ASF Plus One Newsletter: September 2026

Published on September 20, 2026
By The ASF

**To receive Plus One directly to your inbox, sign up via the subscribe box below.**

Community News

The ASF’s Security and Tooling teams explore what it takes to scale security scanning across the open source ecosystem. The article details an effort to scan 230 ASF repositories with support from Anthropic’s Project Glasswing and cover the role of threat modeling, automated scanning, and project-level review in identifying and addressing potential vulnerabilities. Read the full blog.

Sam Thursfield joins PlusOne to discuss Apache BuildStream, a software integration tool that orchestrates the building of complete Linux operating systems from source. The conversation explores how BuildStream differs from tools like Bazel, Nix, and traditional distro package managers, its evolution from an R&D project to the build engine behind GNOME OS and the Freedesktop SDK Flatpak runtime, and why the project chose the ASF as its long-term home. Read the full interview or watch the full video.

Project Updates

We’re also proud to celebrate 19 ASF Top-Level Project anniversaries this month:

0-5 Years
Apache Auron
Apache Reqsign
Apache ResilientDB
Apache DevLake
Apache Grails
Apache BuildStream

10-15 Years
Apache Yetus
Apache Storm
Apache Curator
Apache Airavata
Apache Bigtop
Apache SIS

5-10 Years
Apache IoTDB
Apache Rya
Apache Pulsar
Apache RocketMQ
Apache Royale

15-20 Years
Apache Hive
Apache Pig
Apache Shiro

Foundation News

The keynote speakers for Community Over Code Glasgow, taking place October 11–14, 2026, in Glasgow, Scotland, have been announced. The lineup includes Stephen Walli, Adjunct Faculty at Carnegie Mellon University; Vlad-Stefan Harbuz, Executive Director of the Software Stewardship Lab; and Brian Baglow, CEO of Scottish Games Network. They will explore topics ranging from open source education and sustainability to the role of interactive technology in the economy.

The event will also feature Airflow Contributor Days and Lakehouse Day, with dedicated sessions for contributors and ASF project communities to discuss project work, share ideas, and collaborate throughout the event. Registration is open for those planning to attend.

The FY2026 Annual Report looks back on a year of continued growth and progress across the ASF. During the fiscal year, the Apache community reached 10,225 committers across 302 projects, including the milestone of welcoming our 10,000th committer.

The report also covers major efforts throughout the year, including the launch of the Responsible AI Initiative, continued work on Apache Trusted Releases, contributions to international software supply chain standards, and the graduation of 11 projects to become ASF Top-Level Projects (TLPs). Read the full blog.