--- title: Apache Software Foundation 2025 Year in Review:... description: Apache Software Foundation's 2025 highlights include ratification of three ECMA standards (CycloneDX 1.7, Package-URL, Common Lifecycle Enumeration) for SBOM... canonical: https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Apache Software Foundation 2025 Year in Review: Achievements and Future Directions | daily.dev og:description: Apache Software Foundation's 2025 highlights include ratification of three ECMA standards (CycloneDX 1.7, Package-URL, Common Lifecycle Enumeration) for SBOM... og:url: https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs og:image: https://api.daily.dev/og/posts/qdnKxkurs.png og:image:alt: Apache Software Foundation 2025 Year in Review: Achievements and Future Directions og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Apache Software Foundation 2025 Year in Review: Achievements and Future Directions **[Collections](https://daily.dev/sources/collections)** · 2 min read · 0 upvotes · 0 comments ## Summary Apache Software Foundation's 2025 highlights include ratification of three ECMA standards (CycloneDX 1.7, Package-URL, Common Lifecycle Enumeration) for SBOM and vulnerability management, graduation of 10 projects from incubator, and reaching 10,000 committers. The Foundation launched the Apache Trusted Releases platform in alpha, implemented comprehensive MFA, adopted VEX tooling, and modernized infrastructure. Community Over Code events in Beijing and Minneapolis drew nearly 1,200 attendees. ASF emphasizes the ongoing need for financial support through sponsorships and donations to sustain its global infrastructure serving over 300 projects. ## Content The Apache Software Foundation (ASF) closes the year 2025 with numerous significant accomplishments, reinforcing its commitment to resilience and growth within the software community. Key highlights from this year include the ratification of three essential ECMA standards: CycloneDX 1.7, Package-URL, and Common Lifecycle Enumeration, all crucial for advancing standards in software bill of materials (SBOM) and vulnerability management. A notable achievement for ASF this year was the graduation of ten projects from the incubator, marking their maturity and readiness for broader community involvement. In contrast, four projects were retired, reflecting the Foundation's continuous evolution and focus on impactful initiatives. Another landmark was reaching a milestone of 10,000 committers, illustrating the vibrant and expanding ASF community. The launch of the Apache Trusted Releases platform represents a significant innovation in secure software distribution. Introduced in an alpha phase, this platform is part of ASF's broader strategy to enhance its security compliance and tooling capabilities. The Foundation also made strides in enhancing community tools and operations. This includes the adoption of Vulnerability Exploitability eXchange (VEX) tooling, improved participation from mentors in the incubator program, and the modernization of the Board Agenda Tool. Additionally, comprehensive Multi-Factor Authentication (MFA) was implemented across platforms, further fortifying security measures. The ASF Tooling Initiative saw expansion, ensuring that ASF can continue to support its extensive portfolio of over 300 projects globally. The success of campaigns such as the #ASFNewLeaf social media initiative and the launch of a new logo underscore ASF’s commitment to community engagement and brand revitalization. Hosting Community Over Code events in Beijing and Minneapolis attracted nearly 1,200 attendees, facilitating dialogue and collaboration within the ASF community. Despite this year’s successes, the Foundation underscores the critical need for ongoing financial support. Sustaining its infrastructure and services for global communities depends heavily on diverse sponsorships, targeted contributions, and individual donations. As we reflect on 2025, the Apache Software Foundation remains dedicated to its mission of providing free, high-quality software services, fostering open innovation, and supporting a global community of users and contributors. ## Similar posts on daily.dev - [ASF Plus One Newsletter: August 2026](https://daily.dev/posts/asf-plus-one-newsletter-august-2026-uocp9wlyx) · The Apache Software Foundation Blog · 0 upvotes · 0 comments - [ASF Plus One Newsletter: January 2026](https://daily.dev/posts/asf-plus-one-newsletter-january-2026-xfpawpx97) · The Apache Software Foundation Blog · 0 upvotes · 0 comments - [ASF Plus One Newsletter: March 2026](https://daily.dev/posts/asf-plus-one-newsletter-march-2026-jhtjdsvqc) · The Apache Software Foundation Blog · 0 upvotes · 0 comments - [How we migrated a 20-year-old open source project to the Apache Software Foundation](https://daily.dev/posts/how-we-migrated-a-20-year-old-open-source-project-to-the-apache-software-foundation-mkaq0774r) · All Things Open · 0 upvotes · 0 comments - [ASF Plus One Newsletter: June 2026](https://daily.dev/posts/asf-plus-one-newsletter-june-2026-uikdihs49) · The Apache Software Foundation Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#apache](https://daily.dev/tags/apache), [#sbom](https://daily.dev/tags/sbom) [View this post on daily.dev](https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Apache Software Foundation 2025 Year in Review: Achievements and Future Directions","url":"https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs"},"datePublished":"2025-12-18T18:10:00.980Z","dateModified":"2025-12-18T18:10:26.994Z","description":"Apache Software Foundation's 2025 highlights include ratification of three ECMA standards (CycloneDX 1.7, Package-URL, Common Lifecycle Enumeration) for SBOM...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1a4f6f54e6f36696733b97de18844433?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1a4f6f54e6f36696733b97de18844433?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/apache-software-foundation-2025-year-in-review-achievements-and-future-directions-qdnkxkurs","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,apache,sbom","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Apache Software Foundation 2025 Year in Review: Achievements and Future Directions"}]} ```