The Apache Software Foundation Board of Directors Meeting Minutes February 16, 2022 1. Call to order The meeting was scheduled for 22:00 UTC and began at 22:02 when a sufficient attendance to constitute a quorum was recognized by the chair. Other Time Zones: https://timeanddate.com/s/42f1 The meeting was held via teleconference, hosted by the Secretary via Zoom. The #asfboard channel on the-asf.slack.com was used for backup. 2. Roll Call Directors Present: Bertrand Delacretaz Roy T. Fielding Sharan Foga Justin Mclean Sam Ruby Craig L Russell Roman Shaposhnik Sander Striker Sheng Wu Directors Absent: none Executive Officers Present: Mark Cox Craig McClanahan David Nalley - joined 4:15 Matt Sicker Ruth Suehle Executive Officers Absent: none Guests: Daniel Gruno Dave Fisher Greg Stein Joe Brockmeier - joined 4:09 Myrle Krantz - joined 4:10 Sally Khudairi Shane Curcuru Willem Ning Jiang 3. Minutes from previous meetings Published minutes can be found at: http://www.apache.org/foundation/board/calendar.html A. The meeting of January 19, 2022 See: board_minutes_2022_01_19.txt Approved by General Consent. 4. Executive Officer Reports A. Board Chair [Sander] This turns out to be a busy period of the month. We are having our anual members meeting in 2 weeks, which I'm preparing for. I'd like to thank our President, David Nalley, for representing us at the US Senate Committee for Homeland Security & Governmental Affairs hearing "Responding to and Learning from the Log4Shell Vulnerability". B. President [David] This has been an extraordinarily busy month. Mark Cox, Mark Thomas, Joe Brockmeier, and Sam Ruby followed on last months White House meeting around software supply chain and then worked to help respond to the Log4j inquiry from the US Senate's Homeland Security and Governmental Affairs Committee. There was an impressive amount of time invested by those folks in helping craft our message for both the audience and understanding level. In particular, Sam Ruby invested massive amounts of time, and helped meet with Senate staffers on a number of occasions. The hearing ran approximately 90 minutes, but the prep, and pre-hearing briefings ran into the scores of hours. The video of the hearing can be found here: https://www.hsgac.senate.gov/templates/watch.cfm?id=4E30CE08-5056-A066-6025-5E1A1E9EC6F3 Ruth has also helped tremendously by picking up all of the "normal" operations work so that I could focus on the public response to Log4j. Additionally, please see Attachments 1 through 8. C. Treasurer [Craig McClanahan] January marks a transition at the Treasurer position, from Myrle Krantz to Craig McClanahan. Myrle remains as Assistant Treasurer, for which I am very grateful. I'm standing on the shoulders of giants after all that she has accomplished. We also experienced a transition of our primary accounting contact at IgniteSpot (our accounting firm). Our former primary contact chose to leave them, and we have engaged with our new primary contact there, and things are going well. Regarding general financial activities, we are moving forward with several tasks that are not yet complete: * Closing our accounts at Boston Private (as soon as our final CDARS investments mature in February). Funds will be transferred to our TD Bank account. * Closing our account at Citizen's Bank. Funds will be transferred to our TD Bank account. * Funding of the Operating Reserve investment account, per the Investment Policy Statement approved by the Board. As a terminology note, our investment advisor for the Operating Reserve account will be referred to as TD Wealth, to distinguish it from TD Bank that is our bank account. D. Secretary [Matt] In January, the secretary received 43 ICLAs and 2 CCLAs. E. Executive Vice President [Ruth] Highlights generally covered elsewhere. Before proceeding with ACNA plans, I checked in with all of last year's sponsors to see if they're budgeting and planning for in-person events, and all but one replied enthusiastically that they're ready to go. Budgets are coming together for FY23. F. Vice Chair [Shane] Assist Chair with testing data files for upcoming Member's meeting. Executive officer reports approved as submitted by General Consent. 5. Additional Officer Reports A. VP of W3C Relations [Andy Seaborne / Justin] See Attachment 9 B. Apache Legal Affairs Committee [Roman Shaposhnik] See Attachment 10 C. Apache Security Team Project [Mark J. Cox / Sander] See Attachment 11 D. VP of Jakarta EE Relations [Rob Tompkins / Craig] No report was submitted. Additional officer reports approved as submitted by General Consent. 6. Committee Reports Summary of Reports The following reports required further discussion: # Security Team [striker] A. Apache Ant Project [Jan Materne / Roy] See Attachment A B. Apache Bloodhound Project [Gary Martin / Sander] No report was submitted. C. Apache BookKeeper Project [Sijie Guo / Sam] No report was submitted. D. Apache Brooklyn Project [Geoff Macartney / Bertrand] See Attachment D E. Apache Buildr Project [Antoine Toulme / Sheng] See Attachment E F. Apache Cassandra Project [Nate McCall / Roman] See Attachment F G. Apache Celix Project [Pepijn Noltes / Sharan] See Attachment G H. Apache Clerezza Project [Hasan Hasan / Sam] See Attachment H I. Apache Cocoon Project [Cédric Damioli / Sharan] See Attachment I J. Apache Community Development Project [Swapnil Mane / Sander] See Attachment J K. Apache CouchDB Project [Jan Lehnardt / Bertrand] See Attachment K L. Apache Creadur Project [Philipp Ottlinger / Sheng] See Attachment L M. Apache DataSketches Project [Lee Rhodes / Roy] See Attachment M N. Apache DeltaSpike Project [Mark Struberg / Justin] No report was submitted. O. Apache Drill Project [Charles Givre / Craig] See Attachment O P. Apache Druid Project [Gian Merlino / Roman] See Attachment P Q. Apache Empire-db Project [Rainer Döbele / Bertrand] See Attachment Q R. Apache Flume Project [Balázs Donát Bessenyei / Roman] See Attachment R S. Apache FreeMarker Project [Dániel Dékány / Sheng] See Attachment S T. Apache Geode Project [Dan Smith / Justin] See Attachment T U. Apache Giraph Project [Dionysios Logothetis / Sharan] See Attachment U V. Apache Gora Project [Kevin Ratnasekera / Roy] See Attachment V W. Apache Groovy Project [Paul King / Sam] See Attachment W X. Apache Hop Project [Hans Van Akelyen / Craig] See Attachment X Y. Apache HTTP Server Project [Joe Orton / Sander] See Attachment Y Z. Apache HttpComponents Project [Michael Osipov / Roman] See Attachment Z AA. Apache Ignite Project [Dmitry Pavlov / Justin] No report was submitted. AB. Apache Impala Project [Jim Apple / Sander] See Attachment AB AC. Apache Incubator Project [Justin Mclean] No report was submitted. AD. Apache jUDDI Project [Alex O'Ree / Craig] See Attachment AD AE. Apache Juneau Project [James Bognar / Sam] See Attachment AE AF. Apache Kafka Project [Jun Rao / Sharan] See Attachment AF AG. Apache Kibble Project [Sharan Foga] See Attachment AG AH. Apache Knox Project [Larry McCay / Bertrand] See Attachment AH AI. Apache Kylin Project [Shao Feng Shi / Roy] See Attachment AI AJ. Apache Libcloud Project [Tomaž Muraus / Sheng] See Attachment AJ AK. Apache Logging Services Project [Ron Grabowski / Sam] See Attachment AK AL. Apache ManifoldCF Project [Karl Wright / Roy] See Attachment AL AM. Apache OODT Project [Imesha Sudasingha / Sharan] See Attachment AM AN. Apache Oozie Project [Dénes Bodó / Craig] See Attachment AN AO. Apache OpenJPA Project [Mark Struberg / Bertrand] No report was submitted. AP. Apache OpenWhisk Project [Dave Grove / Sheng] See Attachment AP AQ. Apache Ozone Project [Sammi Chen / Sander] No report was submitted. AR. Apache Perl Project [Steve Hay / Justin] See Attachment AR AS. Apache Phoenix Project [Ankit Singhal / Roman] See Attachment AS AT. Apache Pinot Project [Kishore G / Sam] See Attachment AT AU. Apache Pivot Project [Roger Lee Whitcomb / Roman] See Attachment AU AV. Apache POI Project [Dominik Stadler / Bertrand] See Attachment AV AW. Apache Qpid Project [Robbie Gemmell / Sharan] No report was submitted. AX. Apache Ranger Project [Selvamohan Neethiraj / Sheng] See Attachment AX AY. Apache REEF Project [Sergiy Matusevych / Craig] See Attachment AY AZ. Apache River Project [Roy T. Fielding] See Attachment AZ BA. Apache RocketMQ Project [Xiaorui Wang / Justin] See Attachment BA BB. Apache Roller Project [David M. Johnson / Roy] See Attachment BB BC. Apache Samza Project [Yi Pan / Sander] See Attachment BC BD. Apache Santuario Project [Colm O hEigeartaigh / Sheng] See Attachment BD BE. Apache Serf Project [Justin Erenkrantz / Roman] No report was submitted. BF. Apache ServiceComb Project [Willem Ning Jiang / Roy] See Attachment BF BG. Apache ShardingSphere Project [Liang Zhang /