What the board has decided about this committee or office, and the reports it filed, most recent first. Generated from the published minutes.
These categorised views are best effort. They are read from the published minutes by a program, and what it can attribute to a committee depends on how each resolution happens to be worded — so a page may be incomplete, and nothing here overrides the minutes themselves. The raw minutes are the source of truth.
Please note. The board approves the minutes of a meeting at the meeting after it, and they are published then - so the most recent meeting is not usually here. ASF Members can read the draft in the board's own repository until it is.
[raw] the published minutes, which are the record. [main index]
Casbin is a powerful, efficient open-source access control framework that provides a unified, model-driven approach to authorization. Built on the PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific language, Casbin brings ACL, RBAC, and ABAC together under one model so that policies can be expressed flexibly and enforced at a fine-grained level. It offers high-performance enforcement and a broad multi-language ecosystem spanning Go, Java, Node.js, Python, .NET, C++, and Rust. Casbin has been incubating since 2026-02-07. ### Three most important unfinished issues to address before graduating: 1. Complete the first official Apache incubating release. 2. Clarify repository scope, release plans, and IP/grant coverage for the large set of Casbin repositories under the Apache GitHub organization. 3. Continue building a diverse, public, mailing-list-centered community and keep project decisions visible on dev@casbin.apache.org. ### Are there any issues that the IPMC or ASF Board need to be aware of? No new issues require special attention from the IPMC or ASF Board at this time. The podling is addressing the release-compliance findings from RC1 and is preparing RC2. The review of repository scope and IP/grant coverage remains ongoing with mentor and IPMC guidance. ### How has the community developed since the last report? - dev@ had 8 messages across 4 threads, with 4 participants. - The public dev list continued to carry Incubator report review and discussion about repository scope and IP/grant coverage. - Participation remained concentrated among existing contributors. Broadening the active contributor and discussion base remains a community priority. - The main apache/casbin repository reached about 20.3k GitHub stars. ### How has the project developed since the last report? - Across 239 tracked Casbin Apache GitHub repositories, 6 PRs were merged and 0 issues were closed from 2026-07-01 to 2026-07-31. All six merged PRs were in the Go core repository, apache/casbin. - The merged work focused on NOTICE and DISCLAIMER corrections, migration to standard ASF license headers, accounting for a bundled MIT-licensed configuration file, and adding a project-specific Apache RAT policy. - The resulting source-archive policy was validated with Apache RAT 0.18 at zero unapproved or unknown files, and tests passed both in the repository and from a clean source archive. - RC1 was cancelled after the binding IPMC review. The release remains in RC2 preparation, and no new release vote had opened by the end of July. ### How would you assess the podling's maturity? The podling is actively learning and applying the ASF release process. The first IPMC release review exposed compliance gaps that are being addressed, while community participation remains concentrated and needs to broaden. The podling is not yet nearing graduation. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: No official Apache release yet. ### When were the last committers or PPMC members elected? 2026-02-07 ### Have your mentors been helpful and responsive? Yes. Mentors and IPMC members have provided detailed, actionable feedback on release compliance, repository scope, and IP/grant coverage. ### Is the PPMC managing the podling's brand / trademarks? The project name has been approved in PODLINGNAMESEARCH-251. The PPMC is continuing to review release, website, and repository materials for Apache branding and trademark requirements. ### Signed-off-by: - [ ] (casbin) Hao Ding Comments: - [X] (casbin) Huajie Wang Comments: - [X] (casbin) Hulk Lin Comments: - [ ] (casbin) Jerry Shao Comments: - [X] (casbin) Zili Chen Comments: ### IPMC/Shepherd notes: [PJF] There are a number of open issues on the private mailing list where the issues have been open for many months.
Casbin is a powerful, efficient open-source access control framework that provides a unified, model-driven approach to authorization. Built on the PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific language (DSL), Casbin brings ACL, RBAC, and ABAC together under one model so that policies can be expressed flexibly and enforced at a fine-grained level. It offers high-performance enforcement and a broad multi-language ecosystem spanning Go, Java, Node.js, Python, .NET, C++, and Rust. Incubation at the Apache Software Foundation aims to make Casbin a community-driven, standardized authorization solution. Casbin has been incubating since 2026-02-07. ### Three most important unfinished issues to address before graduating: 1. Define an ASF-aligned release process and cut Casbin's first official Apache release. 2. Broaden the contributor base across organizations and keep moving day-to-day discussion onto the Apache mailing lists. 3. Finalize the transfer of domains and trademarks to the ASF. ### Are there any issues that the IPMC or ASF Board need to be aware of? No. ### How has the community developed since the last report? - The Apache dev list (dev@casbin.apache.org) is now the project's primary channel: it carried 17 messages in May (29 in March, 20 in April), covering the incubation report cycle, dependency updates, and ASF infrastructure changes. Traffic has been lighter than the first weeks of incubation, reflecting a shift from setup work toward steady-state maintenance. - GitHub stars on the main repository continued their slow, steady climb, reaching roughly 20.15k. - Automated dependency maintenance (Dependabot) stayed active across several of the Node.js and core SDK repositories, keeping the ecosystem's dependencies current. ### How has the project developed since the last report? - Prepared and circulated the project's first Apache Incubator monthly report for community review, establishing a regular reporting rhythm with the mentors and IPMC. - Worked with ASF INFRA to roll out default branch protection rulesets across the project's repositories — a governance step that brings the repos in line with foundation practice. - Carried out routine maintenance across the multi-language repositories. May was a deliberately quiet, housekeeping-focused month: 1 PR was merged and 2 issues were closed across the project, with the remaining activity being bot-driven dependency and infrastructure changes. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: No Apache release yet. ### When were the last committers or PPMC members elected? 2026-02-07 ### Have your mentors been helpful and responsive? Yes, very helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? Name is approved: https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251 ### Signed-off-by: - [ ] (casbin) Hao Ding Comments: - [ ] (casbin) Huajie Wang Comments: - [X] (casbin) Hulk Lin Comments: - [X] (casbin) Jerry Shao Comments: - [X] (casbin) Zili Chen Comments: ### IPMC/Shepherd notes: None
Casbin is a powerful, efficient open-source access control framework offering a unified, model-driven authorization approach. Based on the PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific language (DSL), Casbin seamlessly integrates ACL, RBAC, and ABAC models to enable flexible and fine-grained policy management. It delivers high-performance access control enforcement and supports a comprehensive multi-language ecosystem including Go, Java, Node.js, Python, .NET, C++, and Rust. Apache Software Foundation incubation will establish Casbin as a community-driven, standardized authorization solution. Casbin has been incubating since 2026-02-07. ### Three most important unfinished issues to address before graduating: - Establish a clear release process aligned with ASF guidelines and perform the first official Apache release. - Grow the community by onboarding new contributors from diverse organizations and transitioning discussions to Apache mailing lists. - Complete the formal transfer of domains and trademarks to the ASF. ### Are there any issues that the IPMC or ASF Board need to be aware of? No ### How has the community developed since the last report? - Officially announced Casbin's acceptance into the Apache Incubator and published the news via project blogs and community channels - Raised community activity: a new group of developers have joined the discussions on Discord and GitHub Discussions - Maintained steady growth in GitHub stars (the main repository increased from 19.4k to 20.1k) - During the incubation period, the download volume of packages across all language versions has kept rising, with the overall ecological adoption growing steadily - dev@casbin.apache.org saw 44 emails (mostly Dependabot bot notifications), including a community discussion proposal, with new subscribers joining. ### How has the project developed since the last report? - This is the first official monthly report for Casbin following its admission to the Apache Incubator - Added standardized configuration files and optimized the project's overall configuration management system - Implemented ASF compliance requirements: added the official .asf.yaml configuration file and Apache disclaimer file to ensure the project is fully compliant with the foundation's norms - Completed the addition of standard Apache License 2.0 headers to the entire codebase and initiated the preliminary intellectual property transfer process to the ASF - A total of 30 PRs merged and 40 issues closed during the incubation period ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: No apache release yet. ### When were the last committers or PPMC members elected? 2026-02-07 ### Have your mentors been helpful and responsive? Yes, very helpful and responsive. ### Is the PPMC managing the podling's brand / trademarks? Name is approved: https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251 ### Signed-off-by: - [ ] (casbin) Hao Ding Comments: - [ ] (casbin) Huajie Wang Comments: - [ ] (casbin) Hulk Lin Comments: - [ ] (casbin) Jerry Shao Comments: - [X] (casbin) Zili Chen Comments: ### IPMC/Shepherd notes:
