This is an automated email from the ASF dual-hosted git repository.
rkk pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/incubator-sdap-website.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 150583a Updated maturity model
150583a is described below
commit 150583a94fcc1b4e8f8ad172ba150a16fc66eeca
Author: rileykk <[email protected]>
AuthorDate: Fri Mar 15 15:18:24 2024 -0700
Updated maturity model
---
maturity.md | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)
diff --git a/maturity.md b/maturity.md
index d0adf47..3f834b9 100644
--- a/maturity.md
+++ b/maturity.md
@@ -28,19 +28,19 @@ The following table is filled according to the [Apache
Maturity Model](https://c
|----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **LC10** | The Apache License, version 2.0, covers the released code.
| **YES** The LICENSE files are present in the
GitHub repository.
[1](https://github.com/apache/incubator-sdap-nexus/blob/master/LICENSE)
[2](https://github.com/apache/incubator-sdap-ingester/blob/dev/LICENSE.txt)
[3](https://github.com/apache/incubator-sdap-nexusproto) |
| **LC20** | Libraries that are mandatory dependencies of the project's code
do not create more restrictions than the Apache License does.
| **IN PROGRESS** Found an issue where
top-level dependency installed LGPL package. Discussing how to organize SDAP
functionality to move this to be an optional dependency.
|
-| **LC30** | The libraries mentioned in LC20 are available as Open Source
software.
| **YES** All installed dependencies are
listed in files named `requirements.txt` or `conda-requirements.txt` and are
open sourced on github.
|
+| **LC30** | The libraries mentioned in LC20 are available as Open Source
software.
| **YES** All installed dependencies are
listed in files named `requirements.txt`, `conda-requirements.txt`,
`pyproject.toml`, or `poetry.lock` and are open sourced on github.
|
| **LC40** | Committers are bound by an Individual Contributor Agreement (the
"Apache iCLA") that defines which code they may commit and how they need to
identify code that is not their own. | **YES** All committers have iCLAs on
file.
|
| **LC50** | The project clearly defines and documents the copyright ownership
of everything that the project produces.
| **YES?** All source files are with APLv2
header, checked manually by [rkk](mailto:[email protected]). There are some misc
config files, etc that do not have headers, but, as they're not source files,
they've been excluded from the checks |
### Releases
-| **ID** | **Description**
| **Status**
[...]
-|----------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[...]
-| **RE10** | Releases consist of source code, distributed using standard and
open archive formats that are expected to stay readable in the long term.
| **YES** Source release is distributed via
[dist.apache.org](https://dist.apache.org/repos/dist/release/incubator/sdap/)
and linked from [download page](https://sdap.apache.org/downloads).
[...]
-| **RE20** | The project's PPMC (Project Management Committee, see CS10)
approves each software release in order to make the release an act of the
Foundation. | **YES** All releases have been voted at
[email protected] and [email protected], and have required at least 3 binding +1
PPMC votes to pass.
[...]
-| **RE30** | Releases are signed and/or distributed along with digests that
anyone can reliably use to validate the downloaded archives.
| **YES** All releases are signed, and the
[KEYS](https://dist.apache.org/repos/dist/release/incubator/sdap/KEYS) are
available.
[...]
-| **RE40** | The project can distribute convenience binaries alongside source
code, but they are not Apache Releases, they are provided with no guarantee.
| **YES** Users can easily build binaries from source
code using the provided guide. Binary images are not provided as official
Apache realease, though some are available through [Apache
dockerhub](https://hub.docker.com/search?q=apache%2Fsdap-).
[...]
-| **RE50** | The project documents a repeatable release process so that
someone new to the project can independently generate the complete set of
artifacts required for a release. | **YES** We can follow the [Release
guide](https://gist.github.com/RKuttruff/f418f37d2424d32c05995c9027e832c2) to
make new Apache Kvrocks releases, and so far we had 3 different release
managers (2 completed a release; 1 in in progress). The guide is not (yet)
publically available, but is provided to a future [...]
+| **ID** | **Description**
| **Status**
|
+|----------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| **RE10** | Releases consist of source code, distributed using standard and
open archive formats that are expected to stay readable in the long term.
| **YES** Source release is distributed via
[dist.apache.org](https://dist.apache.org/repos/dist/release/incubator/sdap/)
and linked from [download page](https://sdap.apache.org/downloads).
|
+| **RE20** | The project's PPMC (Project Management Committee, see CS10)
approves each software release in order to make the release an act of the
Foundation. | **YES** All releases have been voted at
[email protected] and [email protected], and have required at least 3 binding +1
PPMC votes to pass.
|
+| **RE30** | Releases are signed and/or distributed along with digests that
anyone can reliably use to validate the downloaded archives.
| **YES** All releases are signed, and the
[KEYS](https://dist.apache.org/repos/dist/release/incubator/sdap/KEYS) are
available.
|
+| **RE40** | The project can distribute convenience binaries alongside source
code, but they are not Apache Releases, they are provided with no guarantee.
| **YES** Users can easily build binaries from source
code using the provided guide. Binary images are not provided as official
Apache realease, though some are available through [Apache
dockerhub](https://hub.docker.com/search?q=apache%2Fsdap-).
|
+| **RE50** | The project documents a repeatable release process so that
someone new to the project can independently generate the complete set of
artifacts required for a release. | **YES** We can follow the [Release
guide](https://gist.github.com/RKuttruff/f418f37d2424d32c05995c9027e832c2) to
make new Apache SDAP releases, and so far we had 3 different release managers.
The guide is not (yet) publically available, but is provided to a future RM
upon the start of the release cycle. |
### Quality
