This was extracted (@ 2026-09-18 21:10) from a list of minutes
which have been approved by the Board.
Please Note
The Board typically approves the minutes of the previous meeting at the
beginning of every Board meeting; therefore, the list below does not
normally contain details from the minutes of the most recent Board meeting.
ASF Members may have access to a
private draft
WARNING: these pages may omit some original contents of the minutes.
Report was filed, but display is awaiting the approval of the Board minutes.
Casbin is a powerful, efficient open-source access control framework that provides a unified, model-driven approach to authorization. Built on the PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific language, Casbin brings ACL, RBAC, and ABAC together under one model so that policies can be expressed flexibly and enforced at a fine-grained level. It offers high-performance enforcement and a broad multi-language ecosystem spanning Go, Java, Node.js, Python, .NET, C++, and Rust. Casbin has been incubating since 2026-02-07. ### Three most important unfinished issues to address before graduating: 1. Complete the first official Apache incubating release. 2. Clarify repository scope, release plans, and IP/grant coverage for the large set of Casbin repositories under the Apache GitHub organization. 3. Continue building a diverse, public, mailing-list-centered community and keep project decisions visible on dev@casbin.apache.org. ### Are there any issues that the IPMC or ASF Board need to be aware of? No new issues require special attention from the IPMC or ASF Board at this time. The podling is addressing the release-compliance findings from RC1 and is preparing RC2. The review of repository scope and IP/grant coverage remains ongoing with mentor and IPMC guidance. ### How has the community developed since the last report? - dev@ had 8 messages across 4 threads, with 4 participants. - The public dev list continued to carry Incubator report review and discussion about repository scope and IP/grant coverage. - Participation remained concentrated among existing contributors. Broadening the active contributor and discussion base remains a community priority. - The main apache/casbin repository reached about 20.3k GitHub stars. ### How has the project developed since the last report? - Across 239 tracked Casbin Apache GitHub repositories, 6 PRs were merged and 0 issues were closed from 2026-07-01 to 2026-07-31. All six merged PRs were in the Go core repository, apache/casbin. - The merged work focused on NOTICE and DISCLAIMER corrections, migration to standard ASF license headers, accounting for a bundled MIT-licensed configuration file, and adding a project-specific Apache RAT policy. - The resulting source-archive policy was validated with Apache RAT 0.18 at zero unapproved or unknown files, and tests passed both in the repository and from a clean source archive. - RC1 was cancelled after the binding IPMC review. The release remains in RC2 preparation, and no new release vote had opened by the end of July. ### How would you assess the podling's maturity? The podling is actively learning and applying the ASF release process. The first IPMC release review exposed compliance gaps that are being addressed, while community participation remains concentrated and needs to broaden. The podling is not yet nearing graduation. - [X] Initial setup - [X] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: No official Apache release yet. ### When were the last committers or PPMC members elected? 2026-02-07 ### Have your mentors been helpful and responsive? Yes. Mentors and IPMC members have provided detailed, actionable feedback on release compliance, repository scope, and IP/grant coverage. ### Is the PPMC managing the podling's brand / trademarks? The project name has been approved in PODLINGNAMESEARCH-251. The PPMC is continuing to review release, website, and repository materials for Apache branding and trademark requirements. ### Signed-off-by: - [ ] (casbin) Hao Ding Comments: - [X] (casbin) Huajie Wang Comments: - [X] (casbin) Hulk Lin Comments: - [ ] (casbin) Jerry Shao Comments: - [X] (casbin) Zili Chen Comments: ### IPMC/Shepherd notes: [PJF] There are a number of open issues on the private mailing list where the issues have been open for many months.
Casbin is a powerful, efficient open-source access control framework that
provides a unified, model-driven approach to authorization. Built on the
PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific
language (DSL), Casbin brings ACL, RBAC, and ABAC together under one model
so that policies can be expressed flexibly and enforced at a fine-grained
level. It offers high-performance enforcement and a broad multi-language
ecosystem spanning Go, Java, Node.js, Python, .NET, C++, and Rust.
Incubation at the Apache Software Foundation aims to make Casbin a
community-driven, standardized authorization solution.
Casbin has been incubating since 2026-02-07.
### Three most important unfinished issues to address before graduating:
1. Define an ASF-aligned release process and cut Casbin's first official
Apache release.
2. Broaden the contributor base across organizations and keep moving
day-to-day discussion onto the Apache mailing lists.
3. Finalize the transfer of domains and trademarks to the ASF.
### Are there any issues that the IPMC or ASF Board need to be aware of?
No.
### How has the community developed since the last report?
- The Apache dev list (dev@casbin.apache.org) is now the project's primary
channel: it carried 17 messages in May (29 in March, 20 in April), covering
the incubation report cycle, dependency updates, and ASF infrastructure
changes. Traffic has been lighter than the first weeks of incubation,
reflecting a shift from setup work toward steady-state maintenance.
- GitHub stars on the main repository continued their slow, steady climb,
reaching roughly 20.15k.
- Automated dependency maintenance (Dependabot) stayed active across
several of the Node.js and core SDK repositories, keeping the ecosystem's
dependencies current.
### How has the project developed since the last report?
- Prepared and circulated the project's first Apache Incubator monthly
report for community review, establishing a regular reporting rhythm with
the mentors and IPMC.
- Worked with ASF INFRA to roll out default branch protection rulesets
across the project's repositories — a governance step that brings the repos
in line with foundation practice.
- Carried out routine maintenance across the multi-language repositories.
May was a deliberately quiet, housekeeping-focused month: 1 PR was merged
and 2 issues were closed across the project, with the remaining activity
being bot-driven dependency and infrastructure changes.
### How would you assess the podling's maturity?
Please feel free to add your own commentary.
- [X] Initial setup
- [X] Working towards first release
- [X] Community building
- [ ] Nearing graduation
- [ ] Other:
### Date of last release:
No Apache release yet.
### When were the last committers or PPMC members elected?
2026-02-07
### Have your mentors been helpful and responsive?
Yes, very helpful and responsive.
### Is the PPMC managing the podling's brand / trademarks?
Name is approved:
https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251
### Signed-off-by:
- [ ] (casbin) Hao Ding
Comments:
- [ ] (casbin) Huajie Wang
Comments:
- [X] (casbin) Hulk Lin
Comments:
- [X] (casbin) Jerry Shao
Comments:
- [X] (casbin) Zili Chen
Comments:
### IPMC/Shepherd notes:
None
Casbin is a powerful, efficient open-source access control framework
offering a unified, model-driven authorization approach. Based on the PERM
(Policy, Effect, Request, Matchers) metamodel and its domain-specific
language (DSL), Casbin seamlessly integrates ACL, RBAC, and ABAC models to
enable flexible and fine-grained policy management. It delivers
high-performance access control enforcement and supports a comprehensive
multi-language ecosystem including Go, Java, Node.js, Python, .NET, C++,
and Rust. Apache Software Foundation incubation will establish Casbin as a
community-driven, standardized authorization solution.
Casbin has been incubating since 2026-02-07.
### Three most important unfinished issues to address before graduating:
- Establish a clear release process aligned with ASF guidelines and
perform the first official Apache release.
- Grow the community by onboarding new contributors from diverse
organizations and transitioning discussions to Apache mailing lists.
- Complete the formal transfer of domains and trademarks to the ASF.
### Are there any issues that the IPMC or ASF Board need to be aware of?
No
### How has the community developed since the last report?
- Officially announced Casbin's acceptance into the Apache Incubator and
published the news via project blogs and community channels
- Raised community activity: a new group of developers have joined the
discussions on Discord and GitHub Discussions
- Maintained steady growth in GitHub stars (the main repository increased
from 19.4k to 20.1k)
- During the incubation period, the download volume of packages across
all language versions has kept rising, with the overall ecological adoption
growing steadily
- dev@casbin.apache.org saw 44 emails (mostly Dependabot bot
notifications), including a community discussion proposal, with new
subscribers joining.
### How has the project developed since the last report?
- This is the first official monthly report for Casbin following its
admission to the Apache Incubator
- Added standardized configuration files and optimized the project's
overall configuration management system
- Implemented ASF compliance requirements: added the official .asf.yaml
configuration file and Apache disclaimer file to ensure the project is
fully compliant with the foundation's norms
- Completed the addition of standard Apache License 2.0 headers to the
entire codebase and initiated the preliminary intellectual property
transfer process to the ASF
- A total of 30 PRs merged and 40 issues closed during the incubation
period
### How would you assess the podling's maturity?
Please feel free to add your own commentary.
- [X] Initial setup
- [X] Working towards first release
- [X] Community building
- [ ] Nearing graduation
- [ ] Other:
### Date of last release:
No apache release yet.
### When were the last committers or PPMC members elected?
2026-02-07
### Have your mentors been helpful and responsive?
Yes, very helpful and responsive.
### Is the PPMC managing the podling's brand / trademarks?
Name is approved:
https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251
### Signed-off-by:
- [ ] (casbin) Hao Ding
Comments:
- [ ] (casbin) Huajie Wang
Comments:
- [ ] (casbin) Hulk Lin
Comments:
- [ ] (casbin) Jerry Shao
Comments:
- [X] (casbin) Zili Chen
Comments:
### IPMC/Shepherd notes: