apache Accumulo Project [Ed Coleman / Shane] See Attachment A B. Apache ActiveMQ Project [Bruce Snyder / Sander] See Attachment B C. Apache Airavata Project [Suresh Marru / Jeff] See Attachment C D. Apache APISIX Project [Ming Wen / Rich] See Attachment D E. Apache Aries Project [Christian Schneider / JB] No report was submitted. F. Apache Arrow Project [Andrew Grove / Justin] See Attachment F G. Apache AsterixDB Project [Till Westmann / Sander] See Attachment G H. Apache Attic Project [Herve Boutemy / Craig] No report was submitted. I. Apache Avro Project [Ryan Skraba / JB] See Attachment I J. Apache Bloodhound Project [Gary Martin / Shane] No report was submitted. K. Apache bRPC Project [James Ge / Willem] See Attachment K L. Apache Calcite Project [Benchao Li / Jeff] See Attachment L M. Apache CarbonData Project [Liang Chen / Justin] See Attachment M @Justin: follow up with CarbonData around accuracy of board report N. Apache Causeway Project [Jörg Rade / Rich] See Attachment N O. Apache Celeborn Project [Keyong Zhou / Christofer] See Attachment O P. Apache Celix Project [Pepijn Noltes / JB] See Attachment P Q. Apache CXF Project [Daniel Kulp / Rich] See Attachment Q R. Apache DataFu Project [Eyal Allweil / Craig] See Attachment R S. Apache DB Project [Bryan Pendleton / Willem] See Attachment S T. Apache Directory Project [Shawn McKinney / Jeff] See Attachment T U. Apache DolphinScheduler Project [Lidong Dai / Shane] See Attachment U V. Apache Druid Project [Gian Merlino / Justin] See Attachment V W. Apache Dubbo Project [Jun Liu / Sander] See Attachment W X. Apache Fineract Project [James Dailey / Christofer] See Attachment X @Shane: follow up on Fineract Guild/Consortium Y. Apache Flagon Project [Joshua C. Poore / JB] See Attachment Y Z. Apache Flex Project [Harbs / Shane] See Attachment Z AA. Apache Fluo Project [Keith Turner / Justin] See Attachment AA AB. Apache Geronimo Project [Jean-Louis Monteiro / Jeff] No report was submitted. AC. Apache Griffin Project [William Guo / Christofer] See Attachment AC @Christofer: pursue a roll call vote AD. Apache Hadoop Project [Xiaoqiao He / Craig] See Attachment AD @Justin: follow up on details to include in board reports AE. Apache HAWQ Project [Lei Chang / Willem] See Attachment AE @Willem: follow up with Attic process AF. Apache HBase Project [Duo Zhang / Sander] See Attachment AF @Sander: follow up on trademark question AG. Apache Incubator Project [Justin Mclean] See Attachment AG AH. Apache InLong Project [Charles Zhang / Willem] See Attachment AH AI. Apache James Project [Benoit Tellier / Rich] See Attachment AI AJ. Apache jclouds Project [Andrew Gaul / Justin] See Attachment AJ AK. Apache Jena Project [Andy Seaborne / Craig] See Attachment AK AL. Apache JMeter Project [Bruno Demion / Willem] See Attachment AL AM. Apache Johnzon Project [Jean-Louis Monteiro / Christofer] No report was submitted. AN. Apache JSPWiki Project [Juan Pablo Santos Rodríguez / JB] See Attachment AN AO. Apache Kudu Project [Andrew Wong / Shane] No report was submitted. AP. Apache Libcloud Project [Tomaž Muraus / Jeff] See Attachment AP AQ. Apache MADlib Project [Ed Espino / Rich] See Attachment AQ @Christofer: pursue a roll call vote AR. Apache Mahout Project [Andrew Musselman / Rich] See Attachment AR AS. Apache Maven Project [Karl Heinz Marbaise / Sander] See Attachment AS AT. Apache Mesos Project [Qian Zhang / Jeff] See Attachment AT AU. Apache MINA Project [Guillaume Nodet / Justin] See Attachment AU AV. Apache MyFaces Project [Bernd Bohmann / Willem] See Attachment AV @Shane: figure out username policy AW. Apache Mynewt Project [Szymon Janc / Shane] See Attachment AW AX. Apache NiFi Project [Joe Witt / Rich] See Attachment AX AY. Apache Nutch Project [Sebastian Nagel / Sander] See Attachment AY AZ. Apache NuttX Project [Alin Jerpelea / Craig] See Attachment AZ BA. Apache OpenDAL Project [Hao Ding / JB] See Attachment BA BB. Apache OpenJPA Project [Mark Struberg / Christofer] No report was submitted. BC. Apache OpenMeetings Project [Maxim Solodovnik / Christofer] See Attachment BC BD. Apache OpenOffice Project [Dave Fisher / JB] See Attachment BD BE. Apache ORC Project [William Hyun / Justin] See Attachment BE BF. Apache Paimon Project [Jingsong Lee / Craig] See Attachment BF BG. Apache Parquet Project [Xinli Shang / Shane] See Attachment BG BH. Apache PDFBox Project [Andreas Lehmkühler / Rich] See Attachment BH BI. Apache Pekko Project [PJ Fanning / Willem] See Attachment BI BJ. Apache Petri Project [Dave Fisher / Jeff] See Attachment BJ BK. Apache Pig Project [Koji Noguchi / Sander] See Attachment BK @Christofer: look into development activity BL. Apache Pinot Project [Kishore G / Shane] See Attachment BL BM. Apache Pivot Project [Roger Lee Whitcomb / Craig] See Attachment BM BN. Apache Ranger Project [Selvamohan Neethiraj / JB] No report was submitted. BO. Apache Ratis Project [Tsz-wo Sze / Rich] See Attachment BO BP. Apache Rya Project [Adina Crainiceanu / Craig] See Attachment BP BQ. Apache Samza Project [Jagadish Venkatraman / Jeff] See Attachment BQ @Justin: follow up on health status BR. Apache SINGA Project [Wang Wei / Christofer] See Attachment BR BS. Apache SkyWalking Project [Sheng Wu / Sander] See Attachment BS BT. Apache Steve Project [Daniel Gruno / Willem] See Attachment BT BU. Apache Streams Project [Steve Blackmon / Justin] No report was submitted. BV. Apache Struts Project [René Gielen / Rich] No report was submitted. BW. Apache Submarine Project [Kevin Su / Christofer] See Attachment BW @Christofer: pursue public roll call for Submarine BX. Apache Synapse Project [Isuru Udana / Christofer] See Attachment BX @Christofer: pursue a roll call vote BY. Apache Tapestry Project [Thiago Henrique De Paula Figueiredo / Justin] See Attachment BY BZ. Apache Tcl Project [Georgios Petasis / Jeff] See Attachment BZ @Rich: continue conversing with PMC around tooling and oversight CA. Apache Tez Project [László Bodor / Sander] See Attachment CA @Sander: follow up on trademark issue CB. Apache Thrift Project [Jens Geyer / Willem] See Attachment CB CC. Apache Tika Project [Tim Allison / Craig] See Attachment CC CD. Apache TinkerPop Project [Kelvin Lawrence / Shane] See Attachment CD CE. Apache Traffic Server Project [Bryan Call / JB] See Attachment CE @Rich: follow up about metrics tooling CF. Apache Web Services Project [Daniel Kulp / Sander] See Attachment CF CG. Apache Wicket Project [Andrea Del Bene / Rich] See Attachment CG CH. Apache Zeppelin Project [Jongyoul Lee / Craig] See Attachment CH Committee reports approved as submitted by General Consent. 7. Special Orders A. Change the Apache Solr Project Chair WHEREAS, the Board of Directors heretofore appointed David Smiley (dsmiley) to the office of Vice President, Apache Solr, and WHEREAS, the Board of Directors is in receipt of the resignation of David Smiley from the office of Vice President, Apache Solr, and WHEREAS, the Project Management Committee of the Apache Solr project has chosen by vote to recommend Jason Gerlowski (gerlowskija) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that David Smiley is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Solr, and BE IT FURTHER RESOLVED, that Jason Gerlowski be and hereby is appointed to the office of Vice President, Apache Solr, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7A, Change the Apache Solr Project Chair, was approved by Unanimous Vote of the directors present. B. Establish the Apache SDAP Project WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software, for distribution at no charge to the public, related to an integrated data analytic center for Big Science problems. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache SDAP Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache SDAP Project be and hereby is responsible for the creation and maintenance of software related to an integrated data analytic center for Big Science problems; and be it further RESOLVED, that the office of "Vice President, Apache SDAP" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache SDAP Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache SDAP Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache SDAP Project: - Edward M Armstrong - Nga Thien Chung - Thomas Cram - Frank Greguska - Thomas Huang - Julian Hyde - Joseph C. Jacob - Jason Kang - Riley Kuttruff - Thomas G Loubrieu - Kevin Marlis - Stepheny Perez - Wai Linn Phyo NOW, THEREFORE, BE IT FURTHER RESOLVED, that Nga Thien Chung be appointed to the office of Vice President, Apache SDAP, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed; and be it further RESOLVED, that the Apache SDAP Project be and hereby is tasked with the migration and rationalization of the Apache Incubator SDAP podling; and be it further RESOLVED, that all responsibilities pertaining to the Apache Incubator SDAP podling encumbered upon the Apache Incubator PMC are hereafter discharged. Special Order 7B, Establish the Apache SDAP Project, was approved by Unanimous Vote of the directors present. C. Establish the Apache DataFusion Project WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software, for distribution at no charge to the public, related to an extensible query engine. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache DataFusion Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache DataFusion project be and hereby is responsible for the creation and maintenance of software related to an extensible query engine; and be it further RESOLVED, that the office of "Vice President, Apache DataFusion" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache DataFusion Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache DataFusion Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache DataFusion Project: * Andrew Grove * Andrew Lamb * Daniël Heres * Jie Wen * Kun Liu * L. C. Hsieh * QP Hou * Wes McKinney * Will Jones NOW, THEREFORE, BE IT FURTHER RESOLVED, that Andrew Lamb be appointed to the office of Vice President, Apache DataFusion, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed; and be it further RESOLVED, that the Apache DataFusion Project be and hereby is tasked with the migration and rationalization of the Apache Arrow DataFusion sub-project; and be it further RESOLVED, that all responsibilities pertaining to the Apache Arrow DataFusion sub-project encumbered upon the Apache Arrow Project are hereafter discharged. Special Order 7C, Establish the Apache DataFusion Project, was approved by Unanimous Vote of the directors present. 8. Discussion Items 9. Review Outstanding Action Items * Rich: follow up on MADlib report prior to April [ MADlib 2024-01-17 ] Status: Done * Christofer: follow up on PMC member private subscriptions [ Empire-db 2024-02-21 ] Status: Got absolutely no direct response to my message on 28.02.2024, however was there a bit of action happening on the list after that email about people wanting to be removed. Leaving 5 subscribed PMC members and one committer ... so I asked them to fulfill the request for removal of some and asked them for a self-assessment on if they would be able to get 3 binding +1 votes. Update 16.04.2024: Provided them some information on HOW to subscribe and unsubscribe people from mailinglists and or remove people from the PMC (That asked to be removed) Update 17.04.2024: All done. * Willem: follow up on formalizing meeting minutes [ ShenYu 2024-02-21 ] Status: I talked to the PMC Chair, and now the team uses the new meeting minutes format. * Willem: follow up with HAWQ PMC on submitting a report [ HAWQ 2024-03-20 ] Status: Done * Sander: follow up on project pivot status [ Mnemonic 2024-03-20 ] Status: Ongoing. PMC members had a discussion to change technical direction on dev@ list, including positive vote. * Christofer: pursue a roll call vote for Submarine [ Submarine 2024-03-20 ] Status: Sent Roll-Call email on 07.04.2024 ... didn't get any form of response till 11.04., however a board report was submitted. I sent them some more information and told them the roll call is not off the table, just because they submitted a report, and they are required to respond. Update 16.04.2024: Still not a single response from anyone ... I think we should formally retire Submarine (Possibly after posting a last message on dev@) Update 17.04.2024: Still not a single reaction. I think we should take action. * Rich: follow up on questions [ Superset 2024-03-20 ] Status: Done * Justin: follow up on mail list moderation [ TomEE 2024-03-20 ] Status: Done 10. Unfinished Business 11. New Business 12. Announcements 13. Adjournment Adjourned at 21:51 UTC ============ ATTACHMENTS: ============ ----------------------------------------- Attachment 1: Report from the VP of Brand Management [Mark Thomas] Covering the period March 2024 * ISSUES FOR THE BOARD None. * OPERATIONS Responded to the following queries, liaising with projects as required: - worked with the organisers of Iceberg Summit - worked with the organisers of Flink Forward 2024 Berlin - provided advice to SLING and TRAFFICSERVER regarding spam domain registration emails - approved one use of ASF logos - declined to sign a release for a publication and pointed them to the ALv2 - published the downstream distribution policy - approved BEAM Summit 2024 after confirming expected numbers - discovered a draft service naming policy exists and intending to tidy it up and publish it * REGISTRATIONS The renewal of the MESOS registration in the US is complete. Started the process to register FREEMARKER in the US. Worked with counsel on the renewal of OPENOFFICE in the US. The renewal of APACHE in Japan is complete. * INFRINGEMENTS The AIRFLOW PMC have resolved the issue with the naming of the external service. Provided advice to HIVE regarding a possible infringement. Working with SUPERSET PMC and VP Data Privacy to address issues with a community newsletter. ----------------------------------------- Attachment 2: Report from the VP of Fundraising [Bob Paulin] 1) ASF Sponsors: a --We onboarded one new Bronze Sponsor during this timeframe. b --Renewals: one Gold Sponsor has confirmed their renewal. c --Payments: 1 --New: we received one new Sponsor payment. 2a --Renewing: we received renewal payments from one Platinum and one Gold Sponsor. 2b --Incoming: we await payment from two renewing Platinum, three renewing Gold, one new Silver, and one renewing Bronze Sponsor. 2) Targeted Sponsors: we are extending a Bronze Targeted Sponsor support for an Apache project. 3) Sponsor Relations: our regular outreach efforts continue, with particular focus on Targeted Sponsorship coordination, as well as assisting a Gold Sponsor with community engagement. 4) Event Sponsorship: contracts, invoices, and communications invoicing with Conferences, Marketing & Publicity, Accounting, and local production teams are all running smoothly for all three Community Over Code events. 5) Individual Donations and Corporate Giving: we received $1.4K in online donations via https://donate.apache.org/ 6) Administrivia: we are working with the Treasury and Accounting teams on recovering an invoicing issue with a Targeted Sponsor. ----------------------------------------- Attachment 3: Report from the VP of Marketing and Publicity [Brian Proffitt] Foundation Comms * Announced new ASF Board of Directors via blog and ASF social media channels * Issued a press release announcing Apache Wicket v10 * Developed and distributed announcement for the CoC North America CFP * Developed and promoted project spotlight blog for Apache Wicket * Published 8th blog in the First Contribution Campaign series: Bug Fixes * Coordinated joint PR effort with Eclipse Foundation for CRA 25th Anniversary Project * Developed, issued and promoted news release * Created dedicated landing page to highlight projects, contributors, public good stories and more * Launched social media campaign #ASF25Years to encourage community sharing and engagement Branding Project * Engaged with graphic designer to begin development of new ASF logo with multiple revisions; worked with Native American consultant to ensure there was no misalignment with cultural values Social Media Posts In total, 84 posts were published: 49 Tweets + 35 LinkedIn. The highest performing content promoted during March includes: ASF’s 25th anniversary; Apache Wicket v10; new ASF board members; and CVE 2024-3094. Social Engagement Stats (X + LinkedIn) * Total Audience: 136,713 * New Followers in March: 617 * Total Impressions: 184,976 (35.9% increase MoM) * Total Engagements: 5,193 (57%) * Post Link Clicks: 2,634 (61.6%) Website Analytics * 31,535 visits, 31,534 unique visitors -8.6% * 2 min 42s average visit duration +1.2% * 48% visits have bounced (left the website after one page) +2.1% * 11.9 actions (page views, downloads, outlinks, internal site searches) per visit +3.5% * 10,001 max actions in one visit (level) * 348,574 pageviews, 37,697 unique pageviews -5.5% * 0 total searches on your website, 0 unique keywords * 16,750 downloads, 11,868 unique downloads -12.8% * 8,382 outlinks, 6,457 unique outlinks -5.3% ----------------------------------------- Attachment 4: Report from the VP of Infrastructure [Myrle Krantz] General ======= Infrastructure is operating as expected, and has no current issues requiring escalation to the President or the Board. Highlights ========== - Infra Team worked with Security and M&P on the xz vulnerability (CVE-2024-3094). We completed assessments and notifications to potentially-vulnerable projects/PMCs within 24 hours of receiving notice of the CVE. Finances ======== - The Infra team is ready to begin the budgeting process. Short Term Priorities ===================== - Budget. Long Range Priorities ===================== - Artifact Distribution Platform. - Atlassian Cloud General Activity ================ - Working on a GitHub Actions policy for PMCs' usage of GHA, in order to properly share our limited resources/limits. This also includes some work on a scanner, looking for improper uses of GHA. Infra is also working on a usage dashboard. - Deprecated paste.a.o, sent notification, and will turn off at the end of April. - Continued work on asfquart, an Infra-written/supported set of functions for Quart-based apps (eg. Agenda, ADP, selfserve, etc) - Upgraded a bunch of boxes from 18.04 to 22.04 in order to get mod_md to use LetsEncrypt for server certificates (instead of our wildcard). - Preparing for our next Infra Roundtable. - Improving our usage of AWS, from a security perspective. This will be a revamp of roles and IAM. ----------------------------------------- Attachment 5: Report from the VP of Conferences [Brian Proffitt] Sponsorship funding for both the Community Over Code EU and NA events still remains low. To date, we have US$94,000 pledged to NA and ~US$46,100 pledged to EU. CFP for Community Over Code NA is doing pretty well, CFP closes on 4/15 as scheduled, with 205 total submissions.Track chairs are beginning their evaluation this week. The Community Over Code Asia 2024 CFP has receive 120 sessions submission as of April 16th, and the CFP will be closed April 21th. ----------------------------------------- Attachment 6: Report from the Apache Travel Assistance Committee [Gavin McDonald] Current Events ============== Comununity Over Code EU 2024 ---------------------------- Flights and Visas are still ongoing, people having interviews over the next few weeks. Hotel rooms are reserved, payments to be resolved by invoice. Comununity Over Code Asia 2024 ---------------------------- Applications are open and will close on the 8th of May. So far we have had 18 applications. Judges have been decided and are starting to score applications. Comununity Over Code NA 2024 ---------------------------- Applications are now open and close on the 6th of May. We have had 9 applications so far. Monthly Meetings ================ For at least the run up to events, we continue to hold monthly meetings on the second Tuesday. With multiple events to support at the same time and different people running each event we thought a monthly live call would compliment our mailing list and Slack Channels. Any interested members or other Operations folks are welcome to attend these. TAC App ======= TAC App is open and accepting applications. No issues with performance. Future Events ============= Looking into a few other events as always. With 3 Community Over Code events happening we may not have enough volunteer time to take on anything else concurrent. Short/Medium Term Priorities ============================ Keeping an eye out for other smaller events to support. We are keen to hear about project events. Examples would be Flink Forward, Cassandra Summit etc. Ideally we would have one TAC volunteer committee member look after these smaller events and reach out to projects, and will pose that to the list. We have been approached by a project holding an event and we are deciding what we can do there. Mailing List Activity ===================== Discussions happening around current and future events, call for judges etc. Membership ========== No changes to the membership this month. ----------------------------------------- Attachment 7: Report from the VP of Diversity and Inclusion [David Nalley] ----------------------------------------- Attachment 8: Report from the VP of Data Privacy [Christian Grobmeier] # General There are no issues that need urgent attention. Currently, 49 tracking codes were requested (+2). 10 Matomo sites don't receive traffic at this point (not yet implemented). * After blocking 3rd party dependencies, questions arose about embedding resources. * Concerning DPAs, the ASF currently lets the VP of Data Privacy sign them. However, it's worth mentioning to the board that any authorized (board) member can also sign. To keep overhead low, I recommend to stick with the current process. * New requests for DPAs with previously unsupported companies will be reviewed on the privacy@ mailing list. This process allows for community input on these tools, encourages suggestions for alternatives, and aims to keep our list of providers small. # Open tasks - Create a list of domains that are allowed to connect because a DPA is covering it (improved Whimsy support) - Better documentation about DPAs - Follow up on the idea of blocking 3rd party tracking on the infra-level. Tracked on: https://issues.apache.org/jira/browse/INFRA-25518 - Add "canned responses" and instructions on how to run the privacy office to the website - Investigate TAC for data privacy and develop a targeted version for the committee - Clarify responsibility for the Matomo VM https://lists.apache.org/thread/6c7dn3ot494pxdlfxfn1pngbcpzj5g08 https://issues.apache.org/jira/browse/INFRA-25432 ----------------------------------------- Attachment 9: Report from the VP of Public Affairs [Dirk-Willem van Gulik] CRA/PLD - Continued dialoges with policy makers useful and constructive. First signs that they are now also getting their arms wrapped around the absolutely massive capacity/capability issues. - Continued dialoges with the normative standards bodies not going as well. Nothing but diplomatic pleasantries w.r.t. to the main one, CEN/CENELEC, sofar. Plus we've now ran systematically through the various options suggested by (them/commissions/legal) experts and not many avenues left. With the same reported by the other open source stewards (and Simon Phipps warnings us that this was going to be the case all along :) ). This should now become a concern -- not so much for us; but for CEN/CENELEC and the commission. Especially as the needed reform of Regulation 1025 (see last report) is going to be too late. So this is mostly their (own) problem to fix. - We announced a collaboration with Eclipse, Python, Rest and a growing list of folks. Was received well (and Brian&press-team was lauded). Very likely we'll have some solid industry partners there too soon. First versions of bylaws/charter in draft. Probably ready for actually doing something useful end of spring. - XZ event triggers questions from policy makers and `what if the CRA would already have been in force' speculation. Sofar all informal. This is goodness - as the event showed that the EC/ENISA are not yet in an ideal position to work with the key open source stewards during events like this (unlike the USA their CISA who is well in tune/connected). We are pro-actively keeping the EC/ENISA informed & are trying to get them involved long term in this type of event. As long term this makes our open source steward/leadership much easier. And ties, trust and organisational-reflexes like this take years to forge. As for now - our headline reading on CRA & XZ is that these are orthogonal issues at best. And that while SBOMs would have been great and good (ENISA) contact/reporting can be helpful - this is also a case where the remit of industry stops and that of the authorities and intelligence agencies start. The analogy I've been experimenting with is that of a civil/chartered engineer signing off on a dead-normal bridge; and being liable for that bridge collapsing. But universally understood that if it collapses because of a terrorist detonating a truck of explosives - that it is then largely out of his realm. And with this XZ question we seem to be muddling this. AI act, SEP, InteropAct, etc - Nothing new to report - parliament is now going it its election cycle. ----------------------------------------- Attachment 10: Report from the VP of W3C Relations [Andy Seaborne] Niklas Merz (niklasmerz@) has joined the Federated Identity Community Group. This is the first member from ASF; ASF has signed the community group agreement. ----------------------------------------- Attachment 11: Report from the Apache Legal Affairs Committee [Roman Shaposhnik] Past month has been pretty calm. Committee members took good care of resolving most issues on time. After resolving a handful of LEGAL issues, we are flat at 19 issues. Not really much else to report. ----------------------------------------- Attachment 12: Report from the Apache Security Team Project [Mark J. Cox] - We performed work on the xz backdoor issue known as CVE-2024-3094, co-ordinating with others and PMCs and published and updated a blog about it. https://security.apache.org/blog/cve-2024-3094/ - We coordinated with other vendors on a industry wide HTTP/2 protocol issue. - We published a blog post on how we credit people who report security issues. https://security.apache.org/blog/cve-2024-3094/ - We initiated a retrospective of a security report where multiple organisations were involved, where we shared some recommendations on how to resolve the issue more smoothly next time. Stats for March 2024: 40 [license confusion] 14 [support request/question not security notification]] 11 [report/question relating to dependencies] Security reports: 108 (last months: 78, 86, 70, 74) 11 ['airflow'] 10 ['website or other infrastructure'] 9 ['dolphinscheduler'] 6 ['commons', 'streampark'] 4 ['pulsar'] 3 ['cxf', 'hugegraph', 'openoffice', 'shenyu', 'streampipes', 'superset'] 2 ['activemq', 'answer', 'cloudstack', 'guacamole', 'iotdb', 'paimon', 'site', 'solr', 'struts', 'submarine'] 1 ['any23', 'cordova', 'db', 'directory', 'doris', 'dubbo', 'fury', 'httpd', 'impala', 'james', 'kafka', 'karaf', 'kylin', 'nifi', 'ofbiz', 'seata', 'servicecomb', 'shindig', 'sling', 'spark', 'steve', 'tomcat', 'velocity', 'xmlgraphics'] In total, as of 1st April 2024, we're tracking 197 (last months: 173, 199) open issues across 63 projects, median age 73 days (last months: 82, 90, 119). 61 of those issues have CVE names assigned. 22 (last month: 23) of these issues, across 7 projects, are older than 365 days. ----------------------------------------- Attachment A: Report from the Apache Accumulo Project [Ed Coleman] ## Description: The mission of Apache Accumulo is the creation and maintenance of software related to a robust, scalable, distributed key/value store with cell-based access control and customizable server-side processing. ## Project Status: - Current project status: Ongoing with high activity. - Issues for the board: None. Accumulo is currently working on some significant development efforts. Improving the performance and stability of the 2.1.x line, adding new features and performance improvements to 3.1 line, and the evolution of the processing model to support dynamic scaling and provide elasticity. ## Membership Data: Apache Accumulo was founded 2012-03-21 (12 years ago) There are currently 42 committers and 39 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. It is our practice to invite committers to be PMC members at the same time. The difference between committers and PMC members is due to some PMC members electing to go emeritus. Community changes, past quarter: - No new PMC members. Last addition was Daniel Roberts on 2023-08-09. - No new committers. Last addition was Daniel Roberts on 2023-08-10. ## Project Activity: ### Releases: - accumulo-access-1.0.0-beta was released on 2024-02-17 - accumulo-1.10.4 was released on 2023-11-16. - accumulo-2.1.2 was released on 2023-08-21. - accumulo-3.0.0 was released on 2023-08-21. The Accumulo 1-10.x line reached end-of-life and Accumulo-1.10.4 is the final release. The vote thread can be found at [1] Activity on the next release of 2.1.3, has been very active with bug-fixes and performance improvements that are being driven by community adoption of 2.1.x. Currently 174 PRs have been merged, and there are 21 open issues with 1 labeled as a blocker for the release. Work is actively proceeding on 3.1.0 that will contain new features and performance improvements. Currently, 3.1.0 has 266 merged PRs. In parallel to 3.1, work continues on the evolution of the Accumulo processing model to support dynamic scaling and provide elasticity [2]. The goal for Accumulo is to move from a model where active table metadata and table data management is hosted in active processes to a model that can dynamically scale server components on-demand to provide configurable latency and higher scalability. The Accumulo Access library provides a stand-alone java library with an AccessExpression syntax and an ANTLRv4 grammar to enable reuse separate from Accumulo. Within Accumulo, the AccessExpression is used in the ColumnVisibility and VisibilityEvaluator to provide column-level authorization for data access. The vote thread is available at [3] ## Community Health: Overall community health is good and GitHub activity remains consistent. The email traffic reflects the community preference of using GitHub projects and issues for planning and PRs for code discussions. We also use our slack channel for day-to-day communications. We continue to use the mailing list for official Apache business and it remains a channel for users to contact us. ## Links [1] https://lists.apache.org/thread/6jy0v0qk14163xx19ocz4l3xxc1rzr3z [2] https://github.com/orgs/apache/projects/164/views/1 [3] https://lists.apache.org/thread/q96v767png90mfm4t330kfbjvml0rc37 ----------------------------------------- Attachment B: Report from the Apache ActiveMQ Project [Bruce Snyder] ## Description: The mission of Apache ActiveMQ is the creation and maintenance of software implementing a distributed messaging system ## Project Status: Current project status: The project continues to move forward making positive progress. Issues for the board: None ## Membership Data: Apache ActiveMQ was founded 2007-01-16 (17 years ago) There are currently 64 committers and 30 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Matt Pavlovich on 2023-12-06. - Anton Roskvist was added as committer on 2024-02-09 ## Project Activity: ### ActiveMQ Classic - ActiveMQ 6.1.0 was released on 2024-03-15. It includes new JMS2/3 operations support. - ActiveMQ 6.1.1 is currently on vote (it should be released at the time of the board meeting). It's a maintenance release, including dependency updates. - We are already starting 6.2.x preparation, including a new round of JMS2/3 operations. ### ActiveMQ Artemis - 2.32.0 released. Highlights include performance and reliability improvements for mirroring and moving examples to their own Git repository. Perhaps the most significant change in this release is inclusive language throughout docs, source, and configuration. - 2.33.0 released. Highlights include a large number of dependency updates, support for JSON formatted typed properties on CLI producer command, a Maven Bill of Materials (BOM) artemis-bom to simplify integration, new management methods for scheduled messages, new "view" and "edit" permissions for management operations, performance improvements on mirroring and paging, a big update to the documentation on split-brain and clustering, and finally we moved the pluggable lock manager out of "experimental" status as it is ready for general use - Work is now progressing towards 2.34.0. ## Community Health: The project had an increase in messages to the mailing lists as well as increased activity in git. We have decided to begin assembling reports to the board directly in the Reporter tool rather than assembling them elsewhere and pasting into Reporter. So this month will be our first attempt. ----------------------------------------- Attachment C: Report from the Apache Airavata Project [Suresh Marru] ## Description: The mission of Apache Airavata is the creation and maintenance of software related to executing and managing computational jobs on distributed computing resources including local clusters, supercomputers, national grids, academic and commercial clouds. ## Project Status: Current project status: The Project is active and community remains healthy. Issues for the board: No issues to report. ## Membership Data: Apache Airavata was founded 2012-09-18 (12 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - Lahiru Jayathilake was added to the PMC on 2024-04-07 - Lahiru Jayathilake was added as committer on 2024-04-09 ## Project Activity: Simplifying the complexity and breaking down the monolithic project repository into manageable context seems to have helped -- judging from the pull requests. Our last step in this process is to work on the release process for the discrete components. ## Community Health: Student interest in contributing to the project remains high. Seven GSoC students applied to contribute. The activity is fragmented among JIRA, GitHub discussions, and the mailing list, which is slowly getting stale. With this round of students, we will encourage streamlining project activity and community engagement. ----------------------------------------- Attachment D: Report from the Apache APISIX Project [Ming Wen] ## Description: The mission of Apache APISIX is the creation and maintenance of software related to a cloud-native microservices API gateway ## Project Status: Current project status: ongoing. Issues for the board: no issue. ## Membership Data: Apache APISIX was founded 2020-07-15 (4 years ago) There are currently 63 committers and 29 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - Peter Zhu was added to the PMC on 2024-01-12 - No new committers. Last addition was Fabrice Li on 2023-10-24. ## Project Activity: 3.9.0 was released on 2024-03-29. 3.8.0 was released on 2023-1-15. 3.7.0 was released on 2023-11-21. apisix-ingress-controller-1.7.1 was released on 2023-11-13. 3.6.0 was released on 2023-10-05. ## Community Health: Due to China's Spring Festival holiday, the activity of Apache APISIX has decreased. dev@apisix.apache.org had a 21% increase in traffic in the past quarter (156 emails compared to 128) 312 commits in the past quarter (-22% change) 54 code contributors in the past quarter (-33% change) 251 PRs opened on GitHub, past quarter (-22% change) 225 PRs closed on GitHub, past quarter (-30% change) 287 issues opened on GitHub, past quarter (-34% change) 278 issues closed on GitHub, past quarter (-35% change) ----------------------------------------- Attachment E: Report from the Apache Aries Project [Christian Schneider] ----------------------------------------- Attachment F: Report from the Apache Arrow Project [Andrew Grove] ## Description: The mission of Apache Arrow is the creation and maintenance of software related to columnar in-memory processing and data interchange ## Project Status: Current project status: Ongoing (high activity) Issues for the board: The community has discussed and approved splitting the DataFusion subproject into its own top level Apache Project. Please find a proposed resolution below for your consideration. The full proposal, discussion, IP Clearance and related material can be found on the mailing list thread https://lists.apache.org/thread/tv8s8ootxf7nrsp3vo1mt8mtxxt5qcor Resolution to Create the Apache DataFusion Project from the Apache Arrow DataFusion Sub Project ============================================================= X. Establish the Apache DataFusion Project WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software related to an extensible query engine for distribution at no charge to the public. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache DataFusion Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache DataFusion Project be and hereby is responsible for the creation and maintenance of software related to an extensible query engine; and be it further RESOLVED, that the office of "Vice President, Apache DataFusion" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache DataFusion Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache DataFusion Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache DataFusion Project: * Andy Grove (agrove@apache.org) * Andrew Lamb (alamb@apache.org) * Daniël Heres (dheres@apache.org) * Jie Wen (jakevin@apache.org) * Kun Liu (liukun@apache.org) * Liang-Chi Hsieh (viirya@apache.org) * Qingping Hou: (houqp@apache.org) * Wes McKinney(wesm@apache.org) * Will Jones (wjones127@apache.org) RESOLVED, that the Apache DataFusion Project be and hereby is tasked with the migration and rationalization of the Apache Arrow DataFusion sub-project; and be it further RESOLVED, that all responsibilities pertaining to the Apache Arrow DataFusion sub-project encumbered upon the Apache Arrow Project are hereafter discharged. NOW, THEREFORE, BE IT FURTHER RESOLVED, that Andrew Lamb be appointed to the office of Vice President, Apache DataFusion, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. ## Membership Data: Apache Arrow was founded 2016-01-19 (8 years ago) There are currently 107 committers and 52 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Raúl Cumplido on 2023-11-12. - Bryce Mecum was added as committer on 2024-03-18 - Jay Zhan was added as committer on 2024-02-15 - Jeffrey Vo was added as committer on 2024-01-31 - Joel Lubinitsky was added as committer on 2024-03-31 ## Project Activity: Arrow has several subprojects, as listed on https://arrow.apache.org/ ### ADBC ADBC 0.10.0 and 0.11.0 were released, and the project is aiming for a 1.0.0 release next. In the meantime, we’ve done heavy refactoring to unify the separate driver codebases and are adding C#/.NET to the released packages. The drivers themselves are continuing to gain performance and feature improvements, such as a much faster bulk table upload for the Snowflake driver. ### Arrow Flight We are working on a set of experimental proposals to extend Flight to work with UCX [1] and HTTP-based transports, in addition to the current support for gRPC, and to extend the Flight “result set” to cover “cloud fetch” use cases [2]. UCX support will enable better Arrow integration with hardware accelerators, while the “cloud fetch” concept will allow Arrow-based services to scale better horizontally and work better with cloud provider services. [1] https://openucx.org/ [2] https://lists.apache.org/thread/wknj72clsf1ty9q9s18brw9qpsrp5p39 ### Arrow Flight SQL There is community interest in implementing and extending an ODBC driver for Arrow Flight SQL, and we are still in the process of accepting an ODBC driver[1] to support that interest. [1] https://lists.apache.org/thread/t109wsn86cnk5kbc390snco0s751qhpv Various community members representing different organizations continue to update the protocol with new features and clarifications, such as session variable support and stateless prepared statements. ### Arrow Flight SQL adapter for PostgreSQL There were some feedback after the first release and we solved most of them. We’ll release the next version in a few months. Additionally, an Arrow developer has been working towards upstream support for Arrow in PostgreSQL’s COPY command ([1][2]). [1] https://www.postgresql.org/message-id/ 20240124.144936.67229716500876806.kou%40clear-code.com [2] https://slide.rabbit-shocker.org/authors/kou/ postgresql-conference-japan-2023/ ### DataFusion & Ballista DataFusion DataFusion continues releasing regularly (approximately once per month) We have had a paper describing the system accepted to the ACM SIGMOD conference[1] The community approved a proposal to promote DataFusion (including the Ballista and Comet subprojects) to a top-level ASF project, and the proposed resolution is at the top of this email We published a blog post that describes major projects underway [2] Major areas of activity include improved planning performance, and making it easier to customize DataFusion via expanded UDF APIs. Ballista 0.12 was released on 2/6. This is the first major release in ~10 months. There continues to be interest in Ballista from the community, but the project is not receiving regular contributions currently. The “Comet” Spark Accelerator, built on DataFusion, was donated to the project this year: [3] [1]: https://github.com/apache/arrow-datafusion/issues/8373 #issuecomment-2025133714 [2]: https://arrow.apache.org/blog/2024/01/19/datafusion-34.0.0/ [3]: https://arrow.apache.org/blog/2024/03/06/comet-donation/ ### nanoarrow Arrow nanoarrow continues its ~quarterly release cadence with active improvement to the C, R, and Python implementations scheduled for release in mid-January as nanoarrow 0.4. ### Language Area Updates Arrow has at least 13 different language implementations, as explained in https://arrow.apache.org/overview/ Arrow 15.0.0, 15.0.1 and 15.0.2 were released from the monorepo: https://arrow.apache.org/blog/2024/01/10/15.0.0-release/ https://arrow.apache.org/blog/2024/03/07/15.0.1-release/ https://arrow.apache.org/blog/2024/03/18/15.0.2-release/ ### C++ Fixed shape tensor extension type has been added as a new canonical extension type in release 12.0.0 and variable shape tensor extension is now being under review for the next release (16.0.0). AzureFileSystem is feature complete and ready for the 16.0 release. It can detect Hierarchical Namespace support and automatically use the Azure Data Lake Gen 2 APIs or fall back to the Azure Blobs API. #### Dataset & Parquet Added support for reading and writing the newly added Parquet float16 logical type. Added support for Parquet modular encryption. #### Acero & Compute Improvements were made to several compute functions. Added support for serializing and deserializing compute expressions using Substrait. #### Gandiva Migrated LLVM JIT engine from MCJIT to ORC v2/LLJIT. Added support for the latest LLVM (17). Added support for registering external function registries. Added support for registering external C functions. ### C# The C# implementation has been steadily improving its compatibility with the standard. Since the last report, it has gained support for duration and interval types, as well as the new types utf8 view, binary view and list view. Dictionaries now work correctly in file and memory implementations, and there are only four explicit exclusions for C# in the Archery integration tests. ### Go Integration testing for the C Data API has been added to the CI for Go and other implementations. The Parquet implementation continues to gain fixes for different encoding/decoding types and bug fixes. Also fixed Go release verification for arm64. ### Java We are working on adding nullability annotations and enabling module support for Java 9+. ### JavaScript No update ### Julia Version 2.7.0 was released on 10 December 2023 ### Rust The parquet implementation continues to mature, for example supporting new statistics metadata. The FFI bindings have been improved as well, and are now integration tested against arrow-cpp (among others) The community is working on support for the newly added StringView, BinaryView and ListView array types The object_store module, developed as part of this project, allows for generically interacting with object store systems such as AWS S3, Google Cloud Storage, and Azure Blob Storage. This crate has seen significant adoption outside of the arrow community, for example the crates.io service itself. ### C (GLib) No update ### MATLAB We are currently working on integrating with the project release tooling to make it possible to distribute pre-built MLTBX files for easy installation of the MATLAB interface. ### Python There has been ongoing work on improving interoperability with other Python projects for example adding C Data Interface PyCapsule protocol and implementing the usage of capsules in ADBC and nanoarrow-python. We have also implemented the DLPack protocol on Arrow Arrays that is used to move the data to ML libraries. A critical security vulnerability was discovered in PyArrow versions 0.14.0 to 14.0.0 that allowed arbitrary code execution when loading a malicious Arrow IPC, Feather, or Parquet data file (CVE-2023-47248). The vulnerability was patched in PyArrow version 14.0.1. A hotfix package was released to patch the vulnerability in all other versions of PyArrow for users unable to immediately upgrade. ### R Continued work on the build system to adapt to new requirements by CRAN and streamline the submission process. ### Ruby Added some convenient APIs. ### Swift Improved Flight SQL implementation. Recent releases: RS-DATAFUSION-37.0.0 was released on 2024-04-04. ADBC-0.11.0 was released on 2024-03-31. 15.0.2 was released on 2024-03-18. RS-51.0.0 was released on 2024-03-18. RS-DATAFUSION-PYTHON-36.0.0 was released on 2024-03-10. 15.0.1 was released on 2024-03-07. RS-OS-0.9.1 was released on 2024-03-05. ADBC-0.10.0 was released on 2024-02-22. RS-DATAFUSION-36.0.0 was released on 2024-02-19. RS-BALLISTA-0.12.0 was released on 2024-02-06. RS-DATAFUSION-PYTHON-35.0.0 was released on 2024-02-04. JULIA-2.7.1 was released on 2024-02-01. NANOARROW-0.4.0 was released on 2024-02-01. RS-DATAFUSION-35.0.0 was released on 2024-01-25. 15.0.0 was released on 2024-01-21. RS-50.0.0 was released on 2024-01-12. ADBC-0.9.0 was released on 2024-01-08. RS-OS-0.9.0 was released on 2024-01-08. ## Community Health: Community communication continues to be strong. There have been 9 blog posts published to https://arrow.apache.org/blog/ in the last 3 months. The mailing lists are active dev@arrow.apache.org had a 7% decrease in traffic in the past quarter (612 emails compared to 657) 2517 commits in the past quarter (3% increase) 296 code contributors in the past quarter (16% increase) 1931 PRs opened on GitHub, past quarter (6% increase) 1909 PRs closed on GitHub, past quarter (8% increase) 1633 issues opened on GitHub, past quarter (17% increase) 1196 issues closed on GitHub, past quarter (10% increase) ----------------------------------------- Attachment G: Report from the Apache AsterixDB Project [Till Westmann] ## Description: Apache AsterixDB is a scalable big data management system (BDMS) that provides storage, management, and query capabilities for large collections of semi-structured data. ## Project Status: Current project status: ongoing Issues for the board: none ## Membership Data: Apache AsterixDB was founded 2016-04-19 (7 years ago) There are currently 40 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - No new PMC members. Last addition was Wail Y. Alkowaileet on 2023-11-21. - No new committers. Last addition was Peeyush Gupta on 2023-05-12. ## Project Activity: apache-asterixdb-0.9.8.2 was released on 2024-03-04. apache-asterixdb-0.9.9 was released on 2024-03-04. apache-hyracks-0.3.8.2 was released on 2024-03-04. apache-hyracks-0.3.9 was released on 2024-03-04. Activity: JDBC Driver release 0.9.8.3 is underway. ## Community Health: APE is still facing some issues. A plan has been devised to enforce APEs via JIRA tickets and merge policies. APE 2 (Query Plan Cache) is pending merge. APE 3 (Fixed Point recursion operator for Hyracks) is under review. APE 4 (COPY TO) is resolved and merged. APE 5 (COPY FROM) is also resolved and merged. APE 6 (Compute-storage separation) is merged. We continue to try to bring off list discussions to the dev list. An announcement was made about the time and location of the weekly community meeting. ----------------------------------------- Attachment H: Report from the Apache Attic Project [Herve Boutemy] ----------------------------------------- Attachment I: Report from the Apache Avro Project [Ryan Skraba] ## Description: Apache Avro is a data serialization system with a compact binary format. It is used for storing and transporting schema-driven serialized data. The unique features of Avro include automatic schema resolution: when the reader's expected schema is different from the actual schema with which the data was serialized the data is automatically adapted to meet reader's requirements. ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Avro was founded 2010-04-21 (14 years ago) There are currently 39 committers and 26 PMC members in this project. The Committer-to-PMC ratio is 3:2. Community changes, past quarter: - No new PMC members. Last addition was Michael A. Smith on 2023-08-09. - No new committers. Last addition was Christophe Le Saec on 2023-08-12. ## Project Activity: The last minor release was 1.11.3, over six months ago on 2023-09-23. There has not been a major release for several years, which isn't concerning considering the stability of the project. We expect that there will be both major and minor releases in the upcoming quarter; there's been much more interest on the mailing list and especially volunteers to help with the release. In the last quarter, we've seen quite a bit of changes to Avro SDKs that are not just Java and Rust. This is to be encouraged, especially since we lack committers in almost all the other SDKs. ## Community Health: Mailing Lists: - dev@avro.apache.org had 468 emails (+22% change) - issues@avro.apache.org (mostly notifications) had 754 emails (-15% change) - user@avro.apache.org continues to have very little traffic, less than 17 total JIRA: - 42 issues opened (-9% change) - 40 issues closed (+14% change) Code Repository: - 175 commits in the past quarter (+400% change) - 27 code contributors in the past quarter (+42% change) GitHub: - 169 PRs opened on GitHub, past quarter (33% change) - 195 PRs closed on GitHub, past quarter (71% change) Our project typically has waves of activity and inactivity, and our last quarter was pretty quiet. These numbers are in line with our typical activity over the last year. ----------------------------------------- Attachment J: Report from the Apache Bloodhound Project [Gary Martin] ----------------------------------------- Attachment K: Report from the Apache bRPC Project [James Ge] ## Description: The mission of Apache bRPC is the creation and maintenance of software related to an industrial-grade RPC framework for building reliable and high-performance services ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache bRPC was founded 2022-12-21 (16 months ago) There are currently 21 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Cai Daojin on 2022-12-21. - Yang Liming was added as committer on 2024-03-24. ## Project Activity: bRPC 1.8.0 was released on February 2024 with the following updates: - Support multi bthread worker group with tag - Support user callback after sending response before request/response object destruction - Support url safe base64 - Support loongarch64 - Support compile with boringssl - Support user fields of baidu protocol - Support client ALPN - Support c++20 coroutine - Support grpc health check - Support A Multiple Producer, Single Consumer Queue - Support async logging - Support memory builtin service ## Community Health: Yang Liming was added as new committer in last month. Liming started contributing PRs about 2 years ago, some PRs are large and really value-able to bRPC, namely adding multiple task groups to the bthread. Committers take turns to respond user emails and issues on a weekly basis. During the past quarter, about 60 new emails were received and answered weekly. 148 commits were made in the past quarter by 29 code contributors. ----------------------------------------- Attachment L: Report from the Apache Calcite Project [Benchao Li] ## Description: Apache Calcite is a highly customizable framework for parsing and planning queries on data in a wide variety of formats. It allows database-like access, and in particular a SQL interface and advanced query optimization, for data not residing in a traditional database. Avatica is a sub-project within Calcite and provides a framework for building local and remote JDBC and ODBC database drivers. Avatica has an independent release schedule and its own repository. ## Project Status: There are no issues requiring board attention. ## Membership Data: Apache Calcite was founded 2015-10-22 (8 years ago) There are currently 74 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 5:2. Community changes, past quarter: - Sergey Nuyanzin was added to the PMC on 2024-03-05 - No new committers. Last addition was Hongyu Guo on 2023-11-03. It's worth mentioning that a few people in Calcite PMC have been invited as ASF members this year: - Benchao Li - Francis Chuang - Ruben Quesada Lopez - Sergey Nuyanzin ## Project Activity: There is no release rolled out in Q1 yet, but we have planned to release avatica 1.25.0 and calcite 1.37.0 lately. For now, avatica 1.25.0 RC0 is in voting stage, and calcite 1.37.0 will be kicked off just after avatica 1.25.0 is released since we have a few co-related issues for these two versions. ## Community Health: The community maintains a super healthy status, due to the new invitation of PMC member, previously it's healthy. Most of the statistics are steady compared to last quarter, except a slight decrease for the last three weeks. I assume the reason would be that we are in the process of calcite 1.37.0 release.It's a little bit longer than usual, the reason is that we have a few co-related issues for calcite and avatica, and we need to release avatica before calcite. The number of non-committer (contributor) commits per month: +------+-------+---------------------+ | year | month | contributor_commits | +------+-------+---------------------+ | 2024 | 1 | 20 | | 2024 | 2 | 20 | | 2024 | 3 | 14 | +------+-------+---------------------+ The number of active reviewers per month: +------+-------+------------------+ | year | month | active_reviewers | +------+-------+------------------+ | 2024 | 1 | 6 | | 2024 | 2 | 7 | | 2024 | 3 | 6 | +------+-------+------------------+ Top reviewers in the last 3 months: +---------------------------------------+---------+ | committer | reviews | +---------------------------------------+---------+ | hongyu guo | 15 | | Mihai Budiu | 13 | | Tanner Clary | 10 | +---------------------------------------+---------+ ----------------------------------------- Attachment M: Report from the Apache CarbonData Project [Liang Chen] ## Description: - The Apache CarbonData is data store solution for fast analytics on Big Data platforms (including Apache Hadoop, Apache Spark, Apache Flink among others) to help speed up queries an order of magnitude faster over petabytes of data, with the aim of using a unified file format to satisfy all kinds of data analysis cases. ## Issues: - There are no new issues requiring board attention at this time. ## Activity: - Last 3 months, we focused on bugfixs and discussed some good points in dev mailing list: - Liang Chen as release manager , finished 2.3.1 release. - David caiqiang fixed CarbonData integration issues, made the CI run properly. - David is working Spark integration upgrade as per dev mailing discussion : https://lists.apache.org/thread/bskfdyqfhsdk9jb56otc2rc3l3y8781c - hulk optimized documents - Bo xu is working some examples, how to use AI notebook to exist history carbondata - Jacky Li started discussion thread for C++ implementation for Carbondata reader and writer : https://lists.apache.org/thread/xt99wj4lk5gzgyymg4wbmmtt1q95lyfv ## Health Report: - Commit activity: - 13 commits in the past quarter - 4 code contributors in the past quarter ## Releases: * currently , community is working for upgrade spark version as per this discussion : https://lists.apache.org/thread/bskfdyqfhsdk9jb56otc2rc3l3y8781c * 2.3.1 was released on 2023-11-25. * 2.3.0 was released on 2022-01-24. * 2.2.0 was released on 2021-08-05. - ## Project Composition: - There are currently 28 committers and 19 PMC members in this project. - The Committer-to-PMC ratio is roughly 7:5 ## Community changes, past quarter: - new contributor git-hulk : https://github.com/apache/carbondata/commits?author=git-hulk - Bo Xu was added to the PMC on 2023-04-22 - Brijoo Bopanna was added to the PMC on 2022-09-24 ## Notable mailing list trends:Mailing list activity stays at a high level - dev@carbondata.apache.org: - 158 subscribers (change 8): - dev@carbondata.apache.org had a 557% increase in traffic in the past quarter (125 emails compared to 19): ## Github issues activity: - 5 issues be handled ## Github PR activity: - 6 PRs opened on GitHub, past quarter - 8 PRs closed on GitHub, past quarter ----------------------------------------- Attachment N: Report from the Apache Causeway Project [Jörg Rade] ## Description: The mission of Causeway is to enable the rapid development of maintainable domain-driven apps in Java. ## Issues: There are no issues requiring board attention at this time. ## Membership Data: Apache Causeway was founded 2012-10-17 (~11 years ago). There are currently 15 committers and 15 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - None ## Project Activity: In this quarter we released Causeway 2.0.0 (based on Spring Boot 2.x) and also Causeway 3.0.0 (based on Spring Boot 3.x) [1] We're currently working on squashing minor bugs, adding some features, and also continuing to flesh out our demo/tutorial app [2] to provide an improved on-ramp for folks discovering the framework. We have now moved all tooling artifacts out of the framework, as those were never planned to be part of the releases. They have their new home at [3]. We are also starting to promote the framework to extend our user base, with a couple of talks accepted for conferences later in the year [4], [5]. An article on InfoQ is also in the works. ## Community Health: This is a mature project and the framework is generally stable. We are continuing to see good engagement on and new sign-ups to our slack channel, which the community seems to much prefer over the users mailing list. Nevertheless, we continue to ensure that all relevant information are cross-posted to users@ and dev@ where necessary. ## References (links) [1] https://causeway.apache.org/relnotes/latest/about.html [2] https://github.com/apache/causeway-app-referenceapp [3] https://github.com/apache-causeway-committers/causewaystuff [4] https://jconeurope2024.sched.com/event/1YwRx/replacing-the-gearbox-while-driving-down-the-autobahn [5] https://jaxlondon.com/microservices/modular-monoliths-apache-causeway/ ----------------------------------------- Attachment O: Report from the Apache Celeborn Project [Keyong Zhou] The Apache Celeborn is an intermediate data service for Big Data compute engines (i.e. Apache Spark, Apache Flink, Apache Hadoop, etc.) to boost performance, stability, and flexibility. Intermediate data typically include shuffle and spilled data. The project state is New. It graduated on 2024-03-21. The project has completed the necessary graduation tasks[1], including update incubator status records, source repo changes, update website, pom.xml, and other resources to point to the new repository location. There are no Board-level issues at this time. Two releases were published in the past quarter: 2024-2-6 Release 0.4.0-incubating, 2024-1-8 Release 0.3.2-incubating The project stays active. In the last quarter, one new PPMC and two new committers were added, the number of contributors reaches 83. The key features the project is working on include dashboard, memory storage, enhanced AQE support, and authentication. Also there are planned key features, including support Tez, enhance Flink integration with Reduce Partition, support Object storage, adaptivity in splitting partitions, etc. The community plans to make at least two new releases in the current quarter. The project has written a draft to press@apache.org to make a major announcement for its graduation. The press has reviewed and commented with a question about which two quotes should be included in the announcement, the PMC has discussed and replied. The most recent date on which a committer was added is 2024-03-21, and the most recent date on which PMC member was added is 2024-02-24. There are no known branding or naming issues, either in the project or externally. There are no known legal issues or questions. [1] https://github.com/apache/celeborn/issues/2415 ----------------------------------------- Attachment P: Report from the Apache Celix Project [Pepijn Noltes] ## Description: Apache Celix is an implementation of the OSGi specification adapted to C and C++. It is a framework to develop (dynamic) modular software applications using component and/or service-oriented programming. ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Celix was founded 2014-07-16 (10 years ago) There are currently 17 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 9:5. Community changes, past quarter: - No new PMC members. Last addition was Peng Zheng on 2022-10-16. - No new committers. Last addition was Zhenbao on 2022-10-19. ## Project Activity: - Several improvements to the build configuration. - Several bug fixes. - Support added for typed elements in the C array list impl. - Support for (typed) array list added to C properties api.. - Refactoring of service usage api. - Event Admin implementation. ## Community Health: Although we are seeing a decrease in commits (-30%), in my opinion the community is still healthy. Decrease in commits could be due to the increased qualities of commits, we are working towards a 95% or higher line coverage. In practice this means that newer commits/PRs contain more testing and error injection based testing. I expect this could be one of the reasons we see a decrease in commits. ----------------------------------------- Attachment Q: Report from the Apache CXF Project [Daniel Kulp] ## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Without any releases done in the last period, quite a bit of effort was spent preparing patch releases. On a big positive note, these were the first releases not performed by dkulp in a very long time. Spreading the knowledge and getting others involved in the release process worked fairly well. The releases did fix a CVE that was then publicly disclosed. Other activity: 1) There is some effort to get CXF building/testing fully with IBM JDK's. We've run into some differences in the JIT's that are causing some failures that we are trying to track down. Some are definite behavior changes between IBM and OpenJDK that we can adjust for. Still investigating others. 2) Fedix also had a release to bump up to the latest main CXF releases as well as bump a bunch of other dependencies. Also fixed a few timeouts and other bugs. Recent releases: Apache CXF Fediz 1.6.2 was released on 2024-03-25. 3.5.8 was released on 2024-03-12. 3.6.3 was released on 2024-03-12. 4.0.4 was released on 2024-03-12. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon. We are receiving a steady stream of Pull Requests, which is good. However, most are "one offs" from individuals submitting a single PR. We're trying to get some people to continue contributing other updates/fixes to become committers, but due to the maturity of the project, the "one offs" is definitely the norm. ----------------------------------------- Attachment R: Report from the Apache DataFu Project [Eyal Allweil] ## Description: The mission of Apache DataFu is the creation and maintenance of software related to well-tested libraries that help developers solve common data problems in Hadoop and similar distributed systems ## Project Status: Current project status: Ongoing (low) Issues for the board: None ## Membership Data: Apache DataFu was founded 2018-02-21 (6 years ago) There are currently 19 committers and 12 PMC members in this project. The Committer-to-PMC ratio is roughly 5:3. Community changes, past quarter: - No new PMC members. Last addition was Ohad Raviv on 2023-02-06. - No new committers. Last addition was Ohad Raviv on 2019-07-27. ## Project Activity: DataFu-Spark-2.0.0 was released on 2024-01-14. Another release of DataFu-Spark is planned soon, which should catch us up with the latest Spark version available. ## Community Health: Still working to convert at least one non-committer-contributor to committer, still have at least one promising candidate. ----------------------------------------- Attachment S: Report from the Apache DB Project [Bryan Pendleton] ## Description: The mission of the Apache DB project is to create and maintain commercial-quality, open-source, database solutions based on software licensed to the Foundation, for distribution at no charge to the public. The Apache DB TLP consists of the following subprojects: o Derby : a relational database implemented entirely in Java. o JDO : focused on building the API and the TCK for compatibility testing of Java Data Object implementations providing data persistence. o Torque : an object-relational mapper for Java. ## Project Status: Current project status: Ongoing, with moderate activity Issues for the board: none ## Membership Data: Apache DB was founded 2002-07-16 (22 years ago) There are currently 48 committers and 45 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Tobias Bouschen on 2023-08-27. - No new committers. Last addition was Max Philipp Wriedt on 2023-04-14. ## Project Activity: Several security issues were brought to the DB project's attention this quarter, and were addressed by various community members: - JDO community addressed an XSS vulnerability in the project's old archived Javadocs by removing the no-longer-required Javadocs from the project website. - DB community addressed an XSS vulnerability in the (retired) ddlutils Javadocs by removing the no-longer-required Javadocs from the project website. - Derby community examined an arbitrary file write vulnerability in the Derby client libraries and determined that it was best addressed via a combination of - documentation of the requirement for users to use this particular log-tracing feature with care, - and notice to known clients. Apache security team assisted with the resolution of these security issues and we are grateful as always for their prompt and thorough help! Torque team are readying a new release and discussing whether it should be classified as a minor release or a major release based on its changes. It would probably become either release 5.2 or 6.0, depending on the outcome of the discussions. Derby team have been verifying Derby compatibility with JDKs 21 and 22. No new problems have been revealed. JDO team have been investigating several issues uncovered by runs of the TCK. ## Community Health: DB project health was good over the winter. All the project teams were actively discussing development issues and working on fixes and enhancements. ----------------------------------------- Attachment T: Report from the Apache Directory Project [Shawn McKinney] ## Description: The Apache Directory TLP consists of the following sub-projects: - ApacheDS: An extensible and embeddable directory server entirely written in Java, which has been certified LDAPv3 compatible by the Open Group. - LDAP API: An ongoing effort to provide an enhanced LDAP API, as a replacement for JNDI and the existing LDAP API (jLdap and Mozilla LDAP API). This is a "schema aware” API with some convenient ways to access all types of LDAP servers. - Studio: A complete directory tooling platform intended to be used with any LDAP server however it is particularly designed for use with ApacheDS. It is an Eclipse RCP application, composed of several Eclipse (OSGi) plugins. - Fortress: A standards-based authorization platform that provides role-based access control, delegated administration and password policy services with an LDAP backend. - Kerby: An implementation of Kerberos v5 protocol and contains various tools to access and manage kerberos principals and keytabs. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile. - Mavibot: An embeddable key-value database library with MVCC (Multi Version Concurrency Control) support. - SCIMple: An implementation of SCIM v2.0 specification. ## Project Status: Current project status: The commentary the past few quarters over inactivity in the sub-projects has not been lost on the PMC. We understand the challenges of adequately maintaining such a large code base with what basically amounts to a skeleton crew. Fortunately, that shortage is mediated by understanding what's at stake and oversight by the Board to ensure we don't forget. At the same time, there's a steady stream of help coming in from the community in the form of PR's and JIRA issues being reported. Keeping it all running smoothly won't be easy but we're determined to make it work and aren't giving up anytime soon. Issues for the board: There are no issues requiring board attention at this time. ## Membership Data: Apache Directory was founded 2005-02-22 (19 years ago) There are currently 59 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:3. Community changes, past quarter: - No new PMC members. Last addition was Brian Demers on 2023-10-23. - No new committers. Last addition was Fredrik Roubert on 2023-07-10. ## Project Activity: Per sub-project: - ApacheDS: There was a security incident reported that apparently referenced an condition that was fixed long ago. The project team was responsive and returned to the reporter with an answer in about 24 hours. - LDAP API: had a release last quarter. Ongoing work to keep the dependencies updated. Also waiting on MINA 2.2.4 updates containing SSL fixes. - Studio: activity has increased as different project members have stepped up and are working thru issues. Also, removing kerberos support after that protocol was discontinued from the Apache Directory Server. - Fortress: low activity. Dependencies are being kept up to date. - Kerby: low activity but being maintained. - Mavibot: low activity. Plans are being made for an upcoming release. - SCIMple: good activity. Many pull requests from the community. Also had a release last quarter. ## Community Health: 1Q activity remains low but work has been steady. PMC has demonstrated a committment to keeping the sub-projects adequately maintained. ## Releases: - Apache LDAP API 2.1.6: 2024-02-06 - Apache Directory SCIMple: 1.0.0-M1: 2024-01-18 ----------------------------------------- Attachment U: Report from the Apache DolphinScheduler Project [Lidong Dai] ## Description: Apache DolphinScheduler is a cloud-native workflow orchestration platform with powerful user interface, dedicated to solving complex task dependencies in the data pipeline and providing various types of jobs available `out of the box` ## Project Status: Current project status:Healthy Issues for the board: There are no issues for the board at this time ## Membership Data: Apache DolphinScheduler was founded 2021-03-17 (3 years ago) There are currently 58 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Hua Jiang on 2023-08-01. - Changhai Fu was added as committer on 2024-01-06 ## Project Activity: - 3.2.1 was released on 2024-2-11 - 3.2.0 was released on 2023-10-17. ## Community Health: - we have held a community online Meeting and a Meetup in March. - 9% decrease in dev mailing list in traffic in the past quarter, which means we need to discussed issues or features more frequently. ----------------------------------------- Attachment V: Report from the Apache Druid Project [Gian Merlino] ## Description Apache Druid is a high performance real-time analytics database. It is designed for workflows where low-latency query and ingest are the main requirements. It implements ingestion, storage, and querying subsystems. Users interface with Druid through built-in SQL and JSON APIs, as well as third-party applications. Druid has an extensive web of connections with other Apache projects: Calcite for SQL planning, Curator and ZooKeeper for coordination, Kafka and Hadoop as data sources, Avro, ORC, or Parquet as supported data input formats, and DataSketches for scalable approximate algorithms. Druid can also be used as a data source by Superset. ## Issues There are no issues requiring board attention at this time. ## Activity Our last major release was Druid 29.0.0, which contained 350 new features, bug fixes, performance enhancements, documentation improvements, and additional test coverage from 67 contributors. It was followed by a patch release, Druid 29.0.1, containing various bug fixes. I usually get mailing list and GitHub activity numbers from https://reporter.apache.org/wizard/statistics?druid, but am not seeing these metrics on the site today. Therefore, I will omit them from this report and check again next cycle. My subjective sense is that that community activity is more or less stable in terms of number of contributors, and in terms of number of new PRs being raised and merged. Our Slack workspace at https://apachedruidworkspace.slack.com/ stands at 2,556 members, up 125 members (5%) since our last report. A Helm chart for Druid was contributed after the helm/charts repository on GitHub was deprecated. However, we have not included this in any release since then, due to uncertainty about whether or not we need to perform formal IP clearance for this contribution. Due to lack of volunteers to do this specific work, it has been removed from the Apache Druid repository. Since this matter is now closed, I will not mention it in future reports. ## Membership data Apache Druid was founded 2019-12-17 (4 years ago) There are currently 67 committers and 37 PMC members in this project. The Committer-to-PMC ratio is roughly 9:5. Community changes, past quarter: - Amatya Avadhanula was added to the PMC on 2024-03-19 - Laksh Singla was added to the PMC on 2024-03-19 - Zoltan Haindrich was added as committer on 2024-03-21 ## Recent releases - 29.0.1, a patch release, on 2024-04-02. - 29.0.0, a major release, on 2024-02-20. - 28.0.1, a patch release, on 2023-12-21. ## Development activity by the numbers Omitted from this report due to issues with I am having with reporter.apache.org. I will check this again next cycle. As mentioned earlier in the report, my subjective sense is that that community activity is more or less stable in terms of number of contributors, and in terms of number of new PRs being raised and merged. ----------------------------------------- Attachment W: Report from the Apache Dubbo Project [Jun Liu] ## Description: Apache Dubbo is an easy-to-use Web and RPC framework that provides different language implementations, service discovery, traffic management, observability, security, tools, and best practices for building enterprise-ready microservices. ## Project Status: Current project status: Ongoing: With high activity. Issues for the board: I see Cdutz mentioned about the pmc/committer ratio issue in the last board report feedback '7:2 is a very high ratio that only very few projects have a higher one. Possibly worth discussing the PMC-bar aswell?' I also think the community should discuss this pmc/committer ratio thing in the private emailing list, but unfortunately I didn't have time to do it last quarter due to personal reasons. I think I will initiate a discussion in this issue in the coming quarter to see everyone's opinions. FYI, we nominated a new PMC member last quarter. 'misunderstanding of the role of the chair "running the community"', I believe I have the same understanding of the responsibilities and roles of being chair of the project, I also have explained that in the original thread. It's mainly the language barrier for me as an ESL speaker caused misunderstanding by saying "running the community". Within that context, I was trying to say "According to my experiences from contributing to and encouraging others to participate in this opensource project, I think how we should find new committers..." ## Membership Data: Apache Dubbo was founded 2019-05-15 (5 years ago) There are currently 101 committers and 29 PMC members in this project. The Committer-to-PMC ratio is roughly 7:2. Community changes, past quarter: - No new PMC members. Last addition was YouWei Chen on 2023-04-21. - Qiwen Tang was added as committer on 2024-03-03 - Jian Zhong was added as committer on 2024-03-06 - One PMC member nomination in progress - 5 or more committers nominations in this quarter(with discussion or voting thread ongoing). ## Project Activity: - 3.3.0-beta.2 was released on 2024-03-26. - 3.2.11 was released on 2024-02-02. - 3.2.10 was released on 2023-12-19. - 3.2.0-RC1 dubbo-go is about to be released. ## Community Health: especially with some of our side projects like apache/dubbo-kubernetes, apache/dubbo-samples and some new language implementations like apache/dubbo-go, apache/dubbo-js, and apache/dubbo-rust.  Recently, we have been using the opportunity of Google Summer of Code to attract more college students to contribute to the community. Both to establish bond with talented contributors in advance and to encourage contributions among students, as a result, we saw more than 10+ pull requests to apache/dubbo-go-samples and 20+ pull requests to apache/dubbo-samples. For GSoC program, we submitted 4 ideas and received around 15 proposals this year. ----------------------------------------- Attachment X: Report from the Apache Fineract Project [James Dailey] ## Description: The mission of Apache Fineract is the creation and maintenance of software related to a core banking platform that provides a reliable, robust, and affordable solution for entrepreneurs, financial institutions, and service providers to offer financial services to the world's underbanked and unbanked. ## Project Status: Current project status: At Risk Issues for the board: Themes are long running CVEs and Security issues, insufficient contributor engagement, delayed releases. ## Membership Data: Apache Fineract was founded 2017-04-18 (7 years ago, contributed by Mifos) There are currently 51 committers and 24 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. - Adam Saghy was the last addition to the PMC on July 10th, 2023. - No new committers. Last addition was Bharath Gowda on 2022-12-14. ## Project Activity: Release 1.9 on 2024-01-12 There was an issue with the release in that it was held up for CVEs that had been fixed in the code but we didn't want to make visible until we released the CVE formally. Unfortunately the release was already half way there.. and was public weeks before we made it clear that it was "released". This led to the situation where a Vendor, Fiter.io was promoting the release before we were public. The release process was not followed properly. We are trying to get release 1.10 out shortly. ## Community Health: There is very little discussion on list. Repeating some issues: Whilst our technology solution is gaining strength, we have several gaps in both a collective understanding of a shared roadmap and a lack of a model where multiple significant “contributor groups” are actively developing. Being a ‘fan’ of the project is very welcome but insufficient for an healthy open source project. Per a suggestion after the October 2023 Board report, a "Guild" or Consortium of supporters based on commercial companies that are using the software is being proposed. After making several efforts, and gathering some interest from 6 entities to contribute about $2,500 per quarter each, it's been bogged down by some participant conditions. Its too much effort for me, for too little forward progress - I'm not sure this is going forward. ###Deprecating Fineract-CN: We fully deprecated Fineract-CN and infra archived the repos. An unfortunate side effect is the the docker hub still has earlier version that were never voted on or released. ###Approachability: We have a goal of making it more approachable with improvements to documentation. Some conversations on list about this. See previous reports for more commentary on this. ###Authentication and Security Framework: We published a "how to secure Fineract", which we hope will help. Securing Fineract. https://cwiki.apache.org/confluence/display/FINERACT/Securing+Fineract The home grown security framework (authentication, authorization, and access control mechanisms) remains an issue of concern. We ask our community users to please be aware that they should NOT run this without understanding the ins and outs of running the software securely. I've suggested that there are Vendors that could help with that. I have a concern that entities are putting this project "as is" directly on the internet, hosting lending activities and potentially banking activities without any proper security measures. ###Emeritus status: We are delayed in our plans to remove people who are no longer active, per the PMC decision of May 2023. We have this as an action item. ###Powered By listing We (I) have started discussing the idea of putting "powered by" listings of companies using the software on our site, and the potential for thank you pages. https://apache.org/foundation/marks/linking#projectthanks We will be keeping ASF Marketing & Publicity in the loop. ----------------------------------------- Attachment Y: Report from the Apache Flagon Project [Joshua C. Poore] ## Description: The mission of Apache Flagon is the creation and maintenance of software related to thin-client behavioral logging capability useful for business analytics, usage analytics, usability and user testing ## Project Status: Current project status: Apache Flagon is a New TLP Issues for the board: No issues at this time. ## Membership Data: Apache Flagon was founded 2023-03-21 (a year ago) There are currently 18 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Jason Young on 2023-08-06. - Evan Jones was added as committer on 2024-02-13 ## Project Activity: Contributions have been steady this quarter on both Flagon Distill and UserALE.js projects. These have both kept code base consistent with security and market expectations, as well as have added additional features to highly marketable products (Distill). This quarter the community coordinated in the release of UserALE.js 2.4.0; this release recently passed successful VOTE as per ASF policies. Follow-on actions for distribution and announcement are forthcoming. Note as per comments from the last board report: the community provides Elasticsearch backend examples to support community growth and product adoption. However, these examples are not distributed as ASF releases, and are couched as examples. A few committers are working on other examples that utilize other ASF products such as Kafka and Beam. ## Community Health: Community activity has been consistent and PMC has been involved in discussions and VOTEs. 1 new committer was added this quarter. There are current ongoing discussions with some committers who may wish to transition to PMC role. Newer committers have also done a great job introducing the project to new potential contributors. We expect to see new committers and PMC in the next quarter. ----------------------------------------- Attachment Z: Report from the Apache Flex Project [Harbs] ## Description: The mission of the Apache Flex project is to create and maintain software related to the development of expressive web applications that deploy to all major browsers, desktops and devices (including smartphones, tablets and tv) ## Project Status: Current project status: The project is stable with little activity Issues for the board: None ## Membership Data: Apache Flex was founded 2012-12-19 (11 years ago) There are currently 67 committers and 45 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Greg Dove on 2023-03-03. - No new committers. Last addition was Greg Dove on 2016-09-07. ## Project Activity: There is little activity. There were some commits this quarter updating supported versions. ## Community Health: There was a slight uptick in activity this quarter, but it's still very low volume. ----------------------------------------- Attachment AA: Report from the Apache Fluo Project [Keith Turner] ## Description: The mission of Apache Fluo is the creation and maintenance of software related to the storage and incremental processing of large data sets ## Project Status: Current project status: Dormant Issues for the board: none ## Membership Data: Apache Fluo was founded 2017-07-18 (7 years ago) There are currently 15 committers and 12 PMC members in this project. The Committer-to-PMC ratio is 5:4. Community changes, past quarter: - No new PMC members. Last addition was Brian Frank Loss on 2022-02-01. - No new committers. Last addition was Brian Frank Loss on 2022-02-02. ## Project Activity: There was very little activity this quarter. An update was made to Fluo uno to support Max OSX. Some dependencies were updated. The last release was Fluo 2.0.0 in April 2023. ## Community Health: There was only a single update made this quarter from a new non committer. There was no activity on the mailing list. ----------------------------------------- Attachment AB: Report from the Apache Geronimo Project [Jean-Louis Monteiro] ----------------------------------------- Attachment AC: Report from the Apache Griffin Project [William Guo] ## Description: The mission of Apache Griffin is the creation and maintenance of software related to a data quality solution for big data, including both streaming and batch mode. It offers an unified process to measure data quality from different perspectives. ## Project Status: Current project status: The project activity is low. But we are developing our 1.0.0 on pr. Issues for the board: None ## Membership Data: Apache Griffin was founded 2018-11-21 (5 years ago) There are currently 21 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 6:5. Community changes, past quarter: - No new PMC members. Last addition was Chitral Verma on 2020-05-06. - No new committers. Last addition was Chitral Verma on 2020-05-05. ## Project Activity: We are developing 1.0.0 version according to our documented architecture. Hope we can merge our PR into our master next quarter. ## Community Health: The community activity is low, hope it will change after we release version 1.0.0 ----------------------------------------- Attachment AD: Report from the Apache Hadoop Project [Xiaoqiao He] ## Description: The mission of Hadoop is the creation and maintenance of software related to Distributed computing platform ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Hadoop was founded 2008-01-16 (16 years ago) There are currently 245 committers and 125 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Shilun Fan on 2023-10-31. - No new committers. Last addition was Simbarashe Dzinamarira on 2023-09-27. ## Project Activity: 3.4.0 was released on 2024-03-17. hadoop-thirdparty-1.2.0 was released on 2024-02-07. 3.3.6 was released on 2023-06-25. 3.3.5 was released on 2023-03-23. ## Community Health: - Mailing list activity: common-dev@hadoop.apache.org had a 23% increase in traffic in the past quarter (557 emails compared to 450) common-issues@hadoop.apache.org had a 71% increase in traffic in the past quarter (8139 emails compared to 4748) hdfs-dev@hadoop.apache.org had a 38% increase in traffic in the past quarter (588 emails compared to 424) hdfs-issues@hadoop.apache.org had a 126% increase in traffic in the past quarter (3887 emails compared to 1717) mapreduce-dev@hadoop.apache.org had a 27% increase in traffic in the past quarter (338 emails compared to 265) mapreduce-issues@hadoop.apache.org had a 96% increase in traffic in the past quarter (240 emails compared to 122) yarn-dev@hadoop.apache.org had a 10% increase in traffic in the past quarter (387 emails compared to 350) yarn-issues@hadoop.apache.org had a 80% increase in traffic in the past quarter (1679 emails compared to 931) - JIRA activity: 283 issues opened in JIRA 210 issues closed in JIRA - Commit activity: 486 commits in the past quarter (19% increase) 59 code contributors in the past quarter (-16% change) - GitHub PR activity: 313 PRs opened on GitHub, past quarter (20% increase) 266 PRs closed on GitHub, past quarter (16% increase) ----------------------------------------- Attachment AE: Report from the Apache HAWQ Project [Lei Chang] ## Description: The mission of Apache HAWQ is the creation and maintenance of software related to a cloud native SQL query engine that combines the key technological advantages of an MPP database with the scalability and convenience of Hadoop. ## Project Status: Current project status: given there were little or no activity in last few months, it is time to consider moving Apache HAWQ project to the Attic and dissolving the PMC accordingly. Currently, there are some ongoing discussions about the retirement of Apache HAWQ project in @private and @dev mail lists. Issues for the board: need help from board to guide Apache HAWQ project through the process of its retirement. ## Membership Data: Apache HAWQ was founded 2018-08-15 (6 years ago). There are currently 69 committers and 46 PMC members in this project. The Committer-to-PMC ratio is 3:2. Community changes, past quarter: - No new PMC members. Last addition was Wan Chiyang on 2022-01-25. - No new committers. Last addition was Wan Chiyang on 2021-02-20. ## Project Activity: 3.0.0.0 was released on 2021-08-18. There were no commit in last 6 months and no release in last 3 years. ## Community Health: Overall community health is not good as there are no activities given the inactivity of the project. ----------------------------------------- Attachment AF: Report from the Apache HBase Project [Duo Zhang] ## Description: Apache HBase is an open-source, distributed, versioned, non-relational database. Apache HBase gives you low latency random access to billions of rows with millions of columns atop non-specialized hardware. hbase-thirdparty is a set of internal artifacts used by the project to mitigate the impact of our dependency choices on the wider ecosystem. hbase-connectors is a collection of integration points with other projects. The initial release includes artifacts for use with Apache Kafka and Apache Spark. hbase-filesystem contains HBase project-specific implementations of the Apache Hadoop FileSystem API. It is currently experimental and internal to the project. hbase-operator-tools is a collection of tools for HBase operators. Now it is mainly for hosting HBCK2. hbase-native-client is a client library in C/C++, in its early days. hbase-kustomize is for deploying HBase on kubernetes, still under development. ## Project Status: Current project status: ongoing Issues for the board: While resolving the issue about adding 'TM' superscript on hbase.a.o, the trademark team said it should be '®' instead of 'TM', and also wanted to add some notes on the footer of the page. The notes have already been presented on the index page of hbase.a.o, we replied to the email to ask whether this is enough but got no response yet. No action has been made yet. ## Membership Data: Apache HBase was founded 2010-04-21 (14 years ago) There are currently 105 committers and 59 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Bryan Beaudreault on 2023-10-17. - Istvan Toth was added as committer on 2024-04-02 ## Project Activity: 2.5.8 was released on 2024-03-12. hbase-thirdparty-4.1.6 was released on 2024-03-04. 3.0.0-beta-1 was released on 2024-01-14. We have started the vote for releasing 2.6.0. The first RC sank because of a compatibility issue. Now we are still discussing how to deal with the hbase-compression-xz module. https://lists.apache.org/thread/g26lgy9z840ovo02vq75hys6krbmvxon https://lists.apache.org/thread/on62z40rwotrcc8w1l5n55rd4zldho5g 3.0.0-beta-1 has been released. This is the first beta release for the 3.0.0 release line. https://lists.apache.org/thread/lq19rwgy7q668ps8b4lz53my8m16t3yc For 3.0.0-beta-2, we found a place where we still leaked the internal zookeeper to end users, so we are still discussing how to deal with it. It needs to allow users to use something like a URL/URI for specifying the hbase cluster they want to connect to, instead of zookeeper connection string and path. https://lists.apache.org/thread/233p65w5hj80m9plzjgvr8v16zff2d7y ## Community Health: dev@hbase.apache.org: 962 subscribers(960 in the previous quarter) 519 emails sent to list(420 in the previous quarter) user@hbase.apache.org: 1991 subscribers(1986 in the previous quarter) 36 emails sent to list(31 in the previous quarter) user-zh@hbase.apache.org 79 subscribers(77 in the previous quarter) 11 emails sent to list(17 in the previous quarter) - JIRA activity: 187 issues opened in JIRA, past quarter (20% increase) 132 issues closed in JIRA, past quarter (8% increase) - Commit activity: 568 commits in the past quarter (21% increase) 41 code contributors in the past quarter (2% increase) - GitHub PR activity: 193 PRs opened on GitHub, past quarter (19% increase) 183 PRs closed on GitHub, past quarter (24% increase) The community is overall healthy. We will release 2.6.0 soon, and work towards the 3.0.0-beta-2 release. ----------------------------------------- Attachment AG: Report from the Apache Incubator Project [Justin Mclean] # Incubator PMC report for April 2024 The Apache Incubator is the entry path into the ASF for projects and codebases wishing to become part of the Foundation's efforts. There are currently 29 podlings incubating. In March, podlings executed 3 distinct releases and 2 IP clearances occurred. Several incubating proposals have been discussed on the mailing list, and several podlings graduated last month. SDAP is up for graduation this month and the Milagro podling has retired. 4 podlings, Annotator, Pony Mail, Liminal and Teaclave, failed to report and will be asked to report next month. An issue arose regarding the misuse of the trademarks of Apache AGE (a graduated project), and it was asked where the incubator might have gone wrong in this process. The incubator did pick up this issue, which delayed graduation. Assurances were given that a 3rd party would stop using the name AgeDB, but it seems they did not do that. We decided to drop the requirement of having the word incubating in podling domain names. ## Community ### New IPMC members: - Charles Zhang - Francis Chuang - Hao Ding - Hulk Lin - Hyukjin Kwon - Richard Zowalla - Yonglun Zhang - Zhang Yonglun ### People who left the IPMC: - None ## New Podlings - Amoro - GraphAr - HertzBeat - StormCrawler ## Podlings that failed to report, expected next month - Annotator - Pony Mail - Liminal - Teaclave ## Graduations - Pekko - Celeborn - Paimon The board has motions for the following: - SDAP ## Releases The following releases entered distribution during the month of March: - Pekko SBT Paradox 1.0.1 - Sdap 1.2.0 - Streampark 2.1.3 ## IP Clearance - Pekko Connectors AWS SPI - PyHive ## Legal / Trademarks - N/A ## Infrastructure - N/A ## Miscellaneous w/r/t Pony Mail the following comment was added, but omitted since the podling did not report this month: [PJF] There is minimal activity but discussions on graduating PonyMail seem blocked by the fact that the community is small but that the tool is too important to retire. ## Table of Contents [Amoro](#amoro) [Fury](#fury) [Gluten](#gluten) [HoraeDB](#horaedb) [HugeGraph](#hugegraph) [Livy](#livy) [Pegasus](#pegasus) [ResilientDB](#resilientdb) [StormCrawler](#stormcrawler) [Teaclave](#teaclave) [XTable](#xtable) -------------------- ## Amoro Amoro is a Lakehouse management system built on open data lake formats like Apache Iceberg and Apache Paimon. Amoro has been incubating since 2024-03-11. ### Three most important unfinished issues to address before graduating: 1. Improve the website and transfer it to Apache. 2. Release our first Apache release. 3. Build and grow a diverse community. ### Are there any issues that the IPMC or ASF Board need to be aware of? N/A ### How has the community developed since the last report? This is the first report for Amoro. ### How has the project developed since the last report? This is the first report for Amoro. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: N/A ### When were the last committers or PPMC members elected? 2024-03-11, when the project was accepted into the incubator. ### Have your mentors been helpful and responsive? Yes, Amoro's mentors actively participate in the project, contribute insights, and help advance the project towards graduation. ### Is the PPMC managing the podling's brand / trademarks? Yes, the name "Amoro" has been approved by Mark Thomas, the VP of Brand Management.(https://s.apache.org/lyif8) ### Signed-off-by: - [X] (amoro) Justn Mclean Comments: - [ ] (amoro) Zhongyi Tan Comments: - [X] (amoro) Yu Li Comments: The podling initial setup is in good progress with code repository transferred and website built. Look forward to its first apache release. - [X] (amoro) Xinyu Zhou Comments: - [X] (amoro) Kent Yao Comments: ### IPMC/Shepherd notes: -------------------- ## Fury A blazing fast multi-language serialization framework powered by jit and zero-copy Fury has been incubating since 2023-12-15. ### Three most important unfinished issues to address before graduating: 1. Grow the community(attracting more committers, contributors, and users) 2. Publish Apache releases 3. Improve project documentation and align the implementation of Java/Python/JavaScript/C++/Golang/Rust. ### Are there any issues that the IPMC or ASF Board need to be aware of? None ### How has the community developed since the last report? 1. We started the community vote of the first release. 2. We received 7 new issues and closed 6 issues. 3. Community development wasn't grown too much in last month. The main reason is probably due to core committers were engaged in the first release and the standardization of fury serialization protocol. But there were some new developers continuing contributing to fury in recent months. ### How has the project developed since the last report? 1. Created 28 PR in last month 2. Standardized the fury cross-language serialization protocol, which will make the project develop ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: We haven't make a release since Fury joined Apache incubator. ### When were the last committers or PPMC members elected? We haven't elected new committers or PPMC members. Currently all the committers and PPMC members are the initial committers. ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? No ### Signed-off-by: - [X] (fury) tison Comments: - [X] (fury) PJ Fanning Comments: - [X] (fury) Yu Li Comments: Good to see the first apache release on the way. - [ ] (fury) Xin Wang Comments: - [ ] (fury) Enrico Olivelli Comments: ### IPMC/Shepherd notes: -------------------- ## Gluten Gluten is a middle layer responsible for offloading JVM-based SQL engines' execution to native engines. Gluten has been incubating since 2024-01-11. ### Three most important unfinished issues to address before graduating: 1. Publish 1st Apache release 2. Community Growth Initiative 3. Enhance the website and documentation to meet Apache standards ### Are there any issues that the IPMC or ASF Board need to be aware of? N/A ### How has the community developed since the last report? - The number of fork is 342. - The number of star is 959. - The number of contributors is 118. - Regular monthly meeting. ### How has the project developed since the last report? - Complete to transfer the project source code from oap-project to apache - Complete to set up a website in gluten.apache.org ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2024-03-02 ### When were the last committers or PPMC members elected? 2024-01-11, when the project was accepted into the incubator. ### Have your mentors been helpful and responsive? Indeed, their guidance is valuable for steering the project towards success. ### Is the PPMC managing the podling's brand / trademarks? Yes, everything is fine. ### Signed-off-by: - [X] (gluten) Yu Li Comments: Good to see the initial setup is in good progress and look forward to its first apache release. - [X] (gluten) Wenli Zhang Comments: - [X] (gluten) Kent Yao Comments: Instead of simply attaching star and fork result data, please focus more on the community effort and process behind their growth. - [X] (gluten) Shaofeng Shi Comments: Glad to see the repository be transferred to asf and the website be online. Is there an ETA for the first Apache release? For the community growth, the fork and star number might not be that important, compared with the number of contributors, committers and IPMCs. Please put these numbers ahead of those two. Thank you! - [X] (gluten) Felix Cheung Comments: ### IPMC/Shepherd notes: Justin Mclean: The data of the last release should be the last ASF release. Also, stars and forks are meaningless without context, please provide some more context in your next report. -------------------- ## HoraeDB HoraeDB is a high-performance, distributed, cloud native time-series database. HoraeDB has been incubating since 2023-12-11. ### Three most important unfinished issues to address before graduating: 1. Release more versions under ASF 2. Build a more open community, attract more users. 3. Polish website ### Are there any issues that the IPMC or ASF Board need to be aware of? No ### How has the community developed since the last report? We are planning to host a off-line meetup with one club of Huazhong University of Science and Technology. ### How has the project developed since the last report? 1. We are preparing for a ASF-compliant release. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: We haven't make a release since join Apache incubator, but we're working on it. ### When were the last committers or PPMC members elected? 2023-12-27 ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? Yes ### Signed-off-by: - [X] (horaedb) tison Comments: - [X] (horaedb) Shaofeng Shi Comments: Looking forward to the first Apache release! - [X] (horaedb) Gang Li Comments: - [ ] (horaedb) Von Gosling Comments: ### IPMC/Shepherd notes: Justin Mclean: Please make sure you bring what was dicussed at the offline meeting back to the community. -------------------- ## HugeGraph A large-scale and easy-to-use graph database HugeGraph has been incubating since 2022-01-23. ### Three most important unfinished issues to address before graduating: 1. Release distributed storage module (include PD/store) & make graph computer easy to use 2. Unified different versions & introduce a new Graph Dashboard & LLM/AI system 3. At least 2 new PPMC & 5 committers selected and take deep part in the community ### Are there any issues that the IPMC or ASF Board need to be aware of? None for now ### How has the community developed since the last report? 1. First time taken part in GSoC to let more students participate in the community. 2. Nominated a new PPMC @simon (also is the first one) & 2 new committers 3. At least 7 committers take part in the release processes & 2 of them could handle it by themselves ### How has the project developed since the last report? 1. Release 2 major version 1.2 & 1.3 (And all modules move to Java11 in next release version) 2. Introduce a new repository: hugegraph-ai (About KG/Graph RAG/LLM related system) 3. Fixed 3 security issues & first time communicate with the SEC reporter/finder/SEC Team 4. Keep improving docs & some downloading issues have been fixed. 5. The distributed storage system HugeGraph-PD & HugeGraph-Store is coming soon ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2024-04-01 ### When were the last committers or PPMC members elected? 2024-02-24 ### Have your mentors been helpful and responsive? Thanks for the mentor, no issues to address now ### Is the PPMC managing the podling's brand / trademarks? None ### Signed-off-by: - [ ] (hugegraph) Lidong Dai Comments: - [ ] (hugegraph) Trista Pan Comments: - [ ] (hugegraph) Xiangdong Huang Comments: - [X] (hugegraph) Yu Li Comments: Good to see the community growing at a steady pace. - [X] (hugegraph) Willem Ning Jiang Comments: It's good to see the project community keeps growning. ### IPMC/Shepherd notes: -------------------- ## Livy Livy is web service that exposes a REST interface for managing long running Apache Spark contexts in your cluster. With Livy, new applications can be built on top of Apache Spark that require fine grained interaction with many Spark contexts. Livy has been incubating since 2017-06-05. ### Three most important unfinished issues to address before graduating: 1. Revitalization of the Community 2. Dependable Release Cadence 3. Focus on Contributors rather than primarily on Users (Docs for processes) ### Are there any issues that the IPMC or ASF Board need to be aware of? None ### How has the community developed since the last report? There have been a number of PRs from the community and some activity on the mailing lists. The overall activity is still rather low as to be expected with a mature project even if a podling. Activity should pick up again as we begin to plan our next release. ### How has the project developed since the last report? There have been minor improvements and bug fixes. Most activity would be considered maintenance during this period. Again, once we start the plan for the next release, I believe activity will pick up. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: 2023-10-10 ### When were the last committers or PPMC members elected? October 2023 ### Have your mentors been helpful and responsive? No answer. ### Is the PPMC managing the podling's brand / trademarks? No answer. ### Signed-off-by: - [ ] (livy) Bikas Saha Comments: - [ ] (livy) Luciano Resende Comments: - [X] (livy) Jean-Baptiste Onofré Comments: Great to see new potential contributors joining the Slack channel and mailing list :) - [ ] (livy) Madhawa Kasun Gunasekara Comments: - [X] (livy) Larry McCay Comments: ### IPMC/Shepherd notes: -------------------- ## Pegasus Pegasus is a distributed key-value storage system which is designed to be simple, horizontally scalable, strongly consistent and high-performance. Pegasus has been incubating since 2020-06-28. ### Three most important unfinished issues to address before graduating: 1. Grow the community(attracting more committers, contributors, users). 2. Make more releases in ASF policy regularly. 3. Improve the Pegasus project performance, stability, and usage scenarios. ### Are there any issues that the IPMC or ASF Board need to be aware of? None ### How has the community developed since the last report? 2.5.0 is released on Dec 12, 2023 ### How has the project developed since the last report? 2.6.0 is being prepared for release. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [X] Nearing graduation - [ ] Other: ### Date of last release: 2023-12-12 ### When were the last committers or PPMC members elected? None ### Have your mentors been helpful and responsive? Yes, our mentors gave us a lot of help, including version release, holding meetup, prepare the graduation and etc. ### Is the PPMC managing the podling's brand / trademarks? No Issues that we are aware of. ### Signed-off-by: - [X] (pegasus) Duo Zhang Comments: Let's make the 2.6.0 release soon, and also make some progresses towards graduation. - [ ] (pegasus) Liang Chen Comments: - [ ] (pegasus) Von Gosling Comments: - [ ] (pegasus) Liu Xun Comments: ### IPMC/Shepherd notes: -------------------- ## ResilientDB ResilientDB is a distributed blockchain framework that is open-source, lightweight, modular, and highly performant. ResilientDB has been incubating since 2023-10-21. ### Three most important unfinished issues to address before graduating: 1. Transfer related websites to Apache domain. 2. Grow the community by facilitating more applications being built on ResDB. 3. Improve and extend documentation. ### Are there any issues that the IPMC or ASF Board need to be aware of? No ### How has the community developed since the last report? Regular meeting continues every week. ### How has the project developed since the last report? We launched an [ResView](https://github.com/apache/incubator-resilientdb/pull/138) Application. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: None ### When were the last committers or PPMC members elected? November of 2023 ### Have your mentors been helpful and responsive? The mentors helped tremendously throughout the project build-up and transfer. ### Is the PPMC managing the podling's brand / trademarks? There are no known brand and naming issues as reported here. ### Signed-off-by: - [ ] (resilientdb) Junping Du Comments: - [ ] (resilientdb) Calvin Kirs Comments: - [ ] (resilientdb) Kevin Ratnasekera Comments: - [ ] (resilientdb) Roman Shaposhnik Comments: - [ ] (resilientdb) Christian Grobmeier Comments: ### IPMC/Shepherd notes: -------------------- ## StormCrawler StormCrawler is a collection of resources for building low-latency, customisable and scalable web crawlers on Apache Storm. StormCrawler has been incubating since 2024-03-19. ### Three most important unfinished issues to address before graduating: 1. Set up Git Repos and Builds 2. Community building 3. Work towards a new release ### Are there any issues that the IPMC or ASF Board need to be aware of? Nothing yet. ### How has the community developed since the last report? First Report. ### How has the project developed since the last report? N/A ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: None. ### When were the last committers or PPMC members elected? No new committers yet. ### Have your mentors been helpful and responsive? Nothing to note. ### Is the PPMC managing the podling's brand / trademarks? No answer. ### Signed-off-by: - [ ] (stormcrawler) Dave Fisher Comments: - [ ] (stormcrawler) Lewis John McGibbney Comments: - [ ] (stormcrawler) Ayush Saxena Comments: - [X] (stormcrawler) PJ Fanning Comments: ### IPMC/Shepherd notes: The project is finished the setup. It's using wiki to hold the project information. -------------------- ## XTable XTable is an omni-directional converter for table formats that facilitates interoperability across data processing systems and query engines. XTable has been incubating since 2024-02-11. ### Three most important unfinished issues to address before graduating: 1. Complete tasks related to code base and website migration to ASF. 2. Publish a release under ASF. 3. Foster community growth. ### Are there any issues that the IPMC or ASF Board need to be aware of? No ### How has the community developed since the last report? We are seeing more people trying to use XTable and submitting issues while trying to run the project. ### How has the project developed since the last report? We are nearing completion of the renaming of classes to reflect the new project name. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: There hasn't been any release for XTable yet. ### When were the last committers or PPMC members elected? No new PPMC members or committers have been elected. ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? No answer. ### Signed-off-by: - [X] (xtable) Jesús Camacho Rodríguez Comments: Good to see the growing community activity and progress towards the first release. - [ ] (xtable) Hitesh Shah Comments: - [X] (xtable) Stamatis Zampetakis Comments: - [X] (xtable) Jean-Baptiste Onofré Comments: The bootstrap is smooth and moving forward cleanly. I will help heading to first release and polish. ### IPMC/Shepherd notes: ----------------------------------------- Attachment AH: Report from the Apache InLong Project [Charles Zhang] ## Description: The mission of Apache InLong is the creation and maintenance of software related to a one-stop data integration framework that provides automatic, secure, and reliable data transmission capabilities. InLong supports both batch and stream data processing at the same time, which offers great power to build data analysis, modeling, and other real-time applications based on streaming data ## Project Status: Current project status: Ongoing, with moderate activity. Issues for the board: There are no issues requiring board attention ## Membership Data: Apache InLong was founded 2022-06-15 (2 years ago) There are currently 48 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - Lu Chunliang was added to the PMC on 2024-03-07 - No new committers. Last addition was Wenwei Huang on 2023-12-27. ## Project Activity: In the past quarter, InLong has successfully released 1.11.0, and the project is working on 1.12.0, which will be released at the end of this month. For the newly released 1.11.0, it closed about 97+ issues, including 3+ major features and 10+ optimizations, for example: - Refactor the file collector - Dashboard add audit data for Agent module - Unify the data format for the Sort module - Support migrating group resources for tenant There were no meetups during the past quarter, but the community plans an offline meetup with the Apache Pulsar community at the end of the month. ## Community Health: The community health looks good overall. In the past quarter, - dev@inlong.apache.org had a 23% decrease in traffic in the past quarter (429 emails compared to 553) - 216 commits in the past quarter (-26% decrease) - 26 code contributors in the past quarter (-7% change) - 215 PRs opened on GitHub, in the past quarter (-19% change) - 210 PRs closed on GitHub, in the past quarter (-21% change) - 202 issues opened on GitHub, in the past quarter (-28% change) - 213 issues closed on GitHub, in the past quarter (-19% change) The development data has declined a bit, and the main reason is that many developers are from China, and there was a Chinese New Year holiday in the last quarter. ----------------------------------------- Attachment AI: Report from the Apache James Project [Benoit Tellier] ## Description: The Apache James Project delivers a rich set of open source modules and libraries, written in Java, related to Internet mail which build into an advanced extensible mail server running on the JVM. ## Project Status: Current project status: Ongoing, moderate activity. Issues for the board: none. ## Membership Data: Apache James was founded 2003-01-22 (21 years ago) There are currently 42 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Karsten Otto on 2022-09-20. - No new committers. Last addition was Jean Helou on 2022-06-17. ## Project Activity: Recent releases: MIME4J-0.8.11 was released on 2024-03-19. JAMES-3.7.5 was released on 2024-02-23. JAMES-3.8.1 was released on 2024-02-23. MIME4J-0.8.10 was released on 2024-02-23. A lighter performant James server relying on PostgreSQL is functionally complete but requires further performance tuning. We also fixed several critical issues regarding memory overuse in IMAP. ## Community Health: Overall dev related mailing lists, JIRA and github metrics are up: - server-dev@james.apache.org had a 140% increase in traffic in the past quarter (424 emails compared to 176) - 59 issues opened in JIRA, past quarter (195% increase) 35 issues closed in JIRA, past quarter (75% increase) - 994 commits in the past quarter (148% increase) 27 code contributors in the past quarter (92% increase) - 296 PRs opened on GitHub, past quarter (89% increase) - 287 PRs closed on GitHub, past quarter (92% increase) We especially received two big contributions for upgrading javax dependencies, spring dependencies and the like. The user mailing saw a slite decline last quater: - server-user@james.apache.org had a 35% decrease in traffic in the past quarter (40 emails compared to 61) ----------------------------------------- Attachment AJ: Report from the Apache jclouds Project [Andrew Gaul] here are no issues requiring board attention A cloud-agnostic library that enables developers to access a variety of cloud providers using one API. == Project Status == During the last months, we initiated discussions to move the project to the Attic, given the low activity and the concerns shared in previous reports. The discussion started in October 2022 (https://s.apache.org/jclouds-attic) and the Brooklyn and Karaf communities expressed interest in keeping the project alive and helping the project. Despite the very welcomed good intentions, however, nothing actually happened in the form of actual contributions, further engagement with the project, etc, and for months we have been just waiting for something to happen beyond the will to keep the project alive. The Attic discussion is a perfect example of the current status of the jclouds community: there are people interested in keeping the project alive, but no one has the time and/or energy to actually do it, and in this scenario, it has been discussed that we would probably better serve the community by moving the project to the Attic and set clear expectations for our users, instead of keeping it in the current limbo of inactivity. Revisiting this thread in March 2024 shows no new interest: https://lists.apache.org/thread/ql50d2v7s3ccywm2frkmqsqwdzj402fb == Community == Last committer: 2018-07-23 (Daniel Estevez) Last PMC member: 2021-03-14 (Jean-Baptiste Onofré) == Community Objectives == * Evaluate 2.6.0 release feedback and evaluate a possible 2.6.1 release in April * Initiate attic process in May and write postmortem == Releases == The last major jclouds release, 2.6.0, took place on 2024-03-09. The last bugfix release, 2.2.1, took place on 2020-05-14. ----------------------------------------- Attachment AK: Report from the Apache Jena Project [Andy Seaborne] ## Description: The mission of Jena is the creation and maintenance of software related to Java framework for building Semantic Web applications ## Project Status: Current project status: ongoing Issues for the board: none ## Membership Data: Apache Jena was founded 2012-04-18 (12 years ago) There are currently 19 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - New PMC member. Arne Bernhardt joined the PMC on 2024-04-05. - No new committers. Last addition was Arne Bernhardt on 2023-07-11. ## Project Activity: The project released version 5.0.0 on 2024-03-20. There was a one month 5.0.0-rc1, released 2024-02-14, for user community verification. This major release moved up the supported version of Java, in accordance of the project policy of "last two LTS releases", and to update to Jakarta for servlet APIs. It is also an opportunity to make changes to better align with the RDF community, to clear out legacy code, and replace a hard-to-maintain component. ## Community Health: The PMC invited Arne Bernhardt to join the PMC and he has accepted. Community activity in github has been above normal levels. This is due to the work around the major release, which has include detailed PRs so that all changes are recorded and searchable. The project is reducing the use of JIRA. JIRA use is very low since we started using github issues. Existing users can continue to raise JIRA tickets; we ask new users asking for new JIRA ids to use github. ----------------------------------------- Attachment AL: Report from the Apache JMeter Project [Bruno Demion] ### Description: The mission of JMeter is the creation and maintenance of software related to Java performance and functional testing ## Project Status: Current project status: Ongoing, with low activity Issues for the board: There are no issues requiring board attention at this time. ## Membership Data: Apache JMeter as TLP was created 2011-10-26 (12 years ago), before was Apache Jakarta JMeter, first version was released 1998-12-15 (25 years ago) There are currently 13 committers and 8 PMC members in this project. The Committer-to-PMC ratio is roughly 7:4. Community changes, past quarter: - No new PMC members. Last addition was Vladimir Sitnikov on 2018-06-08. - No new committers. Last addition was Maxime Chassagneux on 2017-02-15. ## Project Activity: - Current objective is to move the code base of JMeter to Java 17+ (from Java 8) for next major release (6.0) - Recent releases: 5.6.3 final was released on 2024-01-07. 5.6.2 final was released on 2023-07-11. ## Community Health: - The project has a low activity during last quarter. ----------------------------------------- Attachment AM: Report from the Apache Johnzon Project [Jean-Louis Monteiro] ----------------------------------------- Attachment AN: Report from the Apache JSPWiki Project [Juan Pablo Santos Rodríguez] ## Description: The mission of JSPWiki is the creation and maintenance of software related to Leading open source WikiWiki engine, feature-rich and built around standard JEE components (Java, servlets, JSP). ## Project Status: Current project status: Ongoing, with low activity. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache JSPWiki was founded 2013-07-17 (10 years ago) There are currently 15 committers and 9 PMC members in this project. The Committer-to-PMC ratio is 5:3. Community changes, past quarter: - Arturo Bernal was added to the PMC on 2023-06-21 - Arturo Bernal was added as committer on 2023-06-21 ## Project Activity: Except from the last weeks, it has been a quiet quarter, with almost no activity: * There's being some work on the refactor, referenced on last report, to benefit from virtual threads under JDK-21, but it is not complete yet. * A small bug detected while our public wiki being attacked was fixed. * We've began to publish SBOMs alongside our main artifacts. * Some dependencies and plugins have been upgraded. We still have to release 2.12.2, and then publish a CVE already fixed on master, which should be done this quarter. ## Community Health: Work on latest master shows commits from 1 commiter, done on the same git push. As noted above, on Easter Week we were target of an automated attack, which tried to exploit vulnerabilities inside JSPWiki, through every single form available. Thankfully, all the attack vectors were covered on previous vulnerability reports, so nothing serious did happen, other than wiki defacement which was manually fixed. As a result of this, we've documented on our SVN private area the setup of the VM that hosts our public wiki, so any PMC can know how to operate it; we're also temporarily not allowing new accounts on our public wiki, until we put manual approval of accounts, and we've asked for volunteers to help mantaining our public wiki content, having received one request off-list to it. One new user appeared on our user ML, has opened several JIRA issues and has provided a PR for one of them, which should be reviewed and hopefully merged sooner than later. No questions unanswered on MLs, although they've had very little traffic. ----------------------------------------- Attachment AO: Report from the Apache Kudu Project [Andrew Wong] ----------------------------------------- Attachment AP: Report from the Apache Libcloud Project [Tomaž Muraus] ## Description Libcloud is a Python library that abstracts away the differences among multiple cloud provider APIs. ## Project Status Current project status: mostly dormant in the past couple of months. ## Project Activity We have received some contributions on Github, but we haven't had a chance to review them yet. Last release was v3.8.0 in August, 2023. Last time we performed a roll call was at the end of last year. There were 3 other PMC members which responded to be able to provide minimum oversight required per ASF requirements. We are also doing the bare minimum and keeping dependencies up to date (project has very little direct aka not testing / dev / linting dependencies). ## Community Health Per my comment above, we did receive some contributions, but we are lacking maintainers (committers / PMC members) who would be willing to review the community PRs. ## Membership Data Apache Libcloud was founded 2011-05-19 (12 years ago) There are currently 24 committers and 16 PMC members in this project. The Committer-to-PMC ratio is 3:2. Community changes, past quarter: - No new PMC members. Last addition was Dimitris Moraitis on 2021-05-07. - No new committers. Last addition was Dimitris Moraitis on 2021-05-02. ----------------------------------------- Attachment AQ: Report from the Apache MADlib Project [Ed Espino] ## Description: - Apache MADlib is a scalable, big data, SQL-driven machine learning framework for data scientists. ## Project Status: - Two community developers (Nikhil Kak & Ekta Khanna) participated in addressing MADLIB-1517. As part of that work, several project updates (NOTICE year, Wiki), were performed as well. - Community will mainly continue to work on any bug fixes for existing features based on severity and no new features planned for upcoming releases. - With low bugs reported there are no plans for a new release anytime soon. - The project is still actively used by the Greenplum Database project (mainly sponsored by Broadcom). - The Greenplum Database project continues to strive to improve adoption of Apache MADlib by ensuring that plans generated by Greenplum are more performant. This work however is on the Greenplum side rather than MADlib. ## Project Activity: - Release 2.1.0 occurred on September 8, 2023 which was the 13th release as an Apache TLP project. - Community plans to work on the following JIRAs for the next release: * Fix empty string handling of grouping columns in regression model training ## Community Health: - The community is small with 2 active committers since last report. - Community focus is mainly on adoption of existing features and fixing bugs as reported. - There are no future releases planned. ## Membership Data: - Currently stands at 12 PMC members, no new members added since last report - Last addition was Chris Hajas on 2023-03-22. ## Committer base changes: - Currently 23 committers, no new committers since last report. - Last addition was David Kimura on 2023-03-23. ## Releases: - v2.1.0 released on 2023-09-08 - v2.0.0 was released on 2023-06-23 - v1.21.0 was released on 2023-03-01 ## Mailing list activity: No activity on mailing lists since release announcement. ----------------------------------------- Attachment AR: Report from the Apache Mahout Project [Andrew Musselman] ## Description: Mahout is a distributed linear algebra framework and mathematically expressive DSL designed to let mathematicians, statisticians, and data scientists quickly implement their own algorithms. ## Project Status: Current project status: Ongoing Issues for the board: None at this time ## Membership Data: Apache Mahout was founded 2010-04-20 (14 years ago) There are currently 28 committers and 10 PMC members in this project. The Committer-to-PMC ratio is roughly 7:3. Community changes, past quarter: - No new PMC members. Last addition was Shannon Quinn on 2023-02-12. - No new committers. Last addition was Jowanza Joseph on 2023-03-02. ## Project Activity: * dev@mahout.apache.org had a 204% increase in traffic in the past quarter (76 emails compared to 25) * issues@mahout.apache.org had a 1006% increase in traffic in the past quarter (321 emails compared to 29) * user@mahout.apache.org had a 260% increase in traffic in the past quarter (18 emails compared to 5) ## Community Health: Core team is in touch with each other and we have been consistent with community meetings (https://mahout.apache.org). ----------------------------------------- Attachment AS: Report from the Apache Maven Project [Karl Heinz Marbaise] ## Description: The mission of Maven is the creation and maintenance of software related to Java project management and comprehension tools ## Project Status: There are no issues requiring board attention. ## Membership Data: Apache Maven was founded 2003-03-01 (21 years ago) There are currently 70 committers and 31 PMC members in this project. The Committer-to-PMC ratio is roughly 9:4. Community changes, past quarter: - No new PMC members. Last addition was Romain Manni-Bucau on 2023-10-16. - Zhongming Hua was added as committer on 2024-01-28 ## Project Activity: Recent releases: Maven Artifact plugin 3.5.1 was released on 2024-04-02. Maven Plugin Tools 3.12.0 was released on 2024-04-02. Maven Resolver 2.0.0-alpha-10 was released on 2024-04-02. Maven Source Plugin 3.3.1 was released on 2024-04-02. Maven Invoker Plugin 3.6.1: 2024-04-01 was released on 2024-04-01. Maven GPG Plugin 3.2.2 was released on 2024-03-26. Maven Archiver 3.6.2 was released on 2024-03-24. Maven GPG Plugin 3.2.1 was released on 2024-03-18. Maven Assembly Plugin 3.7.1 was released on 2024-03-15. Maven Compiler Plugin 3.13.0 was released on 2024-03-15. Maven GPG Plugin 3.2.0 was released on 2024-03-11. Apache Maven 4.0.0-alpha-13 was released on 2024-03-10. Apache Remote Resources Plugin 3.2.0 was released on 2024-03-10. Maven Filtering 3.3.2 was released on 2024-03-10. Maven Assembly Plugin 3.7.0 was released on 2024-03-07. Maven Resolver 2.0.0-alpha-8 was released on 2024-02-26. Maven Shade Plugin 3.5.2 was released on 2024-02-20. Maven JLink Plugin 3.2.0 was released on 2024-02-01. Maven Resolver 2.0.0-alpha-7 was released on 2024-01-29. Maven Indexer 7.1.2 was released on 2024-01-11. Maven Resolver 2.0.0-alpha-6 was released on 2024-01-11. - Maven 4 - has been voted to lift it's JDK minimum to JDK17 which has been released with Alpha 13. This a good step into the future. - DEV List Discussions about the plugin versioning related to breaking changes in Plugin API (Maven 3 vs. Maven 4) - Adoption rates for newer Maven versions take very long, because currently (April 2024) the first place based on downloads(central) even kept by Maven 3.6.3 (ca. 2.8 million) while 3.9.6 has increased up to 1.8 million from previous report with 0.6 million. ## Community Health: dev@maven.apache.org had a 14% decrease in traffic in the past quarter (671 emails compared to 772) 419 issues opened in JIRA, past quarter (-8% change) The decrease of activitiy might be caused by he discussion activities on the slack channel. The decrease in opened JIRA issues might be a bit caused by the hurdle to create an JIRA account (yes for security it makes sense) and also that you can not use GitHub issues at the moment. ----------------------------------------- Attachment AT: Report from the Apache Mesos Project [Qian Zhang] ## Description: The mission of Mesos is the creation and maintenance of software related to a cluster manager that provides efficient resource isolation and sharing across distributed applications ## Project Status: Current project status: There were a number of PRs merged recently to support cgroups v2 and we fixed a potential security issue in Mesos website. Issues for the board: None. ## Membership Data: Apache Mesos was founded 2013-06-19 (11 years ago) There are currently 50 committers and 50 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Charles-François Natali on 2021-08-08. - No new committers. Last addition was Charles-François Natali on 2021-08-07. ## Project Activity: A number of PRs were merged to support cgroups v2 and a potential security issue in Mesos website was fixed. ## Community Health: Devin Leamy and Ben Mahler are actively working on cgroups v2 support, other than that, the community is a bit quiet. ----------------------------------------- Attachment AU: Report from the Apache MINA Project [Guillaume Nodet] ## Description: The mission of MINA is the creation and maintenance of software related to Multipurpose Infrastructure for Network Application ## Project Status: Current project status: active maintenance mode Issues for the board: none ## Membership Data: Apache MINA was founded 2006-10-25 (17 years ago) There are currently 29 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Gary D. Gregory on 2023-09-13. - No new committers. Last addition was Gary D. Gregory on 2022-03-24. ## Project Activity: This quarter was quite quiet. We done two releases: * Apache MINA SSHD 2.12.0 was released on 2024-01-31 with new two new features: support for GIT protocol-v2 and OpenSSH "strict key exchange" protocol extension to mitigate CVE-2023-48795 * Apache MINA SSHD 2.12.1 was released on 2024-02-14 to fix two bugs ## Community Health: The community is healthy. We need to investigate the mismatch with some non PMC members being subscribed to the private list. ----------------------------------------- Attachment AV: Report from the Apache MyFaces Project [Bernd Bohmann] ## Description: The mission of MyFaces is the creation and maintenance of software related to JavaServer(tm) Faces implementation and components ## Project Status: Current project status: Ongoing, with moderate activity Issues for the board: I forgot to send out the NOTICE mail for adding Melloware to the myfaces pmc. There was a question: Is Melloware a person or a company? Thomas Andraschko confirms that Melloware is a person. ## Membership Data: Apache MyFaces was founded 2005-02-23 (19 years ago) There are currently 81 committers and 47 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - Melloware was added to the PMC on 2024-01-25 - Milan Siebenbürger was added as committer on 2024-01-24 ## Project Activity: - Apache MyFaces Core is working on JSF 5.0, JSF 4.1(Jakarta 11) and JSF Javascripts - Apache Tobago the community is working on small features and fixes for 5.x and 6.x. - Recent releases: tobago-2.5.1 was released on 2024-03-10. tobago-5.11.0 was released on 2024-02-23. tobago-6.3.0 was released on 2024-02-23. myfaces-core-4.0.2 was released on 2024-02-01. myfaces-core-4.1.0-RC1 was released on 2024-01-29. tobago-5.10.0 was released on 2024-01-26. tobago-6.2.0 was released on 2024-01-26. ## Community Health: - Apache MyFaces Core is healthy. UI-Component Sets: - Apache Tobago is healthy. - Apache Trinidad is in maintenance mode. Last developer commit was Sept 2017. - Myfaces Tomahawk is in maintenance mode. Last developer commit was May 2016. Last commit on behalf of a contributor was May 2016. Add-ons and Extensions: - Apache MyFaces Portlet Bridge is in maintenance mode. Last developer commit was Jan 2014. Last commit on behalf of a contributor was May 2015. - Apache MyFaces CODI is in maintenance mode. CODI was replaced by Apache DeltaSpike so new development happens there. Last commit March 2014. - Apache MyFaces Orchestra is in maintenance mode. New projects use CDI and DeltaSpike instead. Last commit on behalf of a contributor was August 2016. - Apache MyFaces ExtVal is in maintenance mode. Last commit June 2014. - Apache MyFaces Commons is in maintenance mode. Last commit August 2012. - Apache MyFaces Ext-Scripting is in maintenance mode. Last commit Sept 2017. - Apache MyFaces Test is in maintenance mode (Used by Myfaces Core). Last commit May 2017. ----------------------------------------- Attachment AW: Report from the Apache Mynewt Project [Szymon Janc] ## Description: The mission of Apache Mynewt is the creation and maintenance of software related to an embedded OS optimized for networking and built for remote management of constrained devices that are incapable of running either Linux or Android ## Project Status: Current project status: ongoing Issues for the board: some PMC members are no longer active in the project, how should this be handled by project? ## Membership Data: Apache Mynewt was founded 2017-06-21 (7 years ago) There are currently 36 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 9:5. Community changes, past quarter: - No new PMC members. Last addition was Jerzy Kasenberg on 2019-10-24. - No new committers. Last addition was Krzysztof Kopyściński on 2021-01-26. ## Project Activity: Community work in several areas including: tooling and CI improvements, new MCUs support (STM32G20), Bluetooth host qualification improvements continued work on Bluetooth LE Audio. Apache Mynewt 1.12.0 (and Apache NimBLE 1.7.0) were released last week. ## Community Health: Number of contributors is stable, "core" developers are contributing code on regular basis. We see more support request from new users. Mailing list see little activity as most discussions happen on Github. ----------------------------------------- Attachment AX: Report from the Apache NiFi Project [Joe Witt] ## Description: The mission of NiFi is the creation and maintenance of software related to providing an easy to use, powerful, and reliable system to process and distribute data. Apache NiFi MiNiFi is an edge data collection agent built to seamlessly integrate with and leverage the command and control of NiFi. There are both Java and C++ implementations. Apache NiFi Registry is a centralized registry for key configuration items including flow versions, assets, and extensions for Apache NiFi and Apache MiNiFi. Apache NiFi Nar Maven Plugin is a release artifact used for supporting the NiFi classloader isolation model. Apache NiFi Flow Design System is a theme-able set of high quality UI components and utilities for use across the various Apache NiFi web applications in order to provide a more consistent user experience. ## Project Status: Current project status: Ongoing. High. Issues for the board: None. ## Membership Data: Apache NiFi was founded 2015-07-14 (8 years ago) There are currently 66 committers and 36 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Csaba Bejan on 2023-10-25. - Daniel Stieglitz was added as committer on 2024-02-09. - Mark Bathori was added as committer on 2024-02-09 ## Project Activity: We released Apache NiFi 2.0.0 milestone 2 January 29th with more than 200 completed JIRAs with new features. The release has seen quick adoption and found a variety of bugs and improvements. To that end the community is approaching a release of NiFi 2.0.0-M3 with already more than 235 resolved JIRAs. We anticipate a release for that soon as there are major improvements to the stability of the much anticipated first class integration with Python components which has been highly valuable to NiFi's emerging role in data pipelines to feed data to Generative AI applications. We also released Apache NiFi 1.25.0 with more than 100 JIRAs at the end of January and have more than 100 already resolved on the upcoming 1.26.0 line. ## Community Health: Consistent with past reports community health remains strong and growing. Mailing list activity remains consistent and we saw a 30% increase on the dev list in total emails. The slack community continues to grow with general hosting 3,133 users at the time of this report. A highly desirable pattern of engagement is present where it isn't just committers and PMC engaging to answer questions. A new venture backed startup in the US has formed as well which has led to an increase in traffic and discussion regarding Apache NiFi. ----------------------------------------- Attachment AY: Report from the Apache Nutch Project [Sebastian Nagel] ## Description: Apache Nutch is a highly extensible and scalable open source web crawler software project based on Apache Hadoop® data structures and the MapReduce data processing framework. ## Project Status: Current project status: ongoing with medium to low activity Issues for the board: none ## Membership Data: Apache Nutch was founded 2010-04-21 (13 years ago) There are currently 22 committers and 22 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - Tim Allison was added as committer and PMC member on 2023-07-19 ## Project Activity: Nutch 1.19 was released on 2022-08-22. Work on the next Nutch release 1.20 continued and the release should land during the next weeks. Code contributions focused in the last quarter focused on upgrades of dependencies and the build configuration for the next release but also included bug fixes and improvements. We proposed a project for GSoC'24: "Overhaul the Nutch plugin framework". ## Community Health: The number of contributions has slightly increased during the last three months. ----------------------------------------- Attachment AZ: Report from the Apache NuttX Project [Alin Jerpelea] ## Description: The mission of Apache NuttX is the creation and maintenance of software related to a mature, real-time embedded operating system (RTOS) ## Project Status: Current project status: The project is active with 24% increase in mailing list traffic Issues for the board: No issues for the board ## Membership Data: Apache NuttX was founded 2022-11-16 (a year ago) There are currently 29 committers and 22 PMC members in this project. The Committer-to-PMC ratio is roughly 4:3. Community changes, past quarter: - No new PMC members. Last addition was Chao An on 2023-12-19. - No new committers. Last addition was Tiago Medicci on 2023-05-30. ## Project Activity: NuttX 12.5.0 was released on 2024-04-05. containing code from 105 code contributors (8% increase) ## Community Health: The community is active with a 24% increase in mail traffic. support for new platforms and boards was added to the project github PR activity decreased 580 PRs opened on GitHub (-51% change) The community is organizing the yearly international workshop https://events.nuttx.apache.org/ ----------------------------------------- Attachment BA: Report from the Apache OpenDAL Project [Hao Ding] ## Description: Apache OpenDAL is a data access layer that allows users to easily and efficiently retrieve data from various storage services in a unified way. Its vision centers on enabling **access data freely**, with the goal of empowering ALL users to freely access ANY storage service in ANY way they choose. ## Project Status: Current project status: New Issues for the board: None ## Membership Data: - There are currently 22 committers and 16 PMC members in this project. - The Committer-to-PMC ratio is roughly 3:2. #### Community changes, past quarter: - Yang Shuai was added to the PMC on 2024-03-18 - Liuqing Yue was added to the PMC on 2024-01-22 - Yang Shuai was added as committer on 2024-01-23 ## Project Activity: The OpenDAL community is working on a huge refactor focused on simplifying the implementation and improving performance. We expect this to significantly simplify the maintenance and extension of opendal in the future. Meanwhile, the OpenDAL community is involved in GSoC and OSPP events. We've welcomed several new contributors, with one in particular actively participating. We see this individual as a potential new committer. ## Community Health: ### Mailing List dev@opendal.apache.org had a 26% decrease in traffic in the past quarter (167 emails compared to 223). This report is the first to exclude our discussion on graduation. Therefore, a decrease is expected. However, as the GSoC and OSPP events continue, we anticipate a slight increase in traffic. ### Contributors Since our last update, the OpenDAL community has integrated 66 pull requests across 526 files, thanks to the efforts of 16 contributors. Our total contributor count has now risen to 188, an increase of 2 from our previous report. Our contributor growth has stagnated, with no new committers nominated since the last report. The PMC has proposed several strategies to address this issue, and we are actively working on them. Our primary focus is to streamline the implementation. After these refinements, it will become significantly easier for newcomers to contribute. ----------------------------------------- Attachment BB: Report from the Apache OpenJPA Project [Mark Struberg] ----------------------------------------- Attachment BC: Report from the Apache OpenMeetings Project [Maxim Solodovnik] ## Description: The mission of OpenMeetings is the creation and maintenance of software related to OpenMeetings: Web-Conferencing and real-time collaboration ## Project Status: Current project status: Dormant Issues for the board: none ## Membership Data: Apache OpenMeetings was founded 2013-01-25 (11 years ago) There are currently 30 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 8:7. Community changes, past quarter: - No new PMC members. Last addition was Ali Alhaidary on 2021-03-22. - No new committers. Last addition was Ali Alhaidary on 2021-04-07. ## Project Activity: We are currently getting ready for 8.0.0 release (Jakarta stack). Additionally we have one GSoC idea, not sure now successful it can be. Recent releases: - 7.2.0 was released on 2023-12-23. - 7.1.0 was released on 2023-05-09. - 7.0.0 was released on 2023-02-13. ## Community Health: We are trying to answer user questions and provide updated versions (mostly dependency updates) in timely manner. Email flow decreasing :( ----------------------------------------- Attachment BD: Report from the Apache OpenOffice Project [Dave Fisher] ## Description The mission of OpenOffice is the creation and maintenance of software related to an open-source, office-document productivity suite ## Project Status Current project status: Ongoing Issues for the board: None ## Project Composition Apache OpenOffice was founded 2012-10-16 (11 years ago) There are currently 141 committers and 28 PMC members in this project. The Committer-to-PMC ratio is roughly 9:2. ## Membership Data — No new PMC members. The last addition was Czesław Wolański on 2023-01-14. — No new committers. The last addition was Francis Campos on 2022-06-06. ## Project Activity ### Recent releases — 4.1.15 was released on 2023-12-22 — 4.1.14 was released on 2023-02-27 — 4.1.13 was released on 2022-07-22 Binary downloads (total over all) as of April 1: 374,435,656 ### Codebase in OpenOffice repository — Work continues on the 4.2 future release; This included: - Work on upgrading OpenSSL to a current version. — dev@openoffice.apache.org had steady traffic in the past quarter. — issues@openoffice.apache.org had an increase in traffic in the past quarter. — l10n@openoffice.apache.org had traffic limited to onboarding a new volunteer for Vietnamese. ### Documentation — The OpenOffice-docs repository is where the small documentation team makes updates. — The Chapters for the Writer Guide are completed and ready to published, and compilation of the complete book is in process. — The Chapters of the Calc Guide are ready for final review. — Work has started on the update of the Impress Guide from the old 3.3 Version. — doc@openoffice.apache.org had steady traffic in the past quarter. — The OpenOffice-org repository has had the usual download count updates. ### User support — User Forums (forum.openoffice.org) remain active in English, Spanish, French, Hungarian, Italian, Japanese, Dutch, and Polish. - The forums had a problem with gmail.com start recently that needs to be addressed. — users@openoffice.apache.org had a decrease in traffic in the past quarter. — users-de@openoffice.apache.org had an increase in traffic in the past quarter around the release. ### Translation interface — Currently, we are improving the import / export handling. Pootle is no longer maintained and we need to consider alternatives. This needs another push. ## Community Health Community overall health is improving. We are seeing several developers taking on ODF 1.3, Boost, NSS, and OpenSSL updates. Documentation is being updated after a long time and we are getting translation volunteers. ## Infrastructure We continue to get excellent help from the crack ASF Infrastructure team. Next issue to work with them on properly improving smtp configuration on the Forum/MWiki VM. ### Binary Distributions — SourceForge mirrors are still the main way to get an OpenOffice binary release. — Windows builds are also published in the Microsoft Store (Windows 10/11). Windows users are by far our largest user group. ### Binary Code Signing — Apple Code Signing. — Windows Code Signing. ### Facebook We have one volunteer taking care of the presence. Work is underway to invite more volunteers. ### X, formerly Twitter The PMC voted to continue our handle and we have new volunteer PMC members who will handle our presence. The main purpose will be advertising new releases. ## Development ### Unmaintained Python 2 code Python 2 is unmaintained. We have in the development tree the external python3 support. Internal python 3 support is difficult. We are checking alternatives. Planned for the next major release. ### ODF Version 1.3 Our default and best supported file format, the OpenDocument Format, has received a new Standard update. As we plan to support this format, we started work checking the ODF 1.3 specification and what we have to do to support documents in OpenDocument Format version 1.3 (see https://cwiki.apache.org/confluence/display/OOOUSERS/ODF+1.3+Changes), as well as some early development. ----------------------------------------- Attachment BE: Report from the Apache ORC Project [William Hyun] ## Description: The mission of ORC is the creation and maintenance of software related to the smallest, fastest columnar storage for Hadoop workloads. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache ORC was founded 2015-04-21 (9 years ago) There are currently 47 committers and 14 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. - No new PMC members. Last addition was Pavan Lanka on 2023-03-30. - Deshan Xiao was added as committer on 2024-01-11. ## Project Activity: In addition to our current distribution channels, we have begun to support two additional channels of ConanCenter and vcpkg. According to our release cadence, we released one major release and one maintenance release in this quarter and helped other Apache communities use them. - 1.9.3 was released on 2024-03-21. - 2.0.0 was released on 2024-03-08. In addition, we are preparing the following milestones for the next quarter. - 1.8.7 (April) - 2.0.1 (May) - 1.9.4 (June) ## Community Health: In this quarter, the traffic of dev, issues, and user mailing lists have increased by 36%, 86%, and 300% respectively. According to the commit mailing list, the number of commits has increased 59%, which is a good sign for community growth. ----------------------------------------- Attachment BF: Report from the Apache Paimon Project [Jingsong Lee] ## Description: Paimon is a lake format that enables building a Realtime Lakehouse Architecture with Flink and Spark for both streaming and batch operations. ## Project Status: Current project status: Ongoing Issues for the board: none ## Membership Data: Apache Paimon was founded 2023-03-12 (1 years ago) There are currently 18 committers and 12 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - Zelin Yu was added as PMC member on 2024-01-19. - WenJun Min was added as committer on 2024-02-08 - Xinyu Zou was added as committer on 2024-02-26 The Paimon PMC is actively monitoring and discussing new PMC and committers. ## Project Activity: Recent releases: * Paimon shade 0.6.0-incubating was released on 2024-01-25 * Paimon 0.6.1-incubating was released on 2024-02-06 * Paimon 0.7.0-incubating was released on 2024-02-22 ## Community Health: The Paimon community is healthy and active. dev@paimon.apache.org had a 66% increase in traffic in the past quarter (158 emails compared to 95): The code design of the community has been more guided towards discussions on dev@ mailing list. issues@paimon.apache.org had a 2% increase in traffic in the past quarter (2409 emails compared to 2359): February has China's Spring Festival, and the number of participants has significantly decreased. user@paimon.apache.org had a 2% decrease in traffic in the past quarter (51 emails compared to 52): Mainly asking how to join Slack. ----------------------------------------- Attachment BG: Report from the Apache Parquet Project [Xinli Shang] ## Description: The mission of Parquet is the creation and maintenance of software related to columnar storage format available to any project in the Apache Hadoop ecosystem ## Project Status: Current project status: Ongoing Issues for the board: No ## Membership Data: Apache Parquet was founded 2015-04-21 (9 years ago) There are currently 38 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - No new PMC members. Last addition was Gidon Gershinsky on 2021-11-23. - No new committers. Last addition was Gang Wu on 2023-02-28. ## Project Activity: Recent releases: Format 2.10.0 was released on 2023-11-20. 1.13.1 was released on 2023-05-18. MR-1.11.2 was released on 2021-10-06. ## Community Health: dev@ had a 87% decrease in traffic (190 emails compared to 1436) issues@ had a 352% increase in traffic (661 emails compared to 146) Low number of issues or PRs are seen in past quarter. ----------------------------------------- Attachment BH: Report from the Apache PDFBox Project [Andreas Lehmkühler] ## Description: The mission of PDFBox is the creation and maintenance of software related to Java library for working with PDF documents ## Project Status: Current project status: ongoing with moderate activity Issues for the board: none ## Membership Data: Apache PDFBox was founded 2009-10-21 (14 years ago) There are currently 21 committers and 21 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Matthäus Mayer on 2017-10-16. - No new committers. Last addition was Joerg O. Henne on 2017-10-09. ## Project Activity: Recent releases: 2.0.31 was released on 2024-03-24. 3.0.2 was released on 2024-03-14. 3.0.1 was released on 2023-11-30. ## Community Health: - there is a steady stream of contributions, bug reports and questions on the mailing lists - the 3.0.2 release fixes some regressions which might prevent some users to finally switch from 2x to 3.x - we started some early discussions about the features and the timeline of the 4.0 version ----------------------------------------- Attachment BI: Report from the Apache Pekko Project [PJ Fanning] ## Description: Apache Pekko is a toolkit and an ecosystem for building highly concurrent, distributed, reactive and resilient applications for Java and Scala. ## Project Status: Current project status: New Issues for the board: None to report ## Membership Data: Apache Pekko was founded 2024-03-20 (19 days ago) There are currently 27 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 7:5. Community changes, past quarter: - No new PMC members (project graduated recently). Last PPMC member added was Arnout Engelen on 2024-02-01 - No new committers were added. Last podling committer added was JingZhang Chen on 2024-02-05 ## Project Activity: Apache Pekko had 21 releases across 12 separate modules while incubating. We are planning v1.1 releases for most of these modules, to be released over the next few months. ## Community Health: Use of the dev and users mailing lists is pretty light but has increased. Some important discussions appear on the dev list. Most interactions happen in GitHub Discussions, Issues and PRs. Non-committers seem to prefer GitHub comms. According to the commit mailing list, the number of commits has increased 152% which is a good sign for community growth. ----------------------------------------- Attachment BJ: Report from the Apache Petri Project [Dave Fisher] ## Description: The mission of Apache Petri is the creation and maintenance of software related to assessment of, education in, and adoption of the Foundation's policies and procedures for collaborative development and the pros and cons of joining the Foundation ## Project Status: Current project status: Dormant Issues for the board: None ## Membership Data: Apache Petri was founded 2019-11-19 (4 years ago) There are currently 8 committers and 5 PMC members in this project. The Committer-to-PMC ratio is 8:5. Community changes, past quarter: - No new PMC members. Last addition was Daniel Shahaf on 2019-11-19. - No new committers. Last addition was Justin Erenkrantz on 2020-04-23. ## Project Activity: We are watching current updates to FOundation Policy documents. Once those progress sufficiently we will look into how to modify the Petri site. ## Community Health: We are here. Since we are not advertising Petri as an alternative we await any requests for consideration or discussion. ----------------------------------------- Attachment BK: Report from the Apache Pig Project [Koji Noguchi] ## Description: Apache Pig is a platform for analyzing large data sets on Hadoop. It provides a high-level language for expressing data analysis programs, coupled with infrastructure for evaluating these programs. ## Project Status: Current project status: Dormant Issues for the board: 0.18 not released yet but making progress. ## Membership Data: Apache Pig was founded 2010-09-21 (14 years ago) There are currently 31 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Koji Noguchi on 2016-08-04. - No new committers. Last addition was Nándor Kollár on 2018-09-06. ## Project Activity: Since the last report in January, we were able to add fixes for various test failures and regressions. 6 fixes for Pig-on-Spark. 2 fixes for Pig-on-Tez, etc. With this, almost all the tests are passing but still with relatively old hadoop (3.2.4 released 2 years ago) and spark (3.2.4 released 1 year ago). Instead of spending another cycle in trying to run with more recent versions, we will most likely release with this and try to catch up with another release soon after. Dependent jar versions reported in owasp analysis still need to be updated. ## Community Health: Overall activity is low as the project is mostly stable and contributions are mainly bug fixes. ----------------------------------------- Attachment BL: Report from the Apache Pinot Project [Kishore G] ## Description: The mission of Apache Pinot is the creation and maintenance of software related to distributed OLAP data store to provide Real-time Analytics to power wide variety of analytical use case ## Project Status: Current project status: Top level project with high activity. Issues for the board: There are no issues requiring board attention. ## Membership Data: Apache Pinot was founded 2021-07-20 (3 years ago) There are currently 34 committers and 12 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. Community changes, past quarter: - No new PMC members. Last addition was Rong Rong on 2023-09-11. - Gonzalo Ortiz was added as committer on 2024-02-02 - Vivek Iyer was added as committer on 2024-01-15 ## Project Activity: Apache Pinot released version 1.1 on March 25, 2024 Key highlights of the release are: - Multi Stage Engine enhancements and maturity - Support Vector index and Hierarchical Navigable Small Worlds - Approximate algorithms for faster aggregations - Upsert enhancements Five successful meetups conducted for Apache Pinot Apache Pinot website redesigned and released. ## Community Health: Community very healthy on the Apache Pinot slack with 4587 members. 905 commits in the past quarter (38% increase) 523 PRs opened on GitHub, past quarter (-5% change) 504 PRs closed on GitHub, past quarter (-5% change) 133 issues opened on GitHub, past quarter (-34% change) 72 issues closed on GitHub, past quarter (-43% change) ----------------------------------------- Attachment BM: Report from the Apache Pivot Project [Roger Lee Whitcomb] ## Description: The mission of Pivot is the creation and maintenance of software related to Rich Internet applications in Java ## Project Status: Current project status: Vote completed to move to the Attic, following a final release. This release is in progress, waiting on final editing of Release Notes and then final build. Issues for the board: Only patience as we finish up. ## Membership Data: Apache Pivot was founded 2009-12-15 (14 years ago) There are currently 10 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 5:4. Community changes, past quarter: - No new PMC members. Last addition was Gavin McDonald on 2022-04-13. - No new committers. Last addition was Gavin McDonald on 2022-04-14. ## Project Activity: A few late emails pertaining to the final build. Release VM is setup, all info needed for the final Release Notes has been gathered, pending editing. If all goes well, the Attic move can commence once the final build has been made (hopefully in the next few weeks). Beginning discussion on Legal mailing list of how to migrate to GitHub. ## Community Health: User and Dev lists have been notified (again) of impending Attic move; no responses, confirming the lack of interest in the project. ----------------------------------------- Attachment BN: Report from the Apache Ranger Project [Selvamohan Neethiraj] ----------------------------------------- Attachment BO: Report from the Apache Ratis Project [Tsz-wo Sze] ## Description: The mission of Apache Ratis is the creation and maintenance of software related to a highly customizable Raft protocol implementation in Java. ## Project Status: Current project status: Ongoing Issues for the board: NA ## Membership Data: Apache Ratis was founded 2021-02-16 (3 years ago) There are currently 30 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - William Song was added to the PMC on 2024-01-18 - No new committers. Last addition was Guo Hao on 2023-10-13. ## Project Activity: We released Ratis 3.0.1 on 2024-01-09. It was a minor release which added roughly 30 commits to the previous Ratis 3.0.0 release. The release included bug fixes, performance improvements, documentation and build improvements. The previous Ratis 3.0.0 release was released on 2023-11-17. ## Community Health: The project is healthy. The project in this quarter was less active than the previous quarter. Most of the project statistics recorded a decrease. The main reasons were that we worked hard on the previous quarter for the 3.0.0 major release and this quarter (December to March) included many holidays around the world. The project had a lower activity as expected. ----------------------------------------- Attachment BP: Report from the Apache Rya Project [Adina Crainiceanu] ## Description: The mission of Apache Rya is the creation and maintenance of software related to scalable storage, retrieval, and analysis of RDF data ## Project Status: Current project status: Dormant: Not much happening on the code, but at least 3 PMC members ready to engage if needed Issues for the board: none ## Membership Data: Apache Rya was founded 2019-09-17 (5 years ago) There are currently 12 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 1:1. Community changes, past quarter: - No new PMC members. Last addition was Adina Crainiceanu on 2019-09-17. - No new committers were added. ## Project Activity: No new activity. Last release 4.0.1 was on 2020-12-22 ## Community Health: Currently there is no active development in the project. The project is in "dormant" state: not much happening on the code, but at least 3 PMC members ready to engage if needed. ----------------------------------------- Attachment BQ: Report from the Apache Samza Project [Jagadish Venkatraman] ## Description: The mission of Samza is the creation and maintenance of software related to distributed stream processing framework. ## Project Status: Current project status: Healthy Issues for the board: No issues require the board's attention ## Membership Data: Apache Samza was founded 2015-01-22 (9 years ago) There are currently 30 committers and 17 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter:- - No new PMC members. Last addition was Bharath Kumarasubramanian on 2020-02-13. - No new committers. Last addition was Manasa Lakshmi in Feb 2023. ## Project Activity: Project Release Activity: Recent releases: 1.8.0 was released on 2023-01-17. 1.7.0 was released on 2022-04-04. samza-1.6.0 was released on 2021-01-28. ## Community Health: JIRA activity: 2 issues created/updated in JIRA, past quarter Commit activity: 3 commits in the past quarter 3 code contributors in the past quarter ----------------------------------------- Attachment BR: Report from the Apache SINGA Project [Wang Wei] ## Description: The mission of Apache SINGA is the creation and maintenance of software related to a distributed deep learning platform ## Project Status: Current project status: Dormant Issues for the board: N.A ## Membership Data: Apache SINGA was founded 2019-10-16 (4 years ago) There are currently 23 committers and 16 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Chris Yeung on 2020-04-17. - No new committers. Last addition was Naili Xing on 2022-11-19. ## Project Activity: The team has released SINGA 4.2.0 on 15 March 2024. The release note is at https://github.com/apache/singa/blob/master/RELEASE_NOTES The main features of this release include 1. Add support for deep learning models running on top of PolarDB. 2. Add a horizontal federated learning example using the Bank dataset. 3. Enhance example code by adding sample training data for testing the model selection application. 4. Enhance the online documentation for GitHub star statistics. 5. Promote code quality. 6. Fix bugs in the rat check file and the license file. Apart from this release, the community has been working on: 1. Adding more datasets and model implementations. 2. Improving the horizontal federated learning example. 3. Fixing the online GitHub workflows. 4. Continuing optimizing the distributed training. ## Community Health: According to the statistics, there are increase of email traffic, commits and code contributors, which shows that the community is active in the development. ----------------------------------------- Attachment BS: Report from the Apache SkyWalking Project [Sheng Wu] ## Description: The mission of Apache SkyWalking is the creation and maintenance of software related to application performance management and monitoring (APM) ## Project Status: Current project status: Ongoing Issues for the board: No issue ## Membership Data: Apache SkyWalking was founded 2019-04-17 (5 years ago) There are currently 59 committers and 34 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - No new PMC members. Last addition was Ye Cao on 2023-08-28. - Xiang Wei was added as committer on 2024-01-06 ## Project Activity: Recent releases: - rover-0.6.0 is being voted. - SWCK-0.9.0 was released on 2024-03-24. - client-js-0.11.0 was released on 2024-03-18. - go-0.4.0 was released on 2024-02-27. We are moving forward v10 release in the next quarter. ## Community Health: The project community is active and healthy. Questions are answered and commit codes are active. We are planning for more webinar and meetup in person for 2024. ----------------------------------------- Attachment BT: Report from the Apache Steve Project [Daniel Gruno] ## Description: The mission of Steve is the creation and maintenance of software related to Apache's Python based single transferable vote software system ## Project Status: Current project status: Dormant / Ongoing, low. Issues for the board: There are no issues for the board. ## Membership Data: Apache Steve was founded 2012-07-24 (12 years ago) There are currently 10 committers and 6 PMC members in this project. The Committer-to-PMC ratio is 5:3. Community changes, past quarter: - No new PMC members. Last addition was Jim Jagielski on 2022-04-15. - No new committers. Last addition was Sean Palmer on 2022-03-04. ## Project Activity: Not much activity in the past quarter. We did successfully run yet another annual members meeting using the STeVe software, and some bugs were fixed along the way, which is always positive. Work is underway on the v3 platform, albeit at a slow pace. Volunteers and such... ## Community Health: No changes here worth noting. We have sufficient oversight as per the usual... ----------------------------------------- Attachment BU: Report from the Apache Streams Project [Steve Blackmon] ----------------------------------------- Attachment BV: Report from the Apache Struts Project [René Gielen] ----------------------------------------- Attachment BW: Report from the Apache Submarine Project [Kevin Su] ## Description: The mission of Apache Submarine is the creation and maintenance of software related to allowing infrastructure engineers and data scientists to build deep learning applications (TensorFlow, PyTorch, etc.) end to end on cluster management platforms (like YARN/K8s) ## Project Status: Current project status: - Fix some minor secruity issues - Discuss future roadmap in the community sync Issues for the board: - None ## Membership Data: Apache Submarine was founded 2019-10-15 (4 years ago) There are currently 36 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 3:1. Community changes, past quarter: - No new PMC members. Last addition was Xiang Chen on 2023-01-05. - No new committers. Last addition was Brandon Lin on 2022-07-25. ## Project Activity: Plan to clean up and refactor current code and cut a new release (v0.9.0). ## Community Health: Overall community health is good, we have a minimum of 7 participants joining our weekly meetings. where we discuss various aspects of our project. Presently, in order to attract new contributors, our focus is on enhancing our project's positioning within ML Infrastructure, a task that involves careful strategizing and collaboration among team members. Additionally, we are actively engaged in the creation of a comprehensive design document for the proposed new architecture, aiming to outline its structure, components, and implementation strategies in detail. In addition to our primary objectives, we are committed to ensuring that Submarine is both user-friendly and straightforward to install. Our goal is to streamline the user experience and simplify the installation process. ----------------------------------------- Attachment BX: Report from the Apache Synapse Project [Isuru Udana] ## Description: Apache Synapse is a high-performance, flexible, lightweight Enterprise Service Bus (ESB) and a mediation framework. ## Project Status: Current project status: Dormant Issues for the board: None ## Membership Data: Apache Synapse was founded 2007-12-19 (16 years ago) There are currently 36 committers and 27 PMC members in this project. The Committer-to-PMC ratio is 4:3. Community changes, past quarter: - No new PMC members. Last addition was Shafreen on 2021-05-09. - No new committers. Last addition was Nuwan Jayawardene on 2022-11-19. ## Project Activity: PMC is currently analyzing whether we can merge the fixes and new features done on a forked repo to Synapse code-base. Other than that there was not much activity in the project during this time period. ## Community Health: dev@synapse.apache.org had a 80% decrease in traffic in the past quarter (6 emails compared to 30) 0 commits in the past quarter (-100% change) 0 code contributors in the past quarter (-100% change) 0 PRs opened on GitHub, past quarter (-100% change) 0 PRs closed on GitHub, past quarter (-100% change) Contributors who were active in the project got busy and couldn't do much work on the Project. If we manage to merge the fixes done in the forked repo, we expect to see a huge improvement in the community contributions in the next quarter. ----------------------------------------- Attachment BY: Report from the Apache Tapestry Project [Thiago Henrique De Paula Figueiredo] ## Description: The mission of Tapestry is the creation and maintenance of software related to Component-based Java Web Application Framework ## Project Status: Current project status: ongoing. Issues for the board: none. ## Membership Data: Apache Tapestry was founded 2006-02-14 (18 years ago) There are currently 29 committers and 13 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Ben Weidig on 2021-12-02. - No new committers. Last addition was Volker Lamp on 2022-04-14. ## Project Activity: The project had 2 minor releases in this quarter concerning a few bugs with a major new feature, multiple classloader mode. But, more important than that, the Tapestry team released a roadmap (https://tapestry.apache.org/development-roadmap.html), something I believe is a first for the project. One important roadmap item is a site and documentation overhaul. ## Community Health: The only stat provided by this tool was the project having a 96% increase in traffic in the dev mailing list. It's a mixture of release votes, Git pull request notifications and some discussions, mostly about dealing with Jakarta EE and later Java versions. ----------------------------------------- Attachment BZ: Report from the Apache Tcl Project [Georgios Petasis] ## Description: The mission of Tcl is the creation and maintenance of software related to Dynamic websites using TCL. Apache Tcl is home to the Tcl-Apache integration efforts. The purpose of our project is to combine the power of the Apache web server with the capabilities of the mature, robust and flexible Tcl scripting language. Currently only the Apache Rivet project is actively maintained. ## Project Status: Current project status: Ongoing Issues for the board: None ## Membership Data: Apache Tcl was founded 2000-07-24 (24 years ago) There are currently 12 committers and 7 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Brice Hamon De Crevecoer on 2014-11-25. - No new committers. Last addition was Brice B. Hamon on 2014-11-25. ## Project Activity: During this reporting period, a release candidate version of Apache Rivet was released (3.2.4 RC1) on Feb 5, 2024, re-introducing support for the RivetChildExit script to the "worker" and "prefork" bridges. This release candidate was followed by a general release, as rivet-3.2.4 was released on 2024-02-18. Massimo Manghi also reported on the status of packaging for various Linux distributions, and how can this improved. Finally, a discussion has been initiated in porting documentation to markdown format. ## Community Health: The traffic of the mailing lists has increased in comparison to the previous reporting period, which is normal for the project (as most traffic in the list happens after new releases), but also due to discussions about features, Linux distribution support and documentation updates. ----------------------------------------- Attachment CA: Report from the Apache Tez Project [László Bodor] ## Description: Apache Tez is an effort to develop a generic application framework which can be used to process arbitrarily complex DAGs of data-processing tasks and also a re-usable set of data-processing primitives which can be used by other projects. ## Project Status: Current project status: Ongoing Issues for the board: There are concerning trademark issues. ## Membership Data: Apache Tez was founded 2014-07-16 (10 years ago) There are currently 36 committers and 32 PMC members in this project. The Committer-to-PMC ratio is 9:8. Community changes, past quarter: - No new PMC members. Last addition was László Bodor on 2020-11-24. - No new committers. Last addition was Ayush Saxena on 2024-01-09. ## Project Activity: 0.10.3 was released in Jan2024, forgot to update records, let us take care of that soon. ## Community Health: Ayush is quite active in reviewing new code which brings much health into the community, hopefully we keep on working the same towards 0.10.4 and on. ----------------------------------------- Attachment CB: Report from the Apache Thrift Project [Jens Geyer] ## Description: Apache Thrift is a high performance cross platform RPC and serialization solution. ## Project Status: Current project status: Ongoing moderate Issues for the board: none ## Membership Data: Apache Thrift was founded 2010-10-20 (13 years ago) There are currently 41 committers and 21 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Mario Emmenlauer on 2022-04-13. - No new committers. Last addition was Liu Jiayu on 2022-06-25. ## Project Activity: Main activities have been about adding tests to PHP bindings and improving/ugrading build container infrastructure, as well as completing release 0.20.0 in March 2024. ## Community Health: Solid level of activity, steady flow of contributions, mostly via Github. Looking at the statistics, no tickets have been completed. What we can't see from that number is that there has been a total of 31 pull requests merged since January where there was no ticket assigned or which were parts of an overarching, yet incomplete ticket. ----------------------------------------- Attachment CC: Report from the Apache Tika Project [Tim Allison] ## Description: Apache Tika is a dynamic toolkit for content detection, analysis, and extraction. It allows a user to understand, and leverage information from, a growing a list of over 1200 different file types including most of the major types in existence (MS Office, PDF, Text, Images, Video, Code, and science data) as recognized by IANA and other standards bodies. ## Project Status: Current project status:Ongoing Issues for the board: None ## Membership Data: Apache Tika was founded 2010-04-20 (14 years ago) There are currently 32 committers and 32 PMC members in this project. The Committer-to-PMC ratio is 1:1. Community changes, past quarter: - No new PMC members. Last addition was Nicholas DiPiazza on 2021-07-05. - No new committers. Last addition was Nicholas DiPiazza on 2021-06-03. ## Project Activity: Released a 2.9.2 on April 2. This included upgrades to dependencies and a few bug fixes. The project is working towards a 3.0.0-BETA2, and hopefully a 3.0.0 shortly thereafter. We're making improvements to our docker deployments and helm charts. We're working on integrating fully recursive extraction of raw bytes and text+metadata for embedded files into our pipes modules. We're making progress towards adding a gRPC server. ## Community Health: Chi is still a healthy 4.7. We're continuing to be on the lookout for new PMC/committers. ----------------------------------------- Attachment CD: Report from the Apache TinkerPop Project [Kelvin Lawrence] ## Description: The mission of TinkerPop is the creation and maintenance of software related to A graph computing framework for both graph databases (OLTP) and graph analytic systems (OLAP) ## Issues: We would like to address comments that were made on our last board report, that stated the following: “Thanks for the detail report, I found the recent vote of 3.5.8, 3.6.6 and 3.7.1 only have only two +1 binding vote, we need to have at least 3 +1 binding votes. Please make sure we have enough PMC member to review the release kit.” We received 3 binding votes and 1 non-binding vote for each of the three individual VOTE threads that were started, and we did not move forward with the release until those 3 binding votes were accounted for. The binding votes were from PMC members Kelvin Lawrence, Florian Hockmann, Yang Xia, and the non-binding vote from committer Cole Greer. The VOTE threads for each release are as follows: For 3.5.8, VOTEs are from Yang Xia [1], Florian Hockmann [2], Kelvin Lawrence [2], and Cole Greer [2] For 3.6.6, VOTEs are from Yang Xia [3], Florian Hockmann [4], Kelvin Lawrence [4], and Cole Greer [4] For 3.7.1, VOTEs are from Yang Xia [5], Florian Hockmann [5], Kelvin Lawrence [5], and Cole Greer [5] ### VOTE Thread Links: [1] https://lists.apache.org/thread/1g5nlnyd56mqm2y48drp3vlm0st8hbb4 [2] https://lists.apache.org/thread/ylgqo8x0g67mg2s4tb0375m356617sy9 [3] https://lists.apache.org/thread/6o9lvvpbvdlb584lm4cjk4lkoxg9z0mo [4] https://lists.apache.org/thread/rphkk90r6v9ntn8jhqn6wfnb8z9vj873 [5] https://lists.apache.org/thread/26hp1f7b23p4mv43r72wk59jxx6ro04p In examining the VOTE threads themselves, please note that the release manager added their VOTE explicitly at the bottom of the VOTE announcement message. It is typical in our community to do that. ## Project Status: The project is ongoing with relatively high activities this past quarter. ## Membership Data: Apache TinkerPop was founded 2016-05-17 (8 years ago) There are currently 29 committers and 15 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. Last addition was Yang Xia on 2023-03-14. - No new committers. Last addition was Cole Greer on 2023-05-30. ## Project Activity: We are currently in the final stages of preparing the 3.6.7 and 3.7.2 maintenance releases, which we expect to reach the final voting stage in the week of Apr 8. This minor set of releases focuses on resolving existing bugs and improvements reported through JIRA. Some notable changes were performance improvements that led to 35-60 times faster query compilation for complex queries that involved many child traversals. We are also happy to add ARM64 support to the Gremlin Console Docker image with this release, as previously only the Gremlin Server image contained multi-arch support [1]. The community is in discussion for developing new features as part of the next major release of TinkerPop 4.0. One major body of work proposed is replacing the existing WebSocket protocol with HTTP/1.1 [2]. Additionally, discussions have started for improved serialization types [3] and providing reference implementation for request interceptors [4] as an extension to the HTTP/1.1 work. ## Community Health: Overall, the community is in good health. We have received high quality community contributions this part quarter. One notable contribution is the integration of TypeScript into our JavaScript driver [6]. With this we've now officially opened TypeScript support in TinkerPop 4.0, which is something the community has been raising in the past year. We hosted another live event on Twitch [7], where we invited developers from Janus Graph to chat about their recent GA release. All the recordings are available on our YouTube channel [8]: * TinkerPop Wide: Q&A with JanusGraph [9] Presenter: Bo, Alex Porunov The community has also learned about the GraphAR project [10], which is a data file format designed for efficient graph data storage and retrieval that recently entered Apache incubation, as it would be interesting to connect with their community about the project and see how it might benefit TinkerPop and our users. ## Report Links [1]: https://issues.apache.org/jira/browse/TINKERPOP-3021 [2]: https://lists.apache.org/thread/vfs1j9ycb8voxwc00gdzfmlg2gghx3n1 [3]: https://lists.apache.org/thread/0546dhhsy4bksc8o05kvpstffcd7nlrd [4]: https://lists.apache.org/thread/cpsdd7gjmr1yb6c5kkm6v2bcfpp6fqq5 [5]: https://lists.apache.org/thread/lhfnm1d1zrzxvxwcddh7v76gwhg9o5fb [6]: https://github.com/apache/tinkerpop/pull/2515 [7]: https://www.twitch.tv/apachetinkerpop [8]: https://www.youtube.com/@apachetinkerpop [9]: https://www.youtube.com/watch?v=TJmmkJFyJoI [10]: https://cwiki.apache.org/confluence/display/INCUBATOR/GraphArProposal ----------------------------------------- Attachment CE: Report from the Apache Traffic Server Project [Bryan Call] ## Description: The mission of Traffic Server is the creation and maintenance of software related to a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server. ## Project Status: Current project status: Ongoing with moderate activity Issues for the board: Would like to see community health metrics for the project over a longer span of time (ability to compare years). It is hard to see how we are trending over time. ## Membership Data: Apache Traffic Server was founded 2010-04-20 (14 years ago) There are currently 71 committers and 56 PMC members in this project. The Committer-to-PMC ratio is roughly 9:7. Community changes, past quarter: - No new PMC members. Last addition was Damian Meden on 2022-12-14. - No new committers. Last addition was Josiah VanderZee on 2024-01-07. ## Project Activity: We are working on our next major release of ATS, 10.0.0. We are currently testing the release in production at two major companies and should have the release finalized in Q2. We had two security and bug fix releases that went out on 4/3 (9.2.4 and 8.1.9). These releases including mitigation for the HTTP/2 CONTINUATION frame flood DDoS. ## Community Health: We will be having our next Spring Summit in Q2 in Denver, CO on May 7-9. It will be primarily a developer focused event with architecture and design discussions. We are continuing to have our weekly PR and issue scrubs on Mondays and design and status meetings for ATS 10 and HTTP/3 on Tuesdays. Activity on the mailing lists dropped significantly this last quarter between 42% to 62%. Also, commits and contributors have dropped 26% and 22% respectively. Hard to tell if this is a long term trend or just down for this quarter. ----------------------------------------- Attachment CF: Report from the Apache Web Services Project [Daniel Kulp] ## Description: Apache Web Services is a collection of shared technologies related to SOAP/XML based Web Services that can be shared by different implementations. Spring-WS, Axis2, CXF, and others use parts of the technology created within Apache Web Services. ## Project Status: Current project status: ongoing, low activity Issues for the board: none ## Membership Data: Apache Web Services was founded 2003-01-22 (21 years ago) There are currently 223 committers and 43 PMC members in this project. The Committer-to-PMC ratio is roughly 7:2. Community changes, past quarter: - No new PMC members. Last addition was Robert Lazarski on 2021-06-14. - No new committers. Last addition was Alessio Soldano on 2014-09-14. ## Project Activity: WebServices is a mature project based on standards that are also quite mature. As such, there is not a significant amount of activity required. However, user questions are being answered promptly, bugs are being fixed, and there are at least 3 independent PMC members around making sure the project can continue to produce releases as needed. Since SOAP/XML based Web Services is no longer considered state of the art, we don't expect a major uptick in new development efforts, new committers, etc... Activity this quarter was in a few areas: WSS4j - some new signature algorithms were added as well as support for using ECDH-ES for Key Agreement Axiom - bunch of dependency updates, most from dependabot, but still important WSS4J 3.0.3 was released on 2024-02-22 Past Releases: WSS4J 3.0.2 was released on 2023-11-01 Neethi-2.3.1 was released on 2023-09-11. XmlSchema-2.3.0 was released on 2021-09-20. Axiom-1.4.0: 2022-05-14 Woden-1.0M10: 2015-09 ## Community Health: As mentioned, SOAP/WebServices is not considered state-of-the-art anymore and we are getting very little contribution from anyone other than the 2 or 3 regulars" that are driving features and changes needed for CXF (which is being driven by their employers). Thus, we are not seeing any possibilities for future new committers or PMC members. However, there are plenty of people around that can do releases and answer questions and respond to security issues. It's a mature project. ----------------------------------------- Attachment CG: Report from the Apache Wicket Project [Andrea Del Bene] ## Description: The mission of Wicket is the creation and maintenance of software related to Component-based Java Web Application Framework. ## Project Status: Current project status: ongoing Issues for the board: no issue to report. ## Membership Data: Apache Wicket was founded 2007-06-20 (17 years ago) There are currently 33 committers and 32 PMC members in this project. The Committer-to-PMC ratio is roughly 9:8. Community changes, past quarter: - No new PMC members. Last addition was Thomas Heigl on 2020-08-14. - No new committers. Last addition was Thomas Heigl on 2020-05-18. ## Project Activity: March has seen the release of Wicket 10. Therefore, the activities during this last quarter have been focused on finalizing Wicket 10 and producing the press stuff for the release. We also worked to align other satellite projects (like WicketStuff or Spring Boot integration) to the last main release. In addition to Wicket 10 we also released version 9.17.0. Both these releases fix CVE-2024-27439 - 'Possible bypass of CSRF protection' reported by our contributor Jo Theunis. ## Community Health: Community participated in updating satellite projects to the new main release, as a consequence contributions were less focused on Wicket itself. Looking at the download statistics from Maven repository the overall trend remains very positive, with growing numbers over the last year. ----------------------------------------- Attachment CH: Report from the Apache Zeppelin Project [Jongyoul Lee] ## Description: The mission of Zeppelin is the creation and maintenance of software related to A web-based notebook that enables interactive data analytics ## Project Status: Current project status: At risk, Apache Zeppelin has a few active PMCs and committers. Even though there are not many active committers, the users aren't small so we need to overcome this asymmetry by inviting more contributors and committers Issues for the board: As mentioned in the feedback for the last report, we might not think about how critical security issues affect the project. Last December, I tried to fix all existing security issues and fixed or concluded 18 security issues. We also published 17 CVE issues. ## Membership Data: Apache Zeppelin was founded on 2016-05-18 (8 years ago) There are currently 24 committers and 11 PMC members in this project. The Committer-to-PMC ratio is roughly 2:1. Community changes, past quarter: - No new PMC members. The last addition was Jeff Zhang on 2018-01-25. - No new committers. The last addition was Guanhua Li on 2022-12-03. ## Project Activity: Apache Zeppelin has two releases in the reporting period. It includes many security fixes. - 0.11.0 at 2024-02-11 - 0.11.1 at 2024-04-02 ## Community Health: Even with the lack of contributors, Apache Zeppelin community has made changes. However, some members are worried that, Apache Zeppelin needs more contributors, and other PMC members and I will focus on advertising the project for potential contributors. I, personally, will participate in the event for the opensource academy held by the Korean government and will try to invite new contributors. Moreover, we, potentially, have a bar to invite committers who have contributed at least 1.5 years but I'm about to suggest that we'd better lower the bar. ------------------------------------------------------ End of minutes for the April 17, 2024 board meeting.