Hi,

find attached a quick draft of the board report we're expected to submit this
month. It's based upon the report wizard template which can be found at [1]

Any comments or additions are appreciated ...

<draft>

## Description:
The mission of PDFBox is the creation and maintenance of software related to
Java library for working with PDF documents

## Issues:
There are no issues requiring board attention at this time. Some bugs were
reported via secur...@apache.org and 2 of them ended up in a CVE. Both were
solved in 2.0.24.

- CVE-2021-31811: A carefully crafted PDF file can trigger an
  OutOfMemory-Exception while loading a tiny file
- CVE-2021-31812: A carefully crafted PDF file can trigger an infinite loop
  while loading the file

The credits goes to Chaoyuan Peng

## Membership Data:
Apache PDFBox was founded 2009-10-21 (12 years ago)
There are currently 21 committers and 21 PMC members in this project.
The Committer-to-PMC ratio is 1:1.

Community changes, past quarter:
- No new PMC members. Last addition was Matthäus Mayer on 2017-10-16.
- No new committers. Last addition was Joerg O. Henne on 2017-10-09.

## Project Activity:
Recent releases:
    2.0.24 was released on 2021-06-10.
    3.0.0-RC1 was released on 2021-04-01
    2.0.23 was released on 2021-03-18.
    2.0.22 was released on 2020-12-19.

## Community Health:
- there is a steady stream of contributions, bug reports and questions on the
  mailing lists
- there are a lot of refactorings, improvements and bugfixes
- we are working on the second alpha version of the upcoming new major release
  3.0.0
- we decided to retire the subproject Preflight with 4.0.0 as it is
  practically not maintained and the supported features are limited. VeraPDF
  is one good alternative. It has more to offer and is open source. And by the
  way it is based on a PDFBox fork.

</draft>

Andreas

[1] https://reporter.apache.org/wizard/?pdfbox


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to