The Apache Software Foundation Board of Directors Meeting Minutes March 19, 2008 1. Call to order The meeting was scheduled for 10:00 (Pacific) and began at 10:01 when sufficient attendance to constitute a quorum was recognized by the chairman. The meeting was be held teleconference, hosted by Jim Jagielski and Covalent. IRC #asfboard on irc.freenode.net was be used for backup purposes. 2. Roll Call Directors Present: Justin Erenkrantz J Aaron Farr Jim Jagielski Geir Magnusson Jr (arrived at 10:04) William Rowe Jr Sam Ruby Henning Schmiedehausen Greg Stein Henri Yandell Directors Absent: none Guests: Brett Porter 3. Minutes from previous meetings Minutes (in Subversion) are found under the URL: https://svn.apache.org/repos/private/foundation/board/ A. The meeting of January, 16, 2008 See: board_minutes_2008_01_16.txt Approved by General Consent. B. The meeting of February, 20, 2008 See: board_minutes_2008_02_20.txt Approved by General Consent. 4. Executive Officer Reports A. Chairman [Jim] Over the last month, the most obvious activity has been the ongoing discussion regarding the 3rd party licensing policy, including comments and debates regarding the current "draft" policy. One thing that all parties agree to, however, is that this needs to reach closure. I am looking at candidate dates for the next ASF members meeting. The possible dates are: May 27-29 June 3-5 June 10-12 June 24-26 Preliminary checking indicates that all of these dates are acceptable to the current board, and so I will be pinging the membership regarding which are the most viable. As with previous meetings, this will also be held by irc with all elections/voting done by the voter tool. I anticipate that this will result in another round of "discussions" on the members list *grin*. The contract for the new secretarial assistant was signed on Feb. 26, 2008, with a start date of March 1, 2008. I did a small podcast for ebizQ with Dennis Byron concerning the ASF. Additionally, I was invited to speak at a seminar for The National Center for Public Health Informatics at the Centers for Disease Control and Prevention in Atlanta on May 5th, regarding "Open Source 101". B. President [Justin] Last month, at Microsoft's invitation, I and several other representatives from various ASF projects visited Microsoft's Compatibility Labs. It was a generally positive experience for our projects to learn about new features in Windows that they can take advantage of in future releases. Additionally, it also presented an opportunity to discuss directly with Microsoft representatives about their licensing strategies with respect to open source. Our issues surrounding acquiring a Sun support contract still remain - though, within the last few days, I've been sufficiently swamped that I haven't been able to as proactive as I would like. The last sales contact we had has left the reseller, the new person has given me their wrong phone number, and we don't yet have a contact for the Netherlands. I hope to break through the deadlock next week. I've discussed the system administration position with Joe and we've decided to shift more of the day-to-day management duties to Joe going forward. We also agreed upon a new set of responsibilities and contract rate going forward. As part of these new duties, Joe will be responsible for drafting the report and, as such, I've requested that the infrastructure report now be separated from my President's report. One of the initial tasks for Jon was to help draft a budget for the next fiscal year, but we are awaiting the books to be brought up to date to start this process. Also, I need to have a conversation with Jon and Joe regarding how we will handle procurement issues going forward. After some delays, the ball is now in my court as to setting the date for this conversation. During the discussion, it was noted that there is a new section added to the agenda for infrastructure. Justin will retain responsibility for this section. A request was made to add list of official attendees to the MSFT meeting to the minutes; but as it was noted that this information is already available at committers/hackathons/port25-08 in svn. C. Treasurer [J Aaron] I'm still behind on getting the quickbook file up to date. I'm going to need to take some time to consider how I'm going to handle that. The work isn't difficult, just takes some time that I haven't had lately. Other points of note: We'll have a new contractor on the payroll next week. I should also start moving money out of our paypal account. And of course, tax time is coming up. Paypal $ 10,316.36 ($+ 588.35) Checking $109,934.82 ($+ 8,692.09) Savings $156,584.82 ($+ 167.01) Total $276,836.00 ($+ 9,447.45) Expenses: Contractor Payments $ 8,022.22 Infrastructure $ 2.886.79 Banking Fees $ 448.90 TOTAL $11,357.91 Income: Donations via Lockbox $20,050.00 [1] Paypal Donations $ 588.35 TOTAL $20,638.35 [1] Includes IONA Silver Sponsorship Payment In discussion it was asked when the books will be brought up to date. Aaron's travel for the remainder of the month might mean that this not occur until next month. Justin suggested that Aaron make use of either the executive assistant or the secretary assistant. If not completed by apachecon EU, other arrangements will be discussed there. D. Exec. V.P. and Secretary [Sam] 2 grants, 59 iclas, and 5 cclas have been processed since 2008-03-01. No issues with eFax have been identified in the process. Training of the new secretary assistant is nearly complete. Outside of arranging for transportation of unscanned historical faxes, at this point the executive assistant's transitional duties are complete. I've developed a icla-check program that reports on common issues in that file. In the process I corrected a number of minor issues that had built up over time. Sebastian Bazley has been most helpful in this process. I've also developed a small web application to assist with the majority of common activities, hopefully reducing the error rates in the process. Updates outside of these common activities will still require direct editing of files and issuing of subversion commands. Executive officer reports approved as submitted by general consent. 5. Additional Officer Reports A. VP of Legal Affairs [Sam Ruby] See Attachment 1 B. VP of JCP [Geir Magnusson Jr] See Attachment 2 C. Apache Security Team Project [Mark Cox / Sam] See Attachment 3 D. Apache Conference Planning Project [Lars Eilebrecht / Geir] See Attachment 4 Geir to take action to work with Lars to resolve Peru Aaron provided an update on China (targetted for December) E. Apache Audit Project [Henri Yandell] See Attachment 5 F. Apache Public Relations Project [Jim Jagielski] See Attachment 6 Greg requested that the "selected press clippings" be trimmed. Jim agreed to do so for future meetings. G. Apache Infrastructure Team [Justin Erenkrantz] See Attachment 7 Additional officer reports approved as submitted by general consent. 6. Committee Reports A. Apache APR Project [Bill Rowe] See Attachment A B. Apache Cayenne Project [Andrus Adamchik / Justin] See Attachment B The board reiterated that the ASF will not accept project targetted donations. C. Apache Commons Project [Torsten Curdt / J Aaron] See Attachment C The board agreed that redistributing unchanged binaries does not require a re-vote. An inquiry was made re: crypto status. Henri to communicate the former and follow up on the latter. D. Apache Continuum Project [Emmanuel Venisse / Bill] See Attachment D E. Apache Excalibur Project [Carsten Ziegeler / Henning] See Attachment E F. Apache Felix Project [Richard Hall / Henri] See Attachment F G. Apache Gump Project [Stefan Bodewig / Jim] See Attachment G H. Apache Hadoop Project [Owen O'Malley / Greg] See Attachment H Greg to work with Owen to arrange for the transfer of the hbase.org domain to the ASF. I. Apache Harmony Project [Tim Ellison / J Aaron] See Attachment I J. Apache iBATIS Project [Ted Husted / Henri] See Attachment J Henri to report back that the VP of Legal Affairs and the Board consider the legal issue closed until we are provided with more details. K. Apache Incubator Project [Noel J. Bergman / Henning] See Attachment K A request was made that future reports be more explicit about tracking to exit criteria. L. Apache Jackrabbit Project [Jukka Zitting / Jim] See Attachment L M. Apache Jakarta Project [Martin van den Bemt / Sam] See Attachment M Sam to follow up on the missing report N. Apache Labs Project [Stefano Mazzocchi / Bill] See Attachment N P. Apache Lucene Project [Grant Ingersoll / Greg] See Attachment P Q. Apache OFBiz Project [David E. Jones / Justin] See Attachment Q The board notes the diversity issue and commends the project for actively working the issue. R. Apache Portals Project [David Sean Taylor / Geir] See Attachment R S. Apache Quetzalcoatl Project [Gregory Trubetskoy / Geir] See Attachment S Geir to follow up on the missing report T. Apache ServiceMix Project [Guillaume Nodet / Henning] See Attachment T U. Apache SpamAssassin Project [Justin Mason / J Aaron] See Attachment U V. Apache Synapse Project [Paul Fremantle / Bill] See Attachment V Bill to follow up on the missing report W. Apache Tiles Project [Greg Reddin / Henri] See Attachment W The board notes the request for input and advice, and simply commends the PMC for the way they are looking after the health of the project X. Apache Tomcat Project [Mladen Turk / Justin] See Attachment X Y. Apache Web Services Project [Glen Daniels / Greg] See Attachment Y A request was made to see a list of inactive subprojects rather than an absense of report. Glen has agreed to include all subprojects in future reports. Z. Apache Wicket Project [Martijn Dashorst / Sam] See Attachment Z AA. Apache Xerces Project [Gareth Reakes / Jim] See Attachment AA BB. Apache XMLBeans Project [Cezar Andrei / Sam] See Attachment BB Committee reports were approved as submitted by general consent. 7. Special Orders A. Establish the Apache Archiva Project WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software related to the management of build repositories and to the storage and retrieval of the build system artifacts residing in them. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache Archiva Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache Archiva Project be and hereby is responsible for the creation and maintenance of software related to the management of build repositories and to the storage and retrieval of the build system artifacts residing in them based on software licensed to the Foundation; and be it further RESOLVED, that the office of "Vice President, Apache Archiva" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache Archiva Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache Archiva Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache Archiva PMC: - Fabrice Bellingard (bellingard@apache.org) - Maria Odea Ching (oching@apache.org) - Nicolas de Loof (nicolas@apache.org) - Joakim Erdfelt (joakime@apache.org) - Arnaud Heritier (aheritier@apache.org) - Jesse McConnell (jmcconnell@apache.org) - Brett Porter (brett@apache.org) - Edwin Punzalan (epunzalan@apache.org) - Carlos Sanchez (carlos@apache.org) - Wendy Smoak (wsmoak@apache.org) - John Tolentino (jtolentino@apache.org) - Emmanuel Venisse (evenisse@apache.org) NOW, THEREFORE, BE IT FURTHER RESOLVED, that Maria Odea Ching be appointed to the office of Vice President, Apache Archiva, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed; and be it further RESOLVED, that the initial Apache Archiva PMC be and hereby is tasked with the creation of a set of bylaws intended to encourage open development and increased participation in the Apache Archiva Project; and be it further RESOLVED, that the initial Apache Archiva PMC be and hereby is tasked with the migration and rationalization of the Apache Maven PMC Archiva subproject; and be it further RESOLVED, that all responsibility pertaining to the Maven Archiva sub-project and encumbered upon the Apache Maven PMC are hereafter discharged. Special order 7A, Establish the Apache Archiva Project, was approved by Unanimous Vote. B. Update Public Relations Committee Membership WHEREAS, the Public Relations Committee (PRC) of The Apache Software Foundation (ASF) expects to better serve its purpose through the periodic update of its membership; and WHEREAS, the PRC is a Board-appointed committee whose membership must be approved by Board resolution, NOW, THEREFORE, BE IT RESOLVED, that the following ASF members be added as Public Relations Committee members: Bertrand Delacretaz Ross Gardler Special order 7B, Update Public Relations Committee Membership, was approved by Unanimous Vote. C. Change the Apache Shale Project Chair WHEREAS, the Board of Directors heretofore appointed Craig McClanahan to the office of Vice President, Apache Shale Project, and WHEREAS, the Board of Directors is in receipt of the resignation of Craig McClanahan from the office of Vice President, Apache Shale Project; NOW, THEREFORE, BE IT RESOLVED, that Craig McClanahan is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache Shale Project, and BE IT FURTHER RESOLVED, that Gary VanMatre be and hereby is appointed to the office of Vice President, Apache Shale Project, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special order 7C, Change the Apache Shale Project Chair, was approved by Unanimous Vote. 8. Discussion Items Henri will not be attending ApacheCon EU. Sam's attendance is doubtful at this time. The VP of Legal Affairs reiterated that resolving the 3rd Party Licensing policy is being pursued by the Legal Affairs Committee and requested that discussion be directed to legal-discuss. No objections were raised. 9. Review Outstanding Action Items 3 missing reports are to be pursued Greg to pursue transfering of hbase.org over to infra Henri to communicate back to commons and iBATIS 10. Unfinished Business 11. New Business 12. Announcements 13. Adjournment Meeting adjourn at 10:44 (Pacific) ============ ATTACHMENTS: ============ ----------------------------------------- Attachment 1: Report from the VP of Legal Affairs The third party draft has been a significant distraction. This document serves a quite useful purpose -- as a guide. Shortly after this month's board meeting, I plan to publish a short document describing how it is useful as a guide and identifying a few places where hard distinctions it attempts to make are overreaching and will not (yet) be enforced. Meanwhile, focus will return to concrete, tangible, and near-term decisions. The first two of which which will be resolved this week deal with code licensed for use "in the creation of products supporting the Unicode Standard" and an optional LGPL "deployer" distributed in source form. Other activities: * WSRP4J is looking into potential patent claims * Ongoing crypto notice work * Discussion on maintenance of the year on copyright notices * Question as to whether we would allow projects to dual license (answer: no) * Discussion of various open specification pledges, particularly Microsoft's * OSGI bundle requirements will require ServiceMix to create, maintain, and distribute a small amount of CDDL licensed descriptions. * Continuing confusion over the split between the NOTICE and LICENSE files, this needs to be dealt with by the Legal Affairs Committee * Fielded a question from a non-profit that wanted to base their license off of ours. * A growing list of open legal questions, mostly related to third party licensing. * Glassfish still hasn't restored the Apache License headers to Jasper files, despite some encouraging words that they were going to. Yet another letter was sent to Simon Phipps and the legal contact at Sun he provided me with. ----------------------------------------- Attachment 2: Report from the VP of JCP This was a quiet month internally - there are two new requests for TCKs that I'm in the process of working through. There appears to be a little internal confusion inside Sun for handling these that I will address directly with Sun next week. I have no reason to believe it is anything other than organizational entropy within Sun. The only news was the Sun presentation at the last JCP EC meeting, held on February 26th. I have forwarded the slide deck to the members@ list with comments, and am engaging with the membership directly. I think that this is a good way to transparently report on confidential JCP issues without the problem of them appearing in public board minutes. ----------------------------------------- Attachment 3: Status report for the Apache Security Team Project There continues to be a steady stream of reports of various kinds arriving at security@apache.org. These continue to be dealt with promptly by the security team. For Feb 2008: 2 Support question 4 Security vulnerability question, but not a vulnerability report 1 Phishing/spam/attacks point to site "powered by Apache" 1 User was hacked, but it wasn't ASF software at fault 3 Vulnerability report Nothing much to note, although three requests this month to remove emails from mail-archives.apache.org as the addresses are unobsfucated and indexed by google. ----------------------------------------- Attachment 4: Status report for the Apache Conference Planning Project General News ------------ * no general news Conference Overview ------------------- * ApacheCon Europe 2008 Location and date: Amsterdam, April 7-11, 2008 Lead: Noirin Shirley Co-Lead: Lars Eilebrecht Planning list: planners-2008-eu@apachecon.com Producer: Stone Circle Productions, Inc. * ApacheCon US 2008 Location and date: New Orleans, November 3-7, 2008 Lead: Shane Curcuru Co-Lead: Noel J. Bergman Planning list: planners-2008-us@apachecon.com Producer: Stone Circle Productions, Inc. * Apache Track or ApacheCon Peru 2008 Location and date: Lima, Peru, October 18, 2008 An Apache-related conference or track may be co-hosted with the VISION 2008. No final decision has been made yet. * OSSummit Asia 2008 (joint-conference with Eclipse Foundation) Location and date: (location and date to be defined) Leaders: J Aaron Farr, Justin Erenkrantz, Noirin Shirley Planning list: planners-2008-asia@apachecon.com Producer/Owner: OSSummit LLC ApacheCon Europe 2008 News -------------------------- * Number of registrations is very good. * Press releases about ApacheCon Europe have been published 28 Feburary and 17 March. * SCP's PR agency is setting up telephone interviews for journalists with select speakers and conference planners. ApacheCon US 2008 News ---------------------- * The Call for Papers for ApacheCon US was published 1 March. * A press release about the CFP and ApacheCon US will be published by the end of March. ApacheCon Peru 2008 News ------------------------ No news since last board report. OSSummit Asia 2008 News ----------------------- No news since last board report. ----------------------------------------- Attachment 5: Status report for the Apache Audit Project Justin and J Aaron requested that the Audit committee proactively help them with the tax return. The earliest this will be needed is May 1st. Both Gianugo Rabellino and Serge Knystatutas indicated that they could help out in May. ----------------------------------------- Attachment 6: Status report for the Apache Public Relations Project The PRC has started contacting current sponsors whose sponsorship is up for renewal in a few months. We anticipate all Silver and above sponsors will renew. We are also in final discussions with a new Silver sponsor. We anticipate that this will complete in 1-2 weeks. An "ASF Outreach Committee", an outgrowth of the Summer of Code work done by various ASF people, was discussed, with the decision being made that this was really best suited to be "folded into" the PRC. Hence the resolution to add Bertrand and Ross to the PRC membership. They will be focusing on these issues as well as general PRC topics. J Aaron Farr has started crafting an ASF Trademark & Logo usage policy. Currently its inspiration is the Tomcat policy and the Eclipse policy. Included below is the HALO report for the last month: ACTIVITY: Strategic Planning DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Communications Plan/Announcement Schedule (finalizing dates) - Researching/Updating Editorial Calendar Opportunities ACTIVITY: Content Development DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Revised ASF boilerplate - Reviewed/Edited Press Release: Synapse 1.1 announcement - Edited Press Release: 13 December - Yahoo! Platinum Sponsorship - Drafted Press Release: ASF 2007 Year In Review - Issued Press Release: ASF 2007 Year In Review - Drafted Press Release: ApacheCon Registration Open - Issued Press Release: ApacheCon Registration Open - Reviewing/Updating ASF/Top-level Project/activity positioning - Drafting Copy deck: Website News section/second tier page - Research Archives: ASF-issued press releases post June 1999 - Drafted Press Release: Apache Synapse as TLP/v1.1.1 Available - Issued Press Release: Apache Synapse as a TLP/v1.1.1 Available - Potential: ASF GHOP Grand Prize Winner (did not receive ack on request to pursue) - Potential: Apache Lenya v2.0 (did not receive ack on request to pursue) ACTIVITY: Outreach & Liaison DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Purchased new media lists (will be updated quarterly) - Honing database (ongoing): additional media, influencers, and bloggers - Face-to-Face Meeting with analysts at Forrester and Gartner - Contacting industry analysts (pre-report time)/influencers: RedMonk, Gartner Group, Forrester, The451, ZapThink, O'Reilly, InfoWorld, Elemental Media Coordination: Yahoo!, Mark Logic, Radar Networks, IT Conversations - ASF Sponsor Liaison: HP > onto ApacheCon sponsorship Outreach to Tim Berners-Lee re: clarification on "Apache/W3C relations" - Coordinate with Arje Cahn and Hippo PR team to translate/distribute ApacheCon press release in Dutch - Liaising with Delia Frees re: ApacheCon Business Track panel sponsorship - Response to Markus Stiegler, XDEV Software, re: CeBIT; liaise with Charel Morris - Forwarding contact - Ilan Rabinovitch re: SCALE; liaise with Charel Morris - Forwarding contact Armijn Hemel re: Dutch Java Users Group and Utrecht Linux Users Group; liaise with Charel Morris - Re-pinged Tim Berners-Lee re: clarification on "Apache/W3C relations" (no return ack) - Coordinate ASF logo to Arje Cahn/Hippo PR for ApacheCon press release in Dutch - Met with New Orleans officials re: possible community outreach/voluntourism for ApacheCon US in November - ASF Sponsor Liaison: IONA > reviewing press release + ApacheCon sponsorship PR ACTIVITY: Media Training DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Secured David Waddington for Media/Analyst training at ApacheCon Europe - Secured Michael Cote'/RedMonk as partner for Media Training + cover the ASF's activities during ApacheCon ACTIVITY: Process DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Developing "How to Work with the PRC" (will be part of Intermediate Media Training offered at ApacheCon) - Developing Announcement Guidelines, Tips, and Timeframes - Incorporating process into Intermediate Media/Analyst Training for Amsterdam - Flagged + forwarded 2 instances of process violation of the ASF name/brand by Intaglio; action taken by the PRC - Process clarification on coordinating "Intro to the ASF" talk with Jim and CDC ACTIVITY: Media Relations/Coordination DELIVERABLES IN PROGRESS/COMPLETED TO DATE: - Elise Ackerman/San Jose Mercury News re: Doug Cutting on Wikia Search - Joe Barr/Linux.com re: Security Infestation - Dennis Byron/ebizQ.net re: ASF 2007 Year in Review (article will appear in 15 February newsletter on Open Source); podcast to be scheduled - Dennis Byron/ebizQ.net re: Sun-MySQL acquisition - Clint Boulton/eWeek re: Oracle-BEA acquisition - Followed up on Jim Jagielski podcast with ebizQ.net - Followed up with PRNewswire to corrected missing content on Synapse release SELECTED CLIPPINGS: http://lwn.net/Articles/264525/ http://blogs.cnet.com/8301-13505_1-9852945-16.html?tag=head http://www.reuters.com/article/pressRelease/idUS135655+15-Jan-2008+PRN20080115 http://www.thewhir.com/marketwatch/011608_The_ASF_Shares_2007_Milestones.cfm http://www.linuxtoday.com/news_story.php3?ltsn=2008-01-16-013-26-OS-CY-SV http://www.linuxelectrons.com/news/roundup/15756/2007-earns-apache-more-feathers-its-cap http://lwn.net/Articles/265182/ http://apache.sys-con.com/read/485557.htm http://www.nabble.com/The-Apache-Software-Foundation-Wraps-Up-2007-As-Its-Strongest-Year-to-Date-td14858613.html http://www.tectonic.co.za/?p=2039 http://www.covalent.net/about/news/pressreleases.html?pressid=106 [NOTE: not sure if this should be posted as a "Covalent press release"] http://www.openpr.com/news/36000/REGISTRATION-NOW-OPEN-FOR-APACHECON-EUROPE-2008.html http://biz.yahoo.com/prnews/080123/clw053.html?.v=101 http://www.reuters.com/article/pressRelease/idUS139357+23-Jan-2008+PRN20080123 http://upcoming.yahoo.com/event/408827/ http://apache.sys-con.com/read/489398.htm http://ajax.sys-con.com/read/489398.htm http://www.lanmagazine.nl/site/jsp/nieuws.jsp?art_iID=9043 http://usstock.jrj.com.cn/news/2008-01-23/000003218199.html http://howsoftwareisbuilt.com/2008/01/24/interview-with-justin-erenkrantz-president-apache-software-foundation-part-i/ http://www.persberichten.com/persbericht.aspx?id=45978 http://www.ajaxworld.com/read/171022.htm http://www.ebizq.net/hot_topics/open_source/features/8862.html http://www.crn.com/software/206504026 http://www.pronetworks.org/index.php/microsoft-news/2141 http://osofbiz.blogspot.com/2008_01_01_archive.html http://www.reuters.com/article/pressRelease/idUS151245+05-Feb-2008+PRN20080205 http://blogs.msdn.com/dotnetinterop/archive/2008/02/06/interesting-microsoft-may-become-platinum-sponsor-of-apache-software-foundation.aspx http://apache.sys-con.com/read/496070.htm http://www.itnews.com.au/News/69265,google-summer-of-code-headed-down-under.aspx http://www.hippo.nl/en/agenda,200/ApacheCon-Europe-2008---Amsterdam-.html http://port25.technet.com/archive/2008/02/26/the-apache-visit-to-microsoft-campus-day-one.aspx http://port25.technet.com/archive/2008/02/28/the-apache-visit-to-microsoft-campus-day-two.aspx http://port25.technet.com/archive/2008/03/03/the-apache-visit-to-the-microsoft-campus-day-three.aspx http://lwn.net/Articles/267833/ ----------------------------------------- Attachment 7: Status report for the Apache Infrastructure Team Pressed new brutus machine into production, shut down old brutus. Brought bia (the new backup machine) online. Work continues on setting up the actual backups, mainly driven by Tony Stevenson and Norman Maurer. Experiencing some problems with jira's availability on new brutus. Jeff Turner is looking into it. Migrated bugzilla to 3.0. Special thanks to Mark Thomas and Sander Temme for all the hard work that went into that process. TLP migration for continuum was completed. Roughly 2 dozen new account requests were processed. infrastructure-dev@ was made a public list at Jukka Zitting's request. ----------------------------------------- Attachment A: Status report for the Apache APR Project Activity on the APR project has been very quiet this past quarter. There has been relatively little bugzilla or dev forum traffic, relatively little commit activity, and no releases nor activity towards a release since Nov '07 (reflecting the general stability of the project at this time). No committee members or committers have changed in this period. Some proposals for new APIs are being floated; since APR is consumer driven (by projects that have adopted it), this likely reflects a quiet period from its users development goals. The APR project is in compliance with the Crypto policy, has been subject to this, and is exporting socket encryption wrappers in the development 'trunk' of the apr-util subproject (not yet shipped within a release). ----------------------------------------- Attachment B: Status report for the Apache Cayenne Project Development * Active development of Cayenne 3.0. * Posted 3.0M3 development milestone release * Cayenne now using the shared Hudson CI server * The Sun donated server had been offline for the last month due to hardware issues and so little work has been done to set it up for the Cayenne project to date. Now that it is back up, we expect to install a range of databases on that machine shortly for testing purposes. Community * Activity on the user and development lists has been higher than previous averages. Cryptography * A review of http://www.apache.org/dev/crypto.html has determined that Cayenne does not have any reporting obligations since it does not contain any cryptographic code under the ECCN 5D002 definition. Although Cayenne might be used by developers with cryptographic libraries, it is not "specially designed or modified for" such a purpose. ----------------------------------------- Attachment C: Status report for the Apache Commons Project General ======= o Activity The past few months have been quite busy. A couple of releases (see below) have gone out. Based on http://markmail.org/ user activity is slowly declining while activity on the development list has significantly increased at the beginning of the year. It's slowly declining again. Question of dormancy have been raised for 'commons vfs' and 'commons launcher'. o Re-release of old source distributions This has been brought to the board's attention before. For the user's convenience we would like to re-package old source releases and provide them also as source jars. This of course affects releases that have been made under ASL 1.1. While new releases have to be ASL 2.0 the current opinion is that (as long as nothing is changed during the process) this "re-packaging" does not classify as a new release. So we can still provide the new artifact under ASL 1.1. Basically it would have to adhere to the rules when the orignal release has been made. No action has been taken yet. It would be great to get the board's agreement on the PMC's notion. o Commons Sandbox Incubator While the Commons Sandbox works quite straightforwardly for ASF internal use, the question is what to do with external component level code donations that may or may not been already covered by CLA. Building a community around a single component inside the normal Incubator might be tough. The idea has been brought up to work with Labs or the Incubator to find a solution to this. o Removal of Cobertura reports (as the resulting reports may GPL) Cobertura is a code coverage plugin for maven. It's been used through the ASF to generate reports that are part of the website. As at least part of the generated site is covered by the GPL we decided not to use it anymore. Otherwise we cannot ship the website for a release. o Support for OSGi New Commons releases will now include the metadata that is required to be used inside OSGi out of the box. o We got two new components into the Commons sandbox - monitoring http://wiki.apache.org/commons/Monitoring - commons build plugin Which got promoted to proper pretty much straight away for the infrastructure and build improvements (see below) http://mail-archives.apache.org/mod_mbox/commons-dev/200802.mbox/%3c55afdc850802091808g61a86940t9e5d75115c0ef837@mail.gmail.com%3e Releases ======== o Released - commons SCXML 0.7 http://mail-archives.apache.org/mod_mbox/commons-dev/200712.mbox/%3cce1f2ea80712191002g5f96d5few83279ba4a42999bd@mail.gmail.com%3e - commons pool 1.4 http://mail-archives.apache.org/mod_mbox/commons-dev/200801.mbox/%3c8a81b4af0801151908x195f664dy600cd83abecdaaa8@mail.gmail.com%3e - commons sandbox parent POM 3 http://mail-archives.apache.org/mod_mbox/commons-dev/200801.mbox/%3c55afdc850801181745g7f48efc4s5e84447297732a25@mail.gmail.com%3e - commons IO 1.4 http://mail-archives.apache.org/mod_mbox/commons-dev/200801.mbox/%3c55afdc850801200801p16e8265em3652d1e0e81a9f5d@mail.gmail.com%3e - commons fileupload 1.2.1 http://mail-archives.apache.org/mod_mbox/commons-dev/200802.mbox/%3ce75283b10802061209r554e249dg7f3afd6ccfcab6cb@mail.gmail.com%3e - commons math 1.2 http://mail-archives.apache.org/mod_mbox/commons-dev/200802.mbox/%3c8a81b4af0802232149g3e237e9j455d62d3ac0d3d6@mail.gmail.com%3e - commons build plugin 1.0 http://mail-archives.apache.org/mod_mbox/commons-dev/200802.mbox/%3c55afdc850802240403n4d6f3ae7o5bfa09bc6c3b3a53@mail.gmail.com%3e - commons proxy 1.0 http://mail-archives.apache.org/mod_mbox/commons-dev/200802.mbox/%3cf2e8eedf0802261011g5dfe9517g9d089cbfc101cb5b@mail.gmail.com%3e - commons parent POM 6 http://mail-archives.apache.org/mod_mbox/commons-dev/200801.mbox/%3c55afdc850801061239r6128513cxde21e25e0338af01@mail.gmail.com%3e - commons parent POM 7 http://mail-archives.apache.org/mod_mbox/commons-dev/200801.mbox/%3c55afdc850801151216pe4a33dbj4455ed5737e69891@mail.gmail.com%3e - commons parent POM 8 http://mail-archives.apache.org/mod_mbox/commons-dev/200803.mbox/%3c55afdc850803011310u31561507te49f5bf5d51678f6@mail.gmail.com%3e - commons sandbox parent POM 4 http://mail-archives.apache.org/mod_mbox/commons-dev/200803.mbox/%3c55afdc850803041651q37ddd80bxba6973e90cadf900@mail.gmail.com%3e - commons parent POM 9 http://mail-archives.apache.org/mod_mbox/commons-dev/200803.mbox/%3c55afdc850803090330i1f529a94vf5c8fbdf07424698@mail.gmail.com%3e Infrastructure ============== o The maven based release process has been discussed and improved. o For some components missing/broken redirects from jakarta have been fixed. o Old bugzilla entries have been removed and we are 100% jira now. We hope to get redirects in place so people will not hit broken links but get to correct jira issue instead. http://mail-archives.apache.org/mod_mbox/commons-dev/200803.mbox/%3c8a81b4af0803081206v290eb85cjda5a1d4555ea0ccb@mail.gmail.com%3e Community ========= o No new committers o New PMC members - Gary Gregory ----------------------------------------- Attachment D: Status report for the Apache Continuum Project This report for March is the first report since Continuum graduation last month. Continuum resources have been completely moved out of the Maven area. The web site has moved to its final location (http://continuum.apache.org). The svn repo has moved to its final location (http://svn.apache.org/repos/asf/continuum/). The mailing lists has been moved too. We are currently working on Continuum 1.2, which isn't planned yet. Discussions are started about the next major version (2.0). About cryptography, a review of http://www.apache.org/dev/crypto.html has determined that Continuum does not have any reporting obligations since it does not contain any cryptographic code under the ECCN 5D002 definition. Although Continuum might be used by developers with cryptographic libraries, it is not "specially designed or modified for" such a purpose. ----------------------------------------- Attachment E: Status report for the Apache Excalibur Project This quarter was the quietest one - nearly zero activity, neither in the mailing lists nor in subversion, and no releases. There are no known issues. LEGAL The code of Excalibur was checked; no crypto software is contained/developed at Excalibur so there is no action required with regards to the Export Notification Policy. ----------------------------------------- Attachment F: Status report for the Apache Felix Project Community * Added Stuart McCulloch to the PMC. * Added Christian van Spaandonk as a committer to work on Deployment Admin. Software * Released {{1.0.1}} version of core Felix sub-projects (i.e., framework and main). This release fixed mostly minor bugs discovered since the prior release, although there were a few minor new features added as well. * Released {{1.0.3}} release of Felix framework/main subprojects; which included numerous bug fixes and feature ehancements (including support for running the framework on Google's Android). * Released numerous other subprojects, including Bundle Plugin, SCR Plugin, OBR Plugin, Preferences, Config Admin, Metatype, Event Admin, and Bundle Repository. * Finalized Deployment Admin contribution from Luminis and committed it to our SVN repository. * Finalized Peter Kriens' contribution of the File Install bundle and committed it to our SVN repository. * Karl Pauls committed a significant patch that adds more complete security framework to the Felix framework and also provides implementations for security-related OSGi standard services (e.g., Permission Admin and Conditional Permission Admin); these improvements will be made available in a future release. Licensing and other issues * None this period. ----------------------------------------- Attachment G: Status report for the Apache Gump Project Infrastructure: * no new is good news. Technical: * we finally have more than just basic Maven2 support working and now build Maven2 projects against the most recent code of their dependencies as well. There are still some issues to iron out like cases where one jar built by Gump is known by more than one id in the repository or a project really needs to build against an older version of its dependency (think intentional API breakage on a new major version). We also need to migrate more projects and then can start adding more projects if they want to. * Sooner or later we will need to add support for more VCSes like git or hg, so far we didn't have to add a project that uses anything but svn or CVS, though. Other: * Crypto: apart from some code that calculates MD5 and SHA1 hashes in the Maven Repository Proxy there isn't anything in Gump that would go near crypto at all. As far as we can see there is no need for any sort of notification in Gump's code base. * still all Apache committers have access to metadata in svn. * no releases. ----------------------------------------- Attachment H: Status report for the Apache Hadoop Project TLP We have filed the appropriate paperwork for using cryptography within Hadoop. The first use will be HADOOP-2239, which will likely be committed this week. Yahoo and the Computing Community Consortium are sponsoring a Hadoop Summit (http://upcoming.yahoo.com/event/436226/) on March 25 to bring together users and developers. 215 people have signed up to attend. CORE We added two committers this month: Mukund Madhugiri for QA and release engineering, and Hemanth Yamjiala for contrib. Development has been active this month and we have released 0.16.1 this month, which fixed 40 jiras. Release 0.17 is scheduled to feature freeze in the first week of April and currently includes 70 committed jiras. HBASE Development has been focused on making our first subproject release, 0.1.0. The 0.1.0 release is feature frozen and runs against Hadoop Core 0.16.x. 20 of the 25 identified blocker issues have been resolved. The priorities for the 0.2 release are robustness and scalability. The proposal is on the HBase Wiki at: http://wiki.apache.org/hadoop/Hbase/Plan-0.2. HBase 0.2 is based on Hadoop Core trunk and is making progress as well with 54 of 73 issues resolved. An hbase contributor, Dennis Kubes, bought the domain hbase.org for the project, which points to hadoop.apache.org/hbase. A second HBase Users Group meeting was held at Powerset on March 4, with approximately 30 people attending. The meeting was informal, mostly getting the user community to discuss problems they had encountered using HBase and to gather issues blocking the 0.1.0 release. ----------------------------------------- Attachment I: Status report for the Apache Harmony Project Summary ======= The Apache Harmony community and code continue to be working well. We are still looking to the Board to help resolve the JCK license issue, but this is not stopping us delivering useful software to our users. Development & Releases ====================== The development team continues to be focused primarily on the Java 5 SE code stream, and we have successfully delivered two milestone releases since our last report. Milestone build 5.0M4 was published on Dec 19, 2007, and 5.0M5 on Mar 1, 2008. Each of these milestones contain a significant number of bug fixes and new functionality, as evidenced by the over 370 JIRA issues resolved and over 730 commits since our last report. Noteworthy advancements have been made in the following areas: * new JIT optimizations * functional and coverage enhancements throughout the class libraries, * improved VM threading design * support for full hardware addressability on 64 bit platforms * new appletviewer tool * initial version of unpack200 tool We continue to test with a variety of applications to ensure completeness and compatibility with the specification, and have made good progress in adding Apache Geronimo to our list of fully functional apps. The Java 6 APIs are being steadily filled-out and kept in synch with the Java 5 branch changes. Security ======== There were no reported security issues this period. Community ========= The community continues to operate in a healthy manner with a vibrant developer list, including a number of new participants on the mailing list. The PMC elected three new committers this period, Pavel Pervov, Sian January, and Vasily Zakharov. There were no changes to the PMC membership. There are currently 32 committers, ~23 of whom were active this period. Export Controls =============== The Apache Harmony PMC have reviewed the ASF export controls procedures and confirm that we are in compliance. ----------------------------------------- Attachment J: Status report for the Apache iBATIS Project Since our December 2007 report, the Apache iBATIS project has continued work on iBATIS 3, which is avialable in the sandbox for evaluation. A beta is expected sometime over the summer. We are also expecting a new version of Abator over the next quarter. As may be reported elsewhere, there was a legal incident with the Apache iBAITS Abator subproject. A company which uses the word Abator in another context raised issue with our use of the name, and the matter was turned over to the legal-internal list. Ted Husted has expressed an interest in resigning as PMC chair, and the PMC is working to nominate a successor and submit a proposed resolution to the board. ----------------------------------------- Attachment K: Status report for the Apache Incubator Project A number of projects have been informally or formally proposed for Incubation. We have voted on to accept: Thrift - http://wiki.apache.org/incubator/ThriftProposal CouchDB - http://wiki.apache.org/incubator/CouchDBProposal PDFBox - http://wiki.apache.org/incubator/PDFBoxProposal as noted in the previous Board Report. PDFBox has provided a report for this month; the other two have failed to do so. log4php also failed to report. QPid is proposing to graduate. There are diversity concerns being raised, and discussed. CXF is in the process of also proposing to graduate as a TLP, and has indicate that spending additional time in the Incubator to increase diversity, despite initial resistence, turned out to be very helpful and the right thing. Other than that, there are new committers and projects working on doing some releases. ------------------------------------------------------------ === PDFBox === Apache PDFBox is an open source Java PDF library for working with PDF documents. PDFBox entered incubation on February 7th, 2008. The basic project infrastructure (lists, svn, jira, etc.) is already in place, and we are currently working on migrating the source code and existing issues from SourceForge. We have also requested a user mailing list to replace the current help forums on SourceForge. PDFBox uses the Bouncy Castle crypto libraries for handling encrypted PDF files. We will take care of export control issues as we proceed with importing the PDFBox sources to Apache. === RAT === RAT is audit and code comprehension for releases and source. Been very quiet this month. Infrastructure is now mostly setup. Import of RAT main has been completed but the source still need tidying up. Incubating since: October 2007 === River === River is aimed at the development and advancement of the Jini technology core infrastructure. Jini technology is a service oriented architecture that defines a programming model which both exploits and extends Java technology to enable the construction of secure, distributed systems which are adaptive to change. Positive news is that work on the first release has completed and was approved for release by Incubator, we decided on a branching policy and work on the next release has been scheduled and has started. As a concern though overall participation by the initial set of committers is low, the same applies to people outside the group of committers. Incubating since: December 2006 === Shindig === Shindig is a reference implementation of the OpenSocial and gadgets stack. Incubating since: 2007-12-06 (Note this report covers since inception, as we've not yet submitted any other reports, and will submit for the next 3 months to compensate) High-level status summary: Shindig making rapid progress since inception in December 2007. * Accepted a couple rounds of "bootstrapping" Java and JS code contributions from Google (with appropriate IP licensing) * Large patch written by a community member for PHP port committed * Healthy community growing, though committers still Google-heavy * JIRA queue moving in full force * Initial website created: http://incubator.apache.org/shindig/ ----------------------------------------- Attachment L: Status report for the Apache Jackrabbit Project Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR, specified in JSR 170). The Apache Jackrabbit project is in good shape. We have no board-level issues at this time. o Releases Apache Jackrabbit 1.4 was released in January. We are considering switching to releasing individual components in a more frequent and fine-grained manner. So far Jackrabbit releases have contained new versions of all Jackrabbit components. The first component release, jackrabbit-core 1.4.1, was made in February. o Legal Apache Jackrabbit uses or bundles no cryptographic code, so there is no need for export control notifications. We have identified a minor license violation by an external party bundling Jackrabbit code without meeting all the ALv2 requirements (no NOTICE file, etc.). With help from the legal team, we have notified the party in question and expect the issue to be resolved soon. o Community The Jackrabbit PMC has voted to invite Esteban Franqueiro to be a Jackrabbit committer and PMC member. We are waiting for the CLA to proceed with the committer account and other administrative bits. We are planning to have a JCR community gathering event right next to the ApacheCon EU next month in Amsterdam. o Development The 1.4 release was well received, and with increased usage we've also seen many requests to make the default installation and out-of-the-box experience smoother for new users. We're working on addressing those needs. The ongoing work towards the JCR 2.0 reference implementation continues, and with major new features and changes entering the codebase we may see some instability of the trunk during the months ahead. On the other hand there's recently been much focus on improving test coverage and more test automation, which should help us maintain stability of the codebase. Some of our users are not yet ready to upgrade from 1.3 to 1.4, so we are working on the 1.3 maintenance branch to produce a 1.3.4 release with selected bug fixes and improvements from newer releases. o Infrastructure Our web site is now managed using Confluence. We have had problems with our private Continuum installation in the Jackrabbit zone, and so we are currently migrating our CI builds to the Hudson zone. ----------------------------------------- Attachment M: Status report for the Apache Jakarta Project ----------------------------------------- Attachment N: Status report for the Apache Labs Project There is nothing much to report about labs that needs the board's attention. No lab has yet to exit its status and transition into incubation even if at least one lab (Droid) is already thinking about doing it. There are a handful of labs that receive attention from their maintainers and many others that just sit there. It is worth noting that this was expected and this is nothing that concerns me or the labs population in general and I don't think it should concern the board either. There was a discussion about starting a lab to document guidelines for version control systems, mostly about the difference between centralized and distributed version control systems, but it was decided that infrastructure-dev@ was a better place to have such discussions, if only because the lab population was afraid of saturating the single labs@ mailing list with lots of heated and subjective discussions about version control styles. Other than that, labs remains a quiet project simply cruising along and no signs of anything that would require board attention. ----------------------------------------- Attachment O: There is no Attachment O ----------------------------------------- Attachment P: Status report for the Apache Lucene Project TLP The top-level project voted to promote Hadoop to it's own TLP, hadoop.apache.org. Nigel Daley, Owen O'Malley and Tom White resigned their positions on the Lucene PMC to focus on the Hadoop PMC. The TLP also voted to create a new project, named Apache Mahout, to build scalable machine learning libraries. Doug Cutting has resigned as Chair of the Lucene PMC. Grant Ingersoll has been elected the new chair. CRYPTOGRAPHY Nutch uses PDFBox and thus has a dependency on BouncyCastle. We have not begun the process specified at http://www.apache.org/dev/crypto.html, but will do so in the near term. LUCENE JAVA Lucene Java is a search-engine toolkit. Development has been very active and there have been many core improvements, especially in the area of indexing performance and error recovery. Version 2.3.0 was released on 2008-01-24, and a minor bug fix release (2.3.1) was made on 2008-02-23. SOLR Solr is a full text search server. We continue to see strong adoption and community interest. Development has been active with many new core features being added. Grant Ingersoll was added as a committer. NUTCH Nutch is a web-search engine: crawler, indexer and search runtime. Development is active. Recent work has concentrated on stability and bug-fixing in preparation for the upcoming 1.0 release, due around April. LUCY Lucy will develop a shared C-based core for ports of Lucene to other languages, such as Perl, Python and Ruby. No progress has been made this quarter. LUCENE.NET (incubating) Lucene.Net is an port of Lucene to C# on the .NET platform. Lucene.Net struggles with committership. George Aroush has effectively stepped down, but other strong contributors have rallied and are in the process of proposing a few new committers. TIKA (incubating) Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries. Development has been active. MAHOUT Apache Mahout is a new subproject of the Lucene PMC with the goal of building a suite of scalable machine learning libraries for text and data mining. Initial reaction to the project has been positive, with many people expressing interest and several code contributions already made. Initial committers are Grant Ingersoll, Otis Gospodnetic, Erik Hatcher, Isabel Drost, Ozgur Yilmazel, Niranjan Balasubramanian, Karl Wettin and Dawid Weiss. Jeff Eastman was also voted in as a new committer (after the initial project creation). ----------------------------------------- Attachment Q: Status report for the Apache OFBiz Project This report, for March 2008, is the fourth quarterly report for OFBiz (Open For Business) as a top level project. The Apache Open For Business Project (Apache OFBiz) is an open source enterprise automation software project. By enterprise automation we mean: ERP, CRM, E-Business / E-Commerce, MRP, SCM, CMMS/EAM, and so on. We have no issues that require Board assistance at this time. Community: - one new committer, Vikas Mayur, was voted in before the last report but his CLA and account had not been finalized; that is now complete - there are various new contributors and there is increasing traffic on the mailing lists and in Jira issues, but no new candidates for committers have stood out yet - some concerns about a single company with significant community presence has been voiced as Hotwax Media has 4 people on the PMC (out of 11) and 3 committers that are not PMC members (out of 10); the Hotwax Media leadership (including myself) is aware of this problem and we are making an efforts to grow from outside of the community and to help and encourage other service providers and end-user groups to participate more in the community; 4 of the 6 partners at Hotwax are OFBiz PMC members, and one more is a committer (the other 2 committers being employees), and it is understood that it is important for the OFBiz community and therefore for Hotwax as well that there be diversity and a wide base for stability within the community; any recommendations from the board or others experienced with this sort of thing is welcome Project: - more effort is going into automated testing to help with stability and to find problems more quickly as the community grows and more people get involoved - contributions continue in many areas including tools for more efficient development and analysis, core application improvements and extensions, and certain special purpose applications such as the existing project management app and the new sales force automation one - Crypto Export Control: OFBiz does use cryptography libraries for various things so as we understand it we have to follow the guidelines for the export control notifications; as part of this we have done the following: -- a Project listing has been added to https://svn.apache.org/repos/asf/infrastructure/site/trunk/xdocs/licenses/exports -- an email has been sent to crypt@bis.doc.gov, enc@nsa.gov, web_site@bis.doc.gov, and relevant ASF email addresses for the TSU notice -- a BIS/TSU exception notice has been added to the README and NOTICE files in the OFBiz trunk and the release4.0 branch ----------------------------------------- Attachment R: Status report for the Apache Portals Project -- New releases -- 29 December 2007 - Apache Portals Jetspeed 2.1.3 Released 29 December 2007 - Apache Portals Bridges 1.0.4 Released -- New committers -- Eric Dalquist Dennis Dam Vivek Kumar -- New PMC Members -- Woonsan Ko Dennis Dam Vivek Kumar Eric Dalquist We are working towards breaking down the perceived barriers between the Pluto and Jetspeed teams. We have scheduled a Portals meetup at ApacheCon in Amsterdam to try to create some synergy between the different portal vendors and open source developers involved in the Apache Portals project. -- The Apache Portals Applications sub-project was voted upon and accepted by the PMC. Apache Portals Applications (APA) is a collaborative software development project existing under the Apache Portals project. APA is dedicated to providing robust, full-featured, commercial-quality, and freely available Portlet Applications under the Apache license developed at the Apache Software Foundation. Mission: To promote the use of open source portal technology at the application layer: writing open portlet applications. The scope of APA does not include the system layer of portal development, such as portals and containers like Jetspeed, Pluto, or WSRP. We view portlet applications as an important technology in the growing web applications environment. We intend to build freely available portlet application software in order to promote the use of this technology. After several years of Apache Portals providing portal and container software, we are finding that portal technology has reached limited success. We believe the cause to this limited success is the lack of usable, open source portlet applications. -- Voting has started on the Pluto 1.1.5 release and is in progress this week. Pluto is continuing working towards the Portlet 2.0 specification reference implementation. JSR-286 implementation is coming along at Pluto, integration with Jetspeed, at a design level, has started. -- Jetspeed: working towards a 2.2 release, new Maven build and documentation. -- The WSRP4J project is still problematic. I have discussed this on legal It was recommended that I, the Portals representative, send letters to both patent holders, IBM and Web Collage. Here is the letter sent to IBM: Dear Sir or Madam, I'm writing to request an IBM patent license in support of the OASIS WSRP Version 1 Specification, in accordance to the IPR claims from IBM as made available on the following website: http://www.oasis-open.org/committees/wsrp/ipr.php I'm requesting this patent license on behalf of the Apache Software Foundation (ASF) and as Vice President of the Apache Portals project, and in particular for the Apache WSRP4J project which is working towards a formal release of an OASIS WSRP Version 1 implementation under the Apache License 2.0. The Apache WSRP4J project was initiated by IBM and include an initial source code donation and a Software License Agreement by IBM representative Dirk Wittkopp, Manager Portal Development, on September 2nd 2003. Although the Software License Agreement covers a patent license for the donated source code itself, it is not complete clear to us if this fully covers all possible patent claims of IBM concerning the OASIS WSRP Version 1 Specification. To be sure our WSRP4J implementation won't be unintentionally infringing these IBM patent claims, we'd like to receive a nonexclusive, royalty free patent license for these patents in addition to the above mentioned Software License Agreement. Yours faithfully, David Sean Taylor VP Apache Portals and the letter to Web Collage: Dear Mr Natovich, I'm writing to request a WebCollage patent license in support of the OASIS WSRP Version 1 Specification, in accordance to the IPR claims from WebCollage as made available on the following website: http://www.oasis-open.org/committees/wsrp/ipr.php I'm requesting this patent license on behalf of the Apache Software Foundation (ASF) and as Vice President of the Apache Portals project, and in particular for the Apache WSRP4J project which is working towards a formal release of OASIS WSRP Version 1 implementation under the Apache License 2.0. ----------------------------------------- Attachment S: Status report for the Apache Quetzalcoatl Project ----------------------------------------- Attachment T: Status report for the Apache ServiceMix Project Community ========= Added the following committers: * Chris Custine * Jeff Yu (account request pending) * Lars Heinemann Releases ======== * Apache ServiceMix Kernel 1.0-m2 Development =========== * ServiceMix 3.2 and 3.3 are actively maintained, with new components being included in the 3.3 trunk (OSWorkflow and Mail) * Work is being done to improve the documentation * ServiceMix 4 is being developed with a new milestone of the Kernel done, a milestone of the NMR currently being released Issues ====== * we need to take care of the export policy, as some JBI components include libraries subject to such requirements * we have requested a solaris zone to root * discussions around importing a JBoss plugin seem to have reached an agreement that it should be doable * we have also raised some questions about repackaging some third party libraries not under ASL 2.0 license to add OSGi manifest entries and redistribute them ----------------------------------------- Attachment U: Status report for the Apache SpamAssassin Project Releases - we released SpamAssassin 3.2.4 on 2008-01-05. Community - added Mark Martinec as a PMC member. Legal - the crypto export policy has been applied, and http://www.apache.org/licenses/exports/ has been updated to include SpamAssassin, with a 5D002 ECCN code. Other - we've been discussing the possibility of building a Hadoop-based mass-checking system; there's nothing concrete there yet, though. ----------------------------------------- Attachment V: Status report for the Apache Synapse Project ----------------------------------------- Attachment W: Status report for the Apache Tiles Project General Status The Tiles project continues to see slow and steady forward movement. There has been an uptick in interest on the users list. This is likely due to the fact that a GA release is finally available. Antonio is wanting to start the IP clearance for Kaolin (formerly the Dimensions project) and is still looking for a champion among the membership. He is seeking help on general@incubator. Cryptography We have reviewed the project code and dependencies and we do not believe the Tiles project meets the requirements for export notification. Please advise if the board requires further clarification. Community We have been concerned about a lack of committer activity on the project. Essentially all coding and technical support in at least the last three months has been done by one PMC member, namely Antonio Petrelli. That is not to say that no one else on the PMC is involved. I have been watching the commit logs and mailing lists, but really only contributing to the project administratively. It is also not due to any kind of "community tyranny" on the part of Antonio or anyone else. He is simply the only one who has the itch to scratch and the time to do it at the same time. I took a poll on the private list asking the PMC members to indicate their desired level of involvement on a 3-point scale with 1 being "fully involved" - contributing code, support, etc., 2 being administratively involved - moderating lists, voting, testing releases, etc., and 3 being not involved or emeritus. Antonio is the only committer who indicated a level of 1. Wendy Smoak, Nathan Bubna, and myself indicated a level 2, or intention for administrative involvement. No one else has responded, but in fairness I started the poll too late and was not able to give the full 72 hours needed for a full consensus. My personal take on the issue is that the Tiles codebase is in a stable state. It does what it is supposed to do in most cases. We do have a sense of where we would like to take the project in the future, but currently most of us are too involved elsewhere to make much progress in that direction. I see the uptick of user activity as a very positive thing and I need to do a better job of making the needs of the project and opportunities for involvement known to the users. I think we can draw in new committers from the user base over time. We should also consider the advice from the board at our last report to seek the help of prc@ in promoting the project. Again, we welcome any further input and advice from the board on this matter. ----------------------------------------- Attachment X: Status report for the Apache Tomcat Project Summary -------------- The project continues to be active on a number of fronts. There are no issues requiring Board attention at this time. Releases ------------- We cut a number of releases incorporating all our active branches. Tomcat 5.5.26 was released last month incorporating numerous security updates and bug fixes. Tomcat 6.0.16 was released last month, both primarily bug fix and security fix release over the previous 6.0.14 release Tomcat connectors, mod_jk, had a release: 1.2.26. Tomcat Native connector, had a first release: 1.1.13. Finally the Tomcat 4.1.37 was released which was primarily security fix release. Security ------------ We've been working closely with security issue reports and the Apache Security committee on quickly replying to issues, resolving them, and coordinating public disclosures. Development ------------------- We decided by majority that Tomcat Native (APR based connector) will be handled from now on as a separate subproject with its own release cycle. The standard vote/release process will be applied to it. The reason for separating this subcomponent to a separate release cycle is to better maintain this optional component, and to provide limited backward bug fix compatibility, and the fact that it is used both by Tomcat 5.5 and 6.0 branches. Community ----------------- After last quarter's new committers and PMC members, there were no changes the committership nor PMC membership this time. The new commit policy is working very fine, and we've been very active both in commit and release volume. ----------------------------------------- Attachment Y: Status report for the Apache Web Services Project Notable Happenings ------------------ Dims is back! :) Reinstated to the PMC. Elected new PMC members : Afkham Azeez, Keith Chapman Legal: We added Rampart, Rampart/C, and WSS4J to the export controls page and duly notified the gov't in order to come into compliance with crypto policy. Sayonara, Synapse - best of luck as a TLP! Nothing that requires board attention this time around. Subproject News --------------- The following are the specifics for each project that has had significant activity during this quarter. If a project is not mentioned below, there's nothing to report. * Axis2 Activity has been steady. Planning for the 1.4 release continues after a bit of a slow start. We're now in the midst of scrubbing JIRA for must-fix issues. Dims has been voted release manager and we're hoping to get an RC out very soon. As the world seems to be moving in an OSGi-ish direction, we've been adding OSGi metadata to our packages, including Axis2. * JaxMe2 No notable happenings. * Woden Since graduating from the incubator in Dec. Woden's infrastructure has been migrated to the Web Services project. Woden is still working towards an M8 release. While some time constraints have pushed back this release progress has been made recently and work is underway on the last feature for the M8 release, validation of the WSDL 2.0 assertions. We've also seen progress on Woden serialization, a key post M8 feature being implemented by a Woden contributor. * Xml Schema Ajith has been pulling together a 1.4 release collecting a lot of recent improvements, which we hope to have out soon. Currently at RC2 (as of March 14th), expect the release by EOM at latest. * Axis2/C 1. Axis2/C 1.3.0 Released 3rd March 2008 2. Three New Committers * Bill Mitchell * Senaka Fernando * Lahiru Gunathilake 3. Fixed 150+ issues since 1st of Jan 2008 * XML-RPC No notable happenings since the last board report. ----------------------------------------- Attachment Z: Status report for the Apache Wicket Project Apache Wicket is a Java framework for creating highly dynamic, component oriented web applications, and was established as an Apache project in June 2007. Summary Wicket 1.3 has been released at the start of the new year, and has received 2 maintenance releases. Planning has started for a new Wicket version and a new Wicket community event around ApacheCon EU 2008. Maurice Marrink has been added to the Wicket team. A crypto notification has been added. Community A second Wicket community event will be organized on tuesday April 8th just prior to ApacheCon. The previous Wicket meetup attracted 80-90 people from around the Netherlands and neighbouring countries. Wicket meetups around the world continue to be around, especially the London Wicket event attracts lots of people. Wicket will be presented at ApacheCon EU by Gerolf Seitz. Maurice Marrink has been voted in as a new committer and PMC member (we are waiting for him to send in his CLA). Martijn Dashorst was elected to become an Apache Member, increasing Membership participation for the Wicket PMC. Google's GHOP contest ended on February 4, 2008. The grand prize winner nominated by the ASF mentors did not work on any tasks related to the Wicket project. Off the 14 tasks provided by the Wicket team, 7 tasks have been completed. Both the students and the Wicket community showed only little effort towards interacting with each other. There is no delegate of the Wicket project attending the GHOP Award Ceremonies on July 10-13, 2008. Software We have released two maintenance releases for our 1.3 release (1.3.1 and 1.3.2). We are starting to plan our next release (Wicket 1.4 or 2.0: version number hasn't been decided yet). Part of the user community is eager for a quick 1.4/2.0 release with only Java 5 support in it, while the core team is reluctant to do so as it will force us into maintaining 3 branches: current 1.3, the generics version and new development. A decision will be made in the coming weeks. Cryptography We added Wicket to the export controls page and duly notified the government in order to come into compliance with crypto policy. ----------------------------------------- Attachment AA: Status report for the Apache Xerces Project Xerces-J Aside from some prototyping on an implementation of XML Schema 1.1 the project has been fairly quiet. Design thoughts have been posted on the Wiki. A few JIRA issues were recently raised by a member regarding the website/documentation (e.g. links to MD5 files) and packages we've published. We plan to address these before having our next release. Xerces-C A number of big tasks have been completed in the preparation for the 3.0.0 release: * Website copy split and documentation reorganization in order to host both 3 and 2-series releases. * Reorganization of the autotools-basedbuild system. * Removal of the lazy initialization that relied on invalid double-checked locking trick. * Clean up of the error messages. The build and tests are now passing on a number of platforms that were known to fail before (AIX, Solaris, Cygwin/Mingw). See the XercescBuildStatus page for details. A successful vote for the release of 3.0.0 beta was held. Xerces-P Giaugo Rabellino kindly pointed out (with thanks to Black Duck Software) that some files still have the 1.1 Apache license. No release has been made with the incorrect license version. When Xerces-C 3.0 is released the new version of P will be with the 2.0 license. This has been corrected in SVN. XML Commons Though there was no new development there was one bug report ([WWW] http://issues.apache.org/bugzilla/show_bug.cgi?id=44426) opened that is worth noting. The W3C receives a large number of requests every day for the same DTDs, XML Schemas and other XML resources. They've observed that this happens in large part because applications are not using XML Catalogs or grammar caching facilities such as the ones provided by Xerces. They're appealing to us for help. We plan to review their thoughts/proposals. GHOP We recently participated in the Google Highly Open Participation (GHOP) contest and engaged with a couple of students on some small tasks including a new logo for the project (designed by Ashley Morgan). Cryptography We are not aware of any cryptographic code in the Apache Xerces distributions. ----------------------------------------- Attachment BB: Status report for the Apache XMLBeans Project As usual, development continues with small fixes. On the community side, the mailing list seems to have increased the traffic lately, mostly with user questions that get answered quite promptly. There were no releases, no new committers and no issues to be brought to board's attention this quarter. The Cryptography discussion was brought on dev list, and we believe that XMLBeans project doesn't contain or directly use any cryptographic code, so there is no requirement for export control notifications. ------------------------------------------------------ End of minutes for the March 19, 2008 board meeting.