This was extracted (@ 2026-07-15 23:10) from a list of minutes
which have been approved by the Board.
Please Note
The Board typically approves the minutes of the previous meeting at the
beginning of every Board meeting; therefore, the list below does not
normally contain details from the minutes of the most recent Board meeting.
ASF Members may have access to a
private draft
WARNING: these pages may omit some original contents of the minutes.
Report was filed, but display is awaiting the approval of the Board minutes.
Casbin is a powerful, efficient open-source access control framework that
provides a unified, model-driven approach to authorization. Built on the
PERM (Policy, Effect, Request, Matchers) metamodel and its domain-specific
language (DSL), Casbin brings ACL, RBAC, and ABAC together under one model
so that policies can be expressed flexibly and enforced at a fine-grained
level. It offers high-performance enforcement and a broad multi-language
ecosystem spanning Go, Java, Node.js, Python, .NET, C++, and Rust.
Incubation at the Apache Software Foundation aims to make Casbin a
community-driven, standardized authorization solution.
Casbin has been incubating since 2026-02-07.
### Three most important unfinished issues to address before graduating:
1. Define an ASF-aligned release process and cut Casbin's first official
Apache release.
2. Broaden the contributor base across organizations and keep moving
day-to-day discussion onto the Apache mailing lists.
3. Finalize the transfer of domains and trademarks to the ASF.
### Are there any issues that the IPMC or ASF Board need to be aware of?
No.
### How has the community developed since the last report?
- The Apache dev list (dev@casbin.apache.org) is now the project's primary
channel: it carried 17 messages in May (29 in March, 20 in April), covering
the incubation report cycle, dependency updates, and ASF infrastructure
changes. Traffic has been lighter than the first weeks of incubation,
reflecting a shift from setup work toward steady-state maintenance.
- GitHub stars on the main repository continued their slow, steady climb,
reaching roughly 20.15k.
- Automated dependency maintenance (Dependabot) stayed active across
several of the Node.js and core SDK repositories, keeping the ecosystem's
dependencies current.
### How has the project developed since the last report?
- Prepared and circulated the project's first Apache Incubator monthly
report for community review, establishing a regular reporting rhythm with
the mentors and IPMC.
- Worked with ASF INFRA to roll out default branch protection rulesets
across the project's repositories — a governance step that brings the repos
in line with foundation practice.
- Carried out routine maintenance across the multi-language repositories.
May was a deliberately quiet, housekeeping-focused month: 1 PR was merged
and 2 issues were closed across the project, with the remaining activity
being bot-driven dependency and infrastructure changes.
### How would you assess the podling's maturity?
Please feel free to add your own commentary.
- [X] Initial setup
- [X] Working towards first release
- [X] Community building
- [ ] Nearing graduation
- [ ] Other:
### Date of last release:
No Apache release yet.
### When were the last committers or PPMC members elected?
2026-02-07
### Have your mentors been helpful and responsive?
Yes, very helpful and responsive.
### Is the PPMC managing the podling's brand / trademarks?
Name is approved:
https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251
### Signed-off-by:
- [ ] (casbin) Hao Ding
Comments:
- [ ] (casbin) Huajie Wang
Comments:
- [X] (casbin) Hulk Lin
Comments:
- [X] (casbin) Jerry Shao
Comments:
- [X] (casbin) Zili Chen
Comments:
### IPMC/Shepherd notes:
None
Casbin is a powerful, efficient open-source access control framework
offering a unified, model-driven authorization approach. Based on the PERM
(Policy, Effect, Request, Matchers) metamodel and its domain-specific
language (DSL), Casbin seamlessly integrates ACL, RBAC, and ABAC models to
enable flexible and fine-grained policy management. It delivers
high-performance access control enforcement and supports a comprehensive
multi-language ecosystem including Go, Java, Node.js, Python, .NET, C++,
and Rust. Apache Software Foundation incubation will establish Casbin as a
community-driven, standardized authorization solution.
Casbin has been incubating since 2026-02-07.
### Three most important unfinished issues to address before graduating:
- Establish a clear release process aligned with ASF guidelines and
perform the first official Apache release.
- Grow the community by onboarding new contributors from diverse
organizations and transitioning discussions to Apache mailing lists.
- Complete the formal transfer of domains and trademarks to the ASF.
### Are there any issues that the IPMC or ASF Board need to be aware of?
No
### How has the community developed since the last report?
- Officially announced Casbin's acceptance into the Apache Incubator and
published the news via project blogs and community channels
- Raised community activity: a new group of developers have joined the
discussions on Discord and GitHub Discussions
- Maintained steady growth in GitHub stars (the main repository increased
from 19.4k to 20.1k)
- During the incubation period, the download volume of packages across
all language versions has kept rising, with the overall ecological adoption
growing steadily
- dev@casbin.apache.org saw 44 emails (mostly Dependabot bot
notifications), including a community discussion proposal, with new
subscribers joining.
### How has the project developed since the last report?
- This is the first official monthly report for Casbin following its
admission to the Apache Incubator
- Added standardized configuration files and optimized the project's
overall configuration management system
- Implemented ASF compliance requirements: added the official .asf.yaml
configuration file and Apache disclaimer file to ensure the project is
fully compliant with the foundation's norms
- Completed the addition of standard Apache License 2.0 headers to the
entire codebase and initiated the preliminary intellectual property
transfer process to the ASF
- A total of 30 PRs merged and 40 issues closed during the incubation
period
### How would you assess the podling's maturity?
Please feel free to add your own commentary.
- [X] Initial setup
- [X] Working towards first release
- [X] Community building
- [ ] Nearing graduation
- [ ] Other:
### Date of last release:
No apache release yet.
### When were the last committers or PPMC members elected?
2026-02-07
### Have your mentors been helpful and responsive?
Yes, very helpful and responsive.
### Is the PPMC managing the podling's brand / trademarks?
Name is approved:
https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-251
### Signed-off-by:
- [ ] (casbin) Hao Ding
Comments:
- [ ] (casbin) Huajie Wang
Comments:
- [ ] (casbin) Hulk Lin
Comments:
- [ ] (casbin) Jerry Shao
Comments:
- [X] (casbin) Zili Chen
Comments:
### IPMC/Shepherd notes: