The Apache Way Contribute ASF Sponsors

Formal board meeting minutes from 2010 through present. Please Note: The board typically approves minutes from one meeting during the next board meeting, so minutes will be published roughly one month later than the scheduled date. Other corporate records are published, as is an alternate categorized view of all board meeting minutes.

2017 | 2016 | 2015 | 2014 | 2013 | 2012 | 2011 | 2010 | 2009 | 2008 | 2007 | 2006 | 2005 | 2004 | 2003 | 2002 | 2001 | 2000 | 1999 | Pre-organization meetings

Archiva

19 Apr 2017 [Olivier Lamy / Rich]

Report was filed, but display is awaiting the approval of the Board minutes.

15 Mar 2017 [Olivier Lamy / Bertrand]

No report was submitted.

27 Feb 2017 [Olivier Lamy / Mark]

## Description:

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Issues:

   There are no issues requiring board attention at this time

## Activity:

   Low. We worked on security reports. And some refactoring to get rid of old
   jpox library replaced by Apache OpenJpa

## Health report:

  3+ people have indicated presence, so has sufficient oversight.
  A new committer has been added.

## PMC changes:

 - Currently 8 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre on Fri Jul 11 2014

## Committer base changes:

 - Currently 21 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Martin Stockhammer at Thu Sep 22 2016

## Releases:

 - Last release was 2.2.1 on Mon May 30 2016

## Mailing list activity:

 - users@archiva.apache.org:
    - 232 subscribers (up 0 in the last 3 months):
    - 7 emails sent to list (26 in previous quarter)

 - dev@archiva.apache.org:
    - 107 subscribers (down -2 in the last 3 months):
    - 15 emails sent to list (94 in previous quarter)

 - issues@archiva.apache.org:
    - 35 subscribers (up 0 in the last 3 months):
    - 4 emails sent to list (79 in previous quarter)

 - notifications@archiva.apache.org:
    - 14 subscribers (up 0 in the last 3 months):
    - 2 emails sent to list (58 in previous quarter)


## JIRA activity:

 - 4 JIRA tickets created in the last 3 months
 - 0 JIRA tickets closed/resolved in the last 3 months

18 Jan 2017 [Olivier Lamy / Brett]

No report was submitted.

@Brett: pursue a report for Archiva

21 Dec 2016 [Olivier Lamy / Bertrand]

No report was submitted.

21 Sep 2016 [Olivier Lamy / Brett]

## Description:

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Issues:

   There are no issues requiring board attention at this time

## Activity:

  Low. We worked on security reports.

## Health report:

  3+ people have indicated presence, so has sufficient oversight.
  A new committer has been identified and should be added in the coming weeks.

## PMC changes:

 - Currently 8 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre on Fri Jul 11 2014

## Committer base changes:

 - Currently 20 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - Last release was 2.2.1 on Mon May 30 2016

## Mailing list activity:

 - users@archiva.apache.org:
    - 234 subscribers (up 2 in the last 3 months):
    - 23 emails sent to list (11 in previous quarter)

 - dev@archiva.apache.org:
    - 109 subscribers (up 1 in the last 3 months):
    - 35 emails sent to list (27 in previous quarter)

 - issues@archiva.apache.org:
    - 37 subscribers (down -1 in the last 3 months):
    - 44 emails sent to list (84 in previous quarter)

 - notifications@archiva.apache.org:
    - 15 subscribers (up 0 in the last 3 months):
    - 16 emails sent to list (7 in previous quarter)


## JIRA activity:

 - 9 JIRA tickets created in the last 3 months
 - 8 JIRA tickets closed/resolved in the last 3 months

15 Jun 2016 [Olivier Lamy / Brett]

## Description:

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Issues:

  There are no issues requiring board attention at this time

## Activity:

  Low. 3+ people have indicated presence, so has sufficient oversight.

## Health report:

  Despite low activity we were able to release a new version.

## PMC changes:

 - Currently 8 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre on Fri Jul 11 2014

## Committer base changes:

 - Currently 20 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - 2.2.1 was released on Mon May 30 2016

## Mailing list activity:

 - users@archiva.apache.org:
    - 234 subscribers (up 0 in the last 3 months):
    - 15 emails sent to list (12 in previous quarter)

 - dev@archiva.apache.org:
    - 108 subscribers (up 4 in the last 3 months):
    - 27 emails sent to list (11 in previous quarter)

 - issues@archiva.apache.org:
    - 38 subscribers (up 2 in the last 3 months):
    - 87 emails sent to list (38 in previous quarter)

 - notifications@archiva.apache.org:
    - 15 subscribers (up 2 in the last 3 months):
    - 7 emails sent to list (11 in previous quarter)


## JIRA activity:

 - 2 JIRA tickets created in the last 3 months
 - 61 JIRA tickets closed/resolved in the last 3 months

18 May 2016 [Olivier Lamy / Isabel]

No report was submitted.

20 Apr 2016 [Olivier Lamy / Jim]

## Description:

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Issues:
  there are no issues requiring board attention at this time

## Activity:
 - Small number of bug fixed

## Health report:
  - Low activity at the moment

## PMC changes:

 - Currently 8 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre on Fri Jul 11 2014

## Committer base changes:

 - Currently 20 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - Last release was 2.2.0 on Mon Mar 02 2015

## Mailing list activity:

 - users@archiva.apache.org:
    - 233 subscribers (up 1 in the last 3 months):
    - 18 emails sent to list (18 in previous quarter)

 - dev@archiva.apache.org:
    - 104 subscribers (up 1 in the last 3 months):
    - 10 emails sent to list (36 in previous quarter)

 - issues@archiva.apache.org:
    - 36 subscribers (down -1 in the last 3 months):
    - 108 emails sent to list (27 in previous quarter)

 - notifications@archiva.apache.org:
    - 13 subscribers (up 0 in the last 3 months):
    - 8 emails sent to list (15 in previous quarter)

## JIRA activity:

 - 8 JIRA tickets created in the last 3 months
 - 61 JIRA tickets closed/resolved in the last 3 months

@Jim: Resubmit next month

16 Mar 2016 [Olivier Lamy / Shane]

No report was submitted.

20 Jan 2016 [Olivier Lamy / Greg]

## Description:

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Issues:
  there are no issues requiring board attention at this time

## Activity:
 - Small number of bug fixed.

## Health report:
 - Low activity at the moment.

## PMC changes:

 - Currently 8 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre on Fri Jul 11 2014

## Committer base changes:

 - Currently 20 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - Last release was 2.2.0 on Mon Mar 02 2015

## Mailing list activity:

 - users@archiva.apache.org:
    - 232 subscribers (down -2 in the last 3 months):
    - 19 emails sent to list (18 in previous quarter)

 - dev@archiva.apache.org:
    - 103 subscribers (up 1 in the last 3 months):
    - 38 emails sent to list (5 in previous quarter)

 - notifications@archiva.apache.org:
    - 13 subscribers (up 1 in the last 3 months):
    - 40 emails sent to list (16 in previous quarter)

 - issues@archiva.apache.org:
    - 37 subscribers (up 2 in the last 3 months):
    - 29 emails sent to list (36 in previous quarter)


## JIRA activity:

 - 5 JIRA tickets created in the last 3 months
 - 3 JIRA tickets closed/resolved in the last 3 months

16 Dec 2015 [Olivier Lamy / Chris]

No report was submitted.

16 Sep 2015 [Olivier Lamy / David]

## Description:
   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Activity:
 - The project has been quiet those last months (maybe because of summer in
   Europe)
 - We finally migrated our jira issues from Codehaus to Apache instance.

## Issues:
 - there are no issues requiring board attention at this time

## LDAP committee group/Committership changes:

 - Currently 20 committers and 8 LDAP committee group members.
 - No new LDAP committee group members added in the last 3 months
 - No new committers added in the last 3 months
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - Last release was 2.2.0 on Mon Mar 02 2015

## Mailing list activity:

 - users@archiva.apache.org:
    - 234 subscribers (up 4 in the last 3 months):
    - 19 emails sent to list (37 in previous quarter)

 - dev@archiva.apache.org:
    - 102 subscribers (up 1 in the last 3 months):
    - 13 emails sent to list (26 in previous quarter)

 - notifications@archiva.apache.org:
    - 12 subscribers (up 0 in the last 3 months):
    - 6 emails sent to list (24 in previous quarter)

 - issues@archiva.apache.org:
    - 35 subscribers (up 1 in the last 3 months):
    - 52 emails sent to list (83 in previous quarter)


## JIRA activity:

 - 9 JIRA tickets created in the last 3 months
 - 6 JIRA tickets closed/resolved in the last 3 months

15 Jul 2015 [Olivier Lamy / Brett]

## Description:
   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Activity:
 - The dev activity was a bit small since the last report.

## Issues:
 - there are no issues requiring board attention at this time

## PMC/Committership changes:

 - Currently 20 committers and 8 PMC members in the project.
 - No new PMC members added in the last 3 months
 - No new committers added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre at Mon Jul 28 2014
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - 2.2.0 was released on 2nd March 2015

## Mailing list activity:

 - users@archiva.apache.org:
    - 231 subscribers (up 3 in the last 3 months):
    - 34 emails sent to list (52 in previous quarter)

 - dev@archiva.apache.org:
    - 102 subscribers (up 2 in the last 3 months):
    - 32 emails sent to list (28 in previous quarter)

 - notifications@archiva.apache.org:
    - 12 subscribers (up 0 in the last 3 months):
    - 23 emails sent to list (61 in previous quarter)

 - issues@archiva.apache.org:
    - 35 subscribers (up 1 in the last 3 months):
    - 103 emails sent to list (57 in previous quarter)


## JIRA activity:

 - 15 JIRA tickets created in the last 3 months
 - 9 JIRA tickets closed/resolved in the last 3 months

17 Jun 2015 [Olivier Lamy / David]

No report was submitted.

18 Mar 2015 [Olivier Lamy / Greg]

   Apache Archiva software is an extensible repository management tool that
   helps taking care of your own personal or enterprise-wide build artifact
   repository.

## Activity:
 - The dev activity was a bit small since the last report. Focusing on
   releasing 2.2.0

## Issues:
 - none

## PMC/Committership changes:

 - Currently 20 committers and 8 PMC members in the project.
 - No new PMC members added in the last 3 months
 - No new committers added in the last 3 months
 - Last PMC addition was Jean-Baptiste Onofre at Mon Jul 28 2014
 - Last committer addition was Sascha Vogt at Mon Jul 14 2014

## Releases:

 - 2.2.0 was released on 2nd March 2015

## Mailing list activity:

 - users@archiva.apache.org: 228 subscribers (down -1 in the last 3 months):
    46 emails sent to list (65 in previous quarter)
 - dev@archiva.apache.org: 99 subscribers (down -3 in the last 3 months):
    27 emails sent to list (74 in previous quarter)
 - notifications@archiva.apache.org: 11 subscribers (down -1 in the last 3
   months):
    61 emails sent to list (42 in previous quarter)
 - issues@archiva.apache.org: 33 subscribers (down -2 in the last 3 months):
    59 emails sent to list (223 in previous quarter)

17 Dec 2014 [Olivier Lamy / Sam]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

None since last report

Community
---------

We added a new committer: Sascha Voigt (17 July 2014)
We added a new PMC member: Jean-Baptiste Onofre (28 July 2014)

The new 2.x series releases tends to generate a bit more traffic mailing lists.

Development
-----------

On-going development is now geared towards the release of 2.2.x with
particular enhancements to LDAP support and fixing issues.

Issues
------

As some projects at Apache, Archiva was dependant on rsync services from people.a.o
to synchronize their Maven artifacts to Maven Central after a vote period based
on artifacts deployed to the Apache Archiva instance.
It looks to be now mandatory to use an external product call Nexus whereas Sonatype
still support this rsync synchronization.
Obviously the Archiva team will be happy to continue using his own dog food.
The issue has been reported here: https://issues.apache.org/jira/browse/INFRA-8762

17 Sep 2014 [Olivier Lamy / Rich]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Archiva 1.3.9 was released on 30 Jun 2014
* Archiva 2.1.0 was released on 19 July 2014
* Archiva 2.1.1 was released on 04 September 2014

Community
---------

We added a new committer: Sascha Voigt (17 July 2014)
We added a new PMC member: Jean-Baptiste Onofre (28 July 2014)

The new 2.x series releases tends to generate a bit more traffic mailing lists.

Development
-----------

On-going development is now geared towards the release of 2.1.x with
particular enhancements to LDAP support and fixing issues.

Issues
------

No issues at the moment.

18 Jun 2014

Change the Apache Archiva Project Chair

 WHEREAS, the Board of Directors heretofore appointed Maria Odea Ching
 to the office of Vice President, Apache Archiva, and

 WHEREAS, the Board of Directors is in receipt of the resignation
 of Maria Odea Ching from the office of Vice President, Apache Archiva,
 and

 WHEREAS, the Project Management Committee of the Apache Archiva
 project has chosen by vote to recommend Olivier Lamy as the successor
 to the post;

 NOW, THEREFORE, BE IT RESOLVED, that Maria Odea Ching is relieved and
 discharged from the duties and responsibilities of the office
 of Vice President, Apache Archiva, and

 BE IT FURTHER RESOLVED, that Olivier Lamy be and hereby is
 appointed to the office of Vice President, Apache Archiva, to
 serve in accordance with and subject to the direction of the
 Board of Directors and the Bylaws of the Foundation until
 death, resignation, retirement, removal or disqualification, or
 until a successor is appointed.

 Special Order 7F, Change the Apache Archiva Project Chair, was
 approved by Unanimous Vote of the directors present.

18 Jun 2014 [Maria Odea Ching / Bertrand]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Last release was on 18 April 2014 (Archiva 1.3.8)
* Archiva 2.0.1 was released on 26 March 2014

Apache Archiva 1.3.8 addressed two security issues:

 * CVE-2013-2187: Apache Archiva Cross-Site Scripting vulnerability
 * CVE-2013-2251: Apache Archiva Remote Command Execution

Community
---------

We have not added any committers or PMC members recently, with the last
addition for both groups on 14 Sep 2012.

Development
-----------

On-going development is now geared towards the release of 2.1.0 with
particular enhancements to LDAP support.

Issues
------

Resolution for changing the PMC Chair is being voted on and will be
submitted to the board once the vote is complete.

19 Mar 2014 [Maria Odea Ching / Sam]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Last release was on 19 February 2014 (Archiva 2.0.0)

Community
---------

We have not added any committers or PMC members recently, with the last
addition for both groups on 14 Sep 2012.

Development
-----------

Release of 2.0.1 is currently being planned to address issues in the
recently released 2.0.0.

Issues
------

No board level issues at this time.

18 Dec 2013 [Maria Odea Ching / Bertrand]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Last release was on 1 June 2013 (Archiva 1.4-M4)

Community
---------

We have not added any committers or PMC members recently, with the last
addition for both groups on 14 Sep 2012.

More activity in the users and dev lists since the 1.4-M3 and 1.4-M4
milestone releases previewing the new webapp UI based on javascript.

Development
-----------

The development for 2.0.0 release is still on-going. The release
was originally targeted to be out by the end of the 3rd quarter or early
4th quarter of this year but was delayed to the end of the 4th quarter.

Issues
------

No board level issues at this time.

18 Sep 2013 [Maria Odea Ching / Sam]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Last release was on 1 June 2013 (Archiva 1.4-M4)

Community
---------

We have not added any committers or PMC members recently, with the last
addition for both groups on 14 Sep 2012.

More activity in the users and dev lists since the 1.4-M3 and 1.4-M4
milestone releases previewing the new webapp UI based on javascript.

Development
-----------

Due to a lot of major changes in the recent 1.4 milestone releases, it
has been decided to release it as 2.0.0 instead of 1.4 final. Target
release date is end of the 3rd quarter or early 4th quarter of this year.

Issues
------

No board level issues at this time.

19 Jun 2013 [Maria Odea Ching / Sam]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Archiva 1.4-M4 (1 June 2013) - milestone release containing UI fixes and
LDAP support enhancements.

Community
---------

More activity in the users and dev lists since the 1.4-M3 and 1.4-M4
milestone releases previewing the new webapp UI based on javascript.

Development
-----------

Development on the final 1.4 release is on-going. Target release date
is end of the 3rd quarter or early 4th quarter of this year.

Issues
------

No board level issues at this time.

20 Mar 2013 [Maria Odea Ching / Brett]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* Archiva 1.3.6 (7 January 2013) - security release for CVE-2010-1870:
Struts2 remote commands execution


Community
---------

No updates regarding previous trademark issue with MailArchiva. It's been
10 months since we dropped them an email regarding the issue. They seem to
have no plans to continue with the re-branding.

Development
-----------

Development on next milestone release (1.4-M4) is on going. This release
will contain improvements on LDAP support, web interface enhancements and
bug fixes found on previous milestone release. Target date for 1.4-M4
release is mid April.

Issues
------

No board level issues at this time.

19 Dec 2012 [Maria Odea Ching / Bertrand]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* archiva parent 9 (25 Sep 2012)
* org.apache.archiva.redback.components:redback-components:2.0 (parent pom
of all components) (25 Sep 2012)
* org.apache.archiva.redback.components:expression-evaluator:2.0
(25 Sep 2012)
* org.apache.archiva.redback.components:spring-apacheds:2.0 (25 Sep 2012)
* org.apache.archiva.redback.components.cache:spring-cache:2.0 (all sub
modules included) (25 Sep 2012)
* org.apache.archiva.redback.components:spring-jdo2:2.0 (25 Sep 2012)
* org.apache.archiva.redback.components:spring-quartz:2.0 (25 Sep 2012)
* org.apache.archiva.redback.components.registry:spring-registry:2.0 (all
sub modules included) (25 Sep 2012)
* org.apache.archiva.redback.components:spring-taskqueue:2.0 (25 Sep 2012)
* org.apache.archiva.redback.components:spring-utils:2.0 (25 Sep 2012)
* redback core (29 Sep 2012)
* Archiva 1.4-M3 (7 Oct 2012)


Community
---------

Eric Barboni has been added as a new PMC (14 Sep 2012).

Adrien Lecharpentier has been added as a new committer (14 Sep 2012)

No updates regarding previous trademark issue with MailArchiva. They haven't
proceeded with their rebranding plans as of this board report.

Development
-----------

Development on next milestone release (1.4-M4) is currently on going. This
release will contain improvements on LDAP support, web interface
enhancements and bug fixes found on previous release.

Issues
------

No board level issues at this time.

19 Sep 2012 [Maria Odea Ching / Jim]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

No releases for this quarter

Community
---------

Eric Barboni has been added as a new committer (4 Aug 2012).

We have not added any PMC members recently, with the last addition on 31 Aug
2011.

No updates regarding previous trademark issue with MailArchiva. They haven't
proceeded with their rebranding plans as of this board report.

Development
-----------

* Distribution moved to use svnpubsub.
* Site moved to svnpubsub.
* 1.4-M3 to be released soon, just waiting for two other dependencies to be
released. The release will include the UI overhaul in the Archiva webapp and
the integration of all the imported Redback components (security system).

Project Branding Requirements
-----------------------------

Already completed.

Issues
------

No board level issues at this time.

20 Jun 2012 [Maria Odea Ching / Bertrand]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

No releases for this quarter

Community
---------

* A trademark issue was brought to the attention of the Archiva PMC and
the Trademarks committee regarding MailArchiva's plan to rebrand as
Archiva. An email was sent to MailArchiva regarding the trademark issue
with a suggestion to consider rebranding to a different name other than
Archiva to avoid confusion between the two software products. A
representative from MailArchiva replied and requested for the trademark
registration details for "Archiva". They also expressed that they still
intend to use the archiva.com domain. We in turn clarified that
"Archiva" is an unregistered trademark that has been created and
maintained through use. We also indicated to them that they need to
Archiva as a trademark of the ASF if they will use the archiva.com
domain. As of this board report, there have been no updates from
MailArchiva but visiting their web site shows that they are still using
"MailArchiva" as their name and has not yet proceeded with the rebranding.

Development
-----------

* As reported in the previous board reports, there were a number of planned
 refactorings of Archiva trunk. Below are the status of each of them:

 - moving the UI to another framework (in-progress)

 - removal of all plexus components (completed)

 - replace or overhaul the security system used (UI overhaul of current
   security system used has been done to integrate with the UI refactorings
   in Archiva)

* Because of the overhaul done in Redback (security system), it was
discussed and agreed in the Archiva dev list that the sources for Redback
be imported to Archiva's source repository. Reference to the thread
discussion is at:

http://s.apache.org/arch

* For Archiva's UI refactoring, the aim is to make it fast and simple, and
to de-couple it with the core. The UI overhaul is more than half-way through
the webapp, with mostly the administration pages, repository browse and
search bits done.

* The OSGi integration with Apache Karaf is still in progress. All the
modules in Archiva have already been converted to OSGi bundles. Next step
is to add the OBR (OSGi Bundle Repository) support.

Project Branding Requirements
-----------------------------

* Project Website Basics - done
* Project Naming and Descriptions - done
* Website Navigation Links - done
* Trademark Attributions - not yet done
* Logos and Graphics - not yet done
* Project Metadata - not yet done
* Read PMC Branding Responsibilities - not yet done

Issues
------

No board level issues at this time.

21 Mar 2012 [Maria Odea Ching / Greg]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* 1.4-M2 release 2011-12-20

Community
---------

* Jean-Baptiste Onofré was added as a new committer on 2012-01-20.

* The December release vote and the January committer vote had very few
participants from the PMC, which prompted Brett to ask around the Archiva
PMC list if certain members who had little or no activity in the last
year still wish to be active in the project. The following members
noted they were unable to continue their participation and decided to
move to emeritus status:
  - Arnaud Héritier
  - James William Dumay
  - John Tolentino
  - Jesse McConnell
  - Fabrice Bellingard
  - Emmanuel Venisse

 Reference thread for the discussion can be viewed at:

 http://s.apache.org/xZu

Development
-----------

* As reported in the previous board reports, there were a number of planned
 refactorings of Archiva trunk. Below are the status of each of them:

 - moving the UI to another framework (in-progress)

 - removal of all plexus components (completed)

 - replace or overhaul the security system used (UI overhaul of current
   security system used has been done to integrate with the UI refactorings
   in Archiva)

* For Archiva's UI refactoring, the aim is to make it fast and simple, and
to de-couple it with the core. The UI overhaul is almost half-way through
the webapp, with mostly the administration pages done.

* The OSGi integration with Apache Karaf is still in progress. All the
modules in Archiva have already been converted to OSGi bundles. Next step
is to add the OBR (OSGi Bundle Repository) support.

Project Branding Requirements
-----------------------------

* Project Website Basics - done
* Project Naming and Descriptions - done
* Website Navigation Links - done
* Trademark Attributions - not yet done
* Logos and Graphics - not yet done
* Project Metadata - not yet done
* Read PMC Branding Responsibilities - not yet done

Issues
------

No board level issues at this time.

21 Dec 2011 [Maria Odea Ching / Shane]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* 1.4-M1 release 2011-10-26

Community
---------

* A number of users and contributors, including a past GSoC (2010)
participant, has expressed their interest in working on the project.

Development
-----------

* As reported in the previous board reports, there were a number of planned
 refactorings of Archiva trunk. Below are the status of each of them:

 - moving the UI to another framework (in-progress)

 - removal of all plexus components (completed)

 - replace or overhaul the security system used (UI overhaul of current
   security system used has been done to integrate with the UI refactorings
   in Archiva)

* For Archiva's UI refactoring, the aim is to make it fast and simple, and
to de-couple it with the core. For the latter aspect, the REST services for
Archiva's functionalities are already complete. The UI overhaul will start
at the integration with the recent UI changes made in the security system
used, which is Redback (http://redback.codehaus.org/).

* Patches have also started coming in for the OSGI integration with Apache
Karaf.

* 1.4-M2 release discussion is currently underway. The release will
possibly include improvements for the Maven index support, upgrades on some
of the libraries used and a number of bug fixes.

Project Branding Requirements
-----------------------------

* Project Website Basics - done
* Project Naming and Descriptions - not yet done
* Website Navigation Links - not yet done
* Trademark Attributions - not yet done
* Logos and Graphics - not yet done
* Project Metadata - not yet done
* Read PMC Branding Responsibilities - not yet done

Issues
------

No board level issues at this time.

21 Sep 2011 [Maria Odea Ching / Shane]

Apache Archiva is an extensible repository management software that helps
taking care of your own personal or enterprise-wide build artifact
repository. It is the perfect companion for build tools such as Maven,
Continuum, and ANT.

Releases
--------

* No releases for this quarter

Community
---------

* The sandbox was opened to all Apache committers, after committers on other
 projects expressed interest in getting involved with some proof-of-concept
 work.

* Olivier Lamy was added to the Archiva PMC.

* Wendy Smoak resigned from the Archiva PMC.

Development
-----------

* As reported in the last board report, there were a number of planned
 refactorings of Archiva trunk: moving the UI to another framework, removal
 of all plexus components, and replace or overhaul the security system
 used. The removal of all plexus components has been completed.
 Implementation of REST services in preparation for the UI improvements and
 for possible use of Archiva as an OSGi Bundle Repository, is currently
 on-going.

Project Branding Requirements
-----------------------------

* Project Website Basics - done
* Project Naming and Descriptions - not yet done
* Website Navigation Links - not yet done
* Trademark Attributions - not yet done
* Logos and Graphics - not yet done
* Project Metadata - not yet done
* Read PMC Branding Responsibilities - not yet done

Issues
------

No board level issues at this time.

15 Jun 2011 [Maria Odea Ching / Greg]

Releases
--------

* Archiva 1.3.5 was released on May 17, 2011 as mitigation to the multiple
CSRF (Cross-site Request Forgery) and XSS (Cross-site Scripting) security
vulnerabilities reported by Riyaz Ahemed Walikar of Microland Ltd., India.
The CVE IDs for these security issues are CVE-2011-1026 and CVE-2011-1077,
respectively.

* For the CSRF fix in the 1.3.5 release, Struts' token tag was used and
was added in the affected forms and actions. If the token included in the
request does not match the one in the server, the request is rejected.

* For the XSS fix in the 1.3.5 release, the form validation across all the
pages in the Archiva webapp was tightened so that possible XSS scripts are
caught immediately.

Community
---------

* Olivier Lamy was added as a committer in May.

* Community activity has picked up with repeated interest from people
involved in Apache ACE. However, overall, activity remains low and the
number of active committers is low.

Development
-----------

* There have been discussions in the dev list about the possibility of
enhancing Archiva to act as an OSGi Bundle Repository. In the discussion, it
was suggested by Jean-Baptiste Onofre (a developer from Apache Karaf and
Apache ACE) that Archiva could provide a RESTful interface to upload bundles
and artifacts as well as a P2P extension interface to download/upload
artifacts. It could also manage the lifecycle of bundles and artifacts such
as staging, promoting, and dropping features.

* There was also a discussion (initiated by Olivier Lamy) regarding
refactoring Archiva trunk. The planned refactorings are: moving the UI to
another framework, removal of all plexus components, and replace or overhaul
the security system used (which is Redback). Removal of the plexus
components is already on-going in trunk.

Issues
------

No board level issues at this time.

16 Mar 2011 [Maria Odea Ching / Roy]

Below are the important events that happened in the project since the last
board report.

Releases
--------

* Archiva 1.3.3 released on Dec. 20, 2010. This release contains significant
performance fixes and memory improvements to large or frequent scanning
and indexing operations, as well as diagnostic tools for reviewing the
current server performance.

* Archiva 1.3.4 released on Feb. 15, 2011. This release contains the
fix for the cross-site scripting vulnerability (CVE-2011-0533) that was
reported.

Community
---------

* Multiple CSRF vulnerability and XSS vulnerability issues have been
reported against Archiva 1.3.4. The fixes for these are already being worked
on and a 1.3.5 release containing these fixes is scheduled as mitigation.

* New features and enhancements that were added to trunk needs to be
reviewed and finalized before being released as Archiva 1.4. Some of these
are the support for staging repositories and the replacement of the Archiva
database with a file-based metadata repository.

Issues
------

No board level issues at this time.

15 Dec 2010 [Maria Odea Ching / Jim]

Archiva Board Report for December 2010
-----------------------------------

Below are the important events that happened in the project since the last
board report.

Releases
--------

* Archiva 1.3.2 - November 29, 2010. This release fixes the CSRF
vulnerability issue reported by Anatolia Security Research Group. The
vulnerability is that Archiva doesn't check which form sends credentials.
An attacker can create a specially crafted page and force Archiva
administrators to view it and change their credentials. To fix this, a
referrer check was added to the security interceptor for all secured
actions. A prompt for the administrator's password when changing a user
account was also set in place.

Community
---------

* No new committers and/or PMC members were accepted during the quarter.

Development
-----------

* Archiva 1.3.3 is scheduled to be released next. This will include
significant performance improvements with regard to scanning and indexing
Archiva repositories. This will be the final release for the 1.3 series.

* Code for the GSOC project for staging repositories support and artifact
promotion in Archiva, which was initially in a branch, has already been
merged to trunk. Plans to do a 1.4 release from trunk is in place, once
1.3.3 is finalized.

Issues
------

No board level issues at this time.

22 Sep 2010 [Maria Odea Ching / Doug]

Archiva Board Report for September 2010
-----------------------------------

Below are the important events that happened in the project since the last
board report.

Releases
--------

* Archiva 1.3.1 released on June 18, 2010

Community
---------

* GSOC project for staging repositories support and artifact promotion in
Archiva by Eshan Sudharaka has been completed. Student was able to meet the
requirements that were identified during the proposal period and was given
a passing grade. Next step is to review the code which is currently sitting
on a branch and merge it to trunk.

* No new committers and/or PMC members were accepted during the quarter.

Development
-----------

* Development on trunk has slowed down. There was a discussion last month to
do a milestone release of trunk once the code contribution from the GSOC
project is merged.

Issues
------

No board level issues at this time.

16 Jun 2010 [Maria Odea Ching / Greg]

Releases
--------

* Pending release of 1.3.1. Release candidate has been staged and is
currently being voted on in the community.

Community
---------

* Participated in on-going GSOC. Proposal for merging repositories in
Archiva by Eshan Sudharaka has been accepted. Discussions regarding the
design and implementation are being discussed in the community lists.
Initial development kicked off during the first week of June.

Development
-----------

* Development in trunk has been active especially with regard to the changes
in the underlying infrastructure that was recently merged. The use of the
database schema has been replaced by a metadata content repository. Plans to
migrate the rest of the remaining Archiva components to the new repository
API have been discussed and will be the next step to be implemented.

Issues
------

No board level issues at this time.

17 Mar 2010 [Maria Odea Ching / Doug]

Releases
--------

* Archiva 1.3 was released on January 20, 2010.

Community
---------

* Joakim Erdfelt stood down from the PMC and requested to be moved to
emeritus status.

* vmbuild.apache.org was upgraded to Archiva 1.3.

Development
-----------

* The developers have planned a small set of issues for a 1.3.1 release,
while larger work occurs on trunk.

* A large change of the underlying infrastructure of Archiva was reviewed by
some of the developers and agreed to merge to trunk. This is in the process
of being polished and battle tested for release. The result is that the use
of a fairly inflexible database schema is replaced by a metadata content
repository, and a number of internal interdependencies are reduced.

Issues
------

No board level issues at this time.

16 Dec 2009 [Maria Odea Ching / Geir]

Community:
* No releases since last board report
* Development for 1.2.3 is still in progress with 6 issues remaining before
release
* Removal of the database and audit log reporting, both for Archiva 1.3, are
being worked on in separate branches

Brett clarified that "Removal of the database and audit log reporting" meant "removal of the database as a requirement to run, and addition of audit log reporting (a new feature)".

23 Sep 2009 [Maria Odea Ching / Justin]

Releases:
* 1.2.2 was released in September 2, 2009
* Finalizing 1.2.x series with the current development version (1.2.3)
 targeted as the last release for this series

Community:
* Added new committers - Marecor Baclay, Jevica Arianne Zurbano
* Dev list traffic is a bit low, not a lot of discussions about future
 plans.
* Releases are also lagging a little, interval of releases can be shortened
 further.

Issues:
* No board level issues at this time.

17 Jun 2009 [Maria Odea Ching / Henning]

Releases:
* 1.2 was released on March 26, 2009
* 1.1.4 was released on April 22, 2009
* 1.2.1 was released on May 28, 2009

Community
* Contributions to revive the webapp Selenium tests are being applied in
the trunk version.
* 1.2.2 is lined up to fix bugs in the 1.2 release.

Issues
* No board level issues at this time.

18 Mar 2009 [Maria Odea Ching / Greg]

Releases
--------

* No releases since last board report.

Community
---------

* Development work for 1.2 is still on-going. 69 issues already fixed and 35
 more to go before the release.

* An Archiva session is scheduled for ApacheCon Europe at the end of
 the month.

Issues
------

No board level issues at this time.

17 Dec 2008 [Maria Odea Ching / Justin]

Releases
--------

* 1.1.2 was released on September 16, 2008

* 1.1.3 was released on October 9, 2008

* First milestone release (1.2-M1) for 1.2 was released on November 14, 2008

Community
---------

* Added James William Dumay to the Archiva PMC

* Added new committer - Martin Cooper

* After a brief discussion with the infrastructure team over the irc and
 mailing list, it has been agreed that a zone would be appropriate for
 setting up an Archiva instance for demo/testing purposes.

* An Archiva FFT was held during ApacheCon US last November.

* Development work for 1.2 is still on-going. The project is currently
 moving towards a plugin-based framework and the search feature is also
 being revamped.

Issues
------

No board level issues at this time.

17 Sep 2008 [Maria Odea Ching / J Aaron]

Releases
--------

* 1.1 was released on July 20, 2008.

* 1.1.1 was released on August 11, 2008.

* 1.1.2 release will be coming up in the next couple of days and development
 for 1.2 is also on-going.

Community
---------

* Discussions about setting up a public Archiva and a Planet Archiva blog
 aggregator have been going around the dev list.

Issues
------

No board level issues at this time.

Brett clarified that a public Archiva is just a running instance of the server.

25 Jun 2008 [Maria Odea Ching / Greg]

Releases
--------

* 1.1 milestone release is still under way. From the number of issues left,
 we're looking at a release late this month or early July.

Community
---------

* Some of the discussions regarding procedues/conventions from last month
 have been finalized but still needs to be documented.

Issues
------

No board level issues at this time.

21 May 2008 [Maria Odea Ching / Henning]

Below are the important events that happened in the project since April.

Releases
--------

* A 1.1 milestone release is currently under way.

Community
---------

* Added new committer - James William Dumay.

* Discussions about procedures/conventions for the project are on-going in
 the community.

* All resources have now been moved out of the Maven project into the
 Archiva project.

Issues
------

* After reviewing http://www.apache.org/dev/crypto.html, it has been
 determined that Archiva is currently not using any cryptographic code
 that falls within the bounds of the policy.

16 Apr 2008 [Maria Odea Ching / Bill]

This is the first board report submitted by Archiva since becoming a TLP.
Below are the important events that happened in the project since March.

Releases
------------

* Archiva 1.0.2 has been released on April 9. 2008.

* Archiva 1.1 is scheduled to be released within the month.

Community
--------------

* Archiva is still in the process of moving out of the Maven area. The
 source repository has been migrated into its own space. The mailing lists,
 and the website and software publishing spaces still need to be created.

* No new committers were added since the project became a TLP last March
 2008.

* Discussed and submitted for the 'feature your project' program for
 ApacheCon US 2008.

Issues
--------

* The Java Service Wrapper has moved to GPL for version 3.3.0+. Archiva uses
 this wrapper but will be sticking with the 3.2.3 version.

19 Mar 2008

Establish the Apache Archiva Project

 WHEREAS, the Board of Directors deems it to be in the best
 interests of the Foundation and consistent with the Foundation's
 purpose to establish a Project Management Committee charged with
 the creation and maintenance of open-source software related to
 the management of build repositories and to the storage and
 retrieval of the build system artifacts residing in them.

 NOW, THEREFORE, BE IT RESOLVED, that a Project Management
 Committee (PMC), to be known as the "Apache Archiva Project", be
 and hereby is established pursuant to Bylaws of the Foundation; and
 be it further

 RESOLVED, that the Apache Archiva Project be and hereby is
 responsible for the creation and maintenance of software related to
 the management of build repositories and to the storage and
 retrieval of the build system artifacts residing in them based on
 software licensed to the Foundation; and be it further

 RESOLVED, that the office of "Vice President, Apache Archiva" be
 and hereby is created, the person holding such office to serve
 at the direction of the Board of Directors as the chair of the
 Apache Archiva Project, and to have primary responsibility for
 management of the projects within the scope of responsibility of
 the Apache Archiva Project; and be it further

 RESOLVED, that the persons listed immediately below be and
 hereby are appointed to serve as the initial members of the
 Apache Archiva PMC:

 - Fabrice Bellingard (bellingard@apache.org)
 - Maria Odea Ching (oching@apache.org)
 - Nicolas de Loof (nicolas@apache.org)
 - Joakim Erdfelt (joakime@apache.org)
 - Arnaud Heritier (aheritier@apache.org)
 - Jesse McConnell (jmcconnell@apache.org)
 - Brett Porter (brett@apache.org)
 - Edwin Punzalan (epunzalan@apache.org)
 - Carlos Sanchez (carlos@apache.org)
 - Wendy Smoak (wsmoak@apache.org)
 - John Tolentino (jtolentino@apache.org)
 - Emmanuel Venisse (evenisse@apache.org)

 NOW, THEREFORE, BE IT FURTHER RESOLVED, that Maria Odea Ching be
 appointed to the office of Vice President, Apache Archiva, to
 serve in accordance with and subject to the direction of the
 Board of Directors and the Bylaws of the Foundation until death,
 resignation, retirement, removal or disqualification, or until a
 successor is appointed; and be it further

 RESOLVED, that the initial Apache Archiva PMC be and hereby is
 tasked with the creation of a set of bylaws intended to
 encourage open development and increased participation in the
 Apache Archiva Project; and be it further

 RESOLVED, that the initial Apache Archiva PMC be and hereby is
 tasked with the migration and rationalization of the Apache
 Maven PMC Archiva subproject; and be it further

 RESOLVED, that all responsibility pertaining to the Maven Archiva
 sub-project and encumbered upon the Apache Maven PMC
 are hereafter discharged.

 Special order 7A, Establish the Apache Archiva Project, was
 approved by Unanimous Vote.