《Linux基金會:2024年度Linux市場研究報告:加速行業創新(英文版)(45頁).pdf》由會員分享,可在線閱讀,更多相關《Linux基金會:2024年度Linux市場研究報告:加速行業創新(英文版)(45頁).pdf(45頁珍藏版)》請在三個皮匠報告上搜索。
1、Annual Report 2024Accelerating Industry Innovationwww.linuxfoundation.orgContentsINTRODUCTION 3Reflections from our Executive Director.4Board Chair Update.6Linux Foundation Board of Directors.7Thank you to our Members.8The Linux Kernel Organization.17ACCELERATING COMMUNITY ENGAGEMENT 20Deepening Imp
2、act with Standards and Specifications .21Policy Stewardship in Europe,and Beyond.22LFX:Understanding Code Contributors and Velocity Through Data .23LF Education .24LF Research.26LF Events.27Mentorship.28Growing LF Charities.29Protection Against Patent Aggression.30SPHERES OF IMPACT 31The Right to Fo
3、rk.32Confronting Security Challenges in All Forms.34Accelerating Cloud Infrastructure.36Open Source at the Heart of AI Innovation.37The Power of Open Data.39Building with Open Hardware and Infrastructure .40Accelerating Industry Innovation.41Stewarding the Foundations of Trust.42FINANCIAL TRANSPAREN
4、CY 43ANNUAL REPORT 20242THE LINUX FOUNDATIONIntroductionANNUAL REPORT 20243THE LINUX FOUNDATIONReflections from our Executive DirectorOver the past year,weve witnessed tremendous change in the open source landscape:change that drove growth in open source innovation,change that generated important di
5、scourse in open source standards and regulation,and change that validated the critical role the Linux Foundation plays in supporting the open source ecosystem.Central to this exciting evolution are the members,partners,developers and community whose investment,involvement and passion push open sourc
6、e forward.Here are just a few of the biggest open source changes,challenges and successes in 2024.In the past twelve months,the Linux Foundation,with help from many open source stakeholders,mustered credible and wellresourced forks of two critical open source software projectsValkey and OpenTofu.The
7、 fork is the“nuclear option”for open source,but it must be a viable option for forks to effectively deter bad behavior by corporations and investors who view open source merely as a gotomarket method.Thanks to all of you,the“Right to Fork”is now a tangible counterweight against arguments for arbitra
8、ry license changes.This will make open source more stable,reliable,and acceptable for enterprises,governments and other large users.Projects like OpenTofu,OpenBao,Valkey,and OpenSearch show that,when it comes to software freedom,the power is in the hands of the community.Even prominent industry anal
9、ysts are calling out neutral foundations,like ours,as the way forwardproving once again that open source is here to stay,and its evolving in the right direction.On the economic front,a Harvard study recently highlighted the impact of open source on the global economy,pegging it at a whopping$8.8 tri
10、llion in supply side valuea figure that many have underestimated for far too long.As stewards of some of the worlds largest open source projects,the Linux Foundation community played a nontrivial role in this resounding economic success story.We can see from our project velocity trackers that open s
11、ource growth is not slowing down.I firmly believe open source software will eclipse$20 trillion in total economic value by 2030.Dollar value isnt the only metric of success,of course.The role of open source is also to improve lives,by accelerating innovation and opportunity.Thanks to our members,mor
12、e than 850 participants have graduated from the Foundations mentorship programs,which continue to educate a new generation of open source contributors,providing skills that will give them a path to good jobs.LF Education is our fastestgrowing segment.This year,the team,working closely with project a
13、nd foundation sponsors,added more than 30 new courses and 10 new certifications across a wide range of disciplines.To bring greater recognition to the value of certifications,CNCF launched the Kubestronaut program recognizing individual outstanding achievements and fostering goodwill.There are alrea
14、dy more than 840 recognized Kubestronauts from countries around the world.Security has also been front and center this year,especially with our work at the Open Source Security Foundation(OpenSSF).Were steadily moving toward a future where open source software(OSS)is more trusted,secure,and reliable
15、.Were shaping that future by making it easier to sustainably secure the development,maintenance,release,and consumption of the OSS we all depend on.Producers of OSS(of all skill levels)will have the ability to proactively and retroactively address both existing and emergent security threats through
16、lowfriction tooling automation,education,and actionable guidance.Consumers of OSS will be able to verify digital signatures and receive machinereadable attestations,including provenance.This collaborative vision enables individuals and organizations in a global ecosystem to confidently leverage the
17、benefits and meaningfully contribute back to the OSS community.Its an ambitious goalbut one were making serious headway on.In the fall of 2024,we launched LF Decentralized Trust as an umbrella foundation for projects seeking to create digital systems of trust to ensure ANNUAL REPORT 20244THE LINUX F
18、OUNDATIONwhat we see is real and that the people were interacting with are who they claim to be.With AI becoming a commodity,deepfakes will only grow both in frequency and sophistication.Fortunately,the adoption of C2PAthe Coalition of Content Provenance and Authenticityby major AI providers has bee
19、n nothing short of astounding.We can now see a future where its simple to verify the provenance and validity of every piece of content and media that we consume.Part of our job is to make the future happen faster.This is why we focus on the most innovative areas of open source:RISC-V,the open source
20、 ISA thats changing the future of semiconductors,WebAssembly,a runtime environ ment thats quickly becoming a global standard,and PyTorch,the framework powering so much of the work in AI today.We will continue to look for the“next big thing”in open source technology and work to include these efforts
21、in the Linux Foundation.Even though we are a nonprofit,the LF is a living entity that thrives on growth.The best kind of growth is when we can help foster these types of innovative initiatives and bring our best practices to bear on nurturing and growing a community.With our industryspecific efforts
22、,we have made great progress bringing open source to the verticals that make up the fabric of our economy and civilization.LF Energy has been a hub of innovation,driving forward projects that support everything from electric vehicle charging to grid operations to synthetic training data.In the finan
23、cial sector,the worlds largest institutions are coalescing around open source through FINOS to standardize their systems,mutualize regulatory challenges,and share the costs of foundational software.In transportation,Automotive Grade Linux continues to steadily ship and improve as more and more autom
24、akers adopt AGL for core functionality on their vehicles.In telecommunications,were on the brink of a fully interoperable,APIdefined backbone for networking,driven by the standards developed right here at the Linux Foundation with the CAMARA Project.While the past year boasted many achievements,ther
25、e are still a number of hills to climb.Threats to open source remain,like proprietary licensing models such as Fair Source,that are“open washing”and casting doubt on the value of open source principles.As we saw with the sophisticated XZ Utils campaign to convince a maintainer to hand over a key pro
26、ject to a bad actor resulting in a nasty compromise,creating mechanisms of trust to better safeguard supply chain security is increasingly necessary.The open source community has had to defend developers and open source companies from a constant threat of bluntinstrument regulation that,while well i
27、ntentioned,would have stifled open source innovation.The big opportunity ahead of us?The convergence of open source and standards development.Weve already seen the power of standardized open source software,especially when its shepherded by neutral foundations like ours.But for open systems to truly
28、 thrive,they need solid,interoperable standards.The way the world creates those standards today could be much better.We believe that applying open source approaches to standards development will increase participation and reduce the“standards capture”by large incumbents.This will be a major focus of
29、 the Linux Foundation in 2025.I want to extend a heartfelt thank you to all of you for your ongoing support.The Linux Foundation has grown and prospered because of the dedication of our community,through thick and thin.Were at a watershed moment in open source,and your commitment has made all the di
30、fference.Thank you for walking this path with us.Jim Zemlin Executive Director The Linux FoundationANNUAL REPORT 20245THE LINUX FOUNDATIONBoard Chair UpdateWelcome to the 2024 Linux Foundation Annual Report.This report marks my seventh year as Board Chair of the Linux Foundation and sharing my comme
31、nts as chair.Let me start off by saying,that a lot can change in seven years.In the last 7 years I have gone on to creating or growing three different Open Source Program Offices or OSPOs in three very different companies.When I first started down the OSPO path,such groups were a relative novelty.La
32、st year,LF Research studies revealed that twothirds of organizations have OSPOs,which is an exciting and an important trend and something to be celebrated.In my travels I meet representatives from hundreds of OSPOs from universities,regional governments,and many more major corporations.I knew that t
33、he OSPO had truly arrived when I found myself participating in the OSPOs for Good symposium at the United Nations this past July.OSPOs demonstrate an organizations seriousness about their open source strategy and work and a willingness to collaborate with others.And members and sponsors of the Linux
34、 Foundation have been a core driver of open source acceptance and maturation in both industry innovation and in the sustainability context.Open source is now a dominant mode of software development.The rise of OSPOs is a signal of this and an indication of the need for every organization and governm
35、ent to have an open source strategy and open source policy to use and engage in open source successfully.Increasingly,too,organizations need the expertise of OSPOs to navigate the complex new realities of open source.We have seen an increase in the number of abrupt license changes to open source pro
36、jects that are controlled by single enterprises.In response,users and the Linux Foundation have organized resources to thoughtfully fork these projects.With a wave of new government regulations,OSPOs must play a stronger role in advocating for open source and in interpreting the new mandates for the
37、ir CTOs,CIOs,and CISOs.Then there is the discussion about open source AI,the need for training data,and content provenance.OSPOs have been a voice of reason in this debate,which touches every company deploying machine learning tools based on foundation models created by projects or other companies.L
38、astly,open source supply chain security is a growing priority due to increased risks and the growing presence of open source software in all applications.OSPOs work closely with CISOs and organizations like OpenSSF to drive adoption of supply chain tools and weave the best security practices into th
39、e full software development lifecycle.All of this brings me back to the Linux Foundation and your essential role as members.The open source model only works in an environment of high engagement.OSPOs are a bellwether of that engagement.At the Linux Foundation we have continued to see more organizati
40、ons becoming members,and attending events.We have continued to add new projects at a fast pace,and thanks to you,the Linux Foundation has become the preferred home for coordinating forks of important projects that have experienced license changes.An important part of this growth has been the need to
41、 rapidly expand our training and certification offerings and grow our mentorship programs,ensuring a large pipeline of talent to continue to sustain and nurture open source development for the future.We are humbled to be the largest open source technology foundation in the world today and this could
42、 not have been possible without your support as members.Your contributions in terms of direct funding and giving your employees time to make code and other contributions is responsible for trillions of dollars of software value and a growing majority of the worlds most critical software.Engaging and
43、 sustaining open source includes starting an OSPO in your organization.And one that establishes a strategy for your organizations open source work.There are numerous other ways to support open source,such as attending open source events,supporting research,and advocating for DEI in open source.All o
44、f them are critical.Thank you for your help in all its forms in making 2024 yet another impactful year for the Linux Foundation and for open source.The best is yet to come and we need to make sure that the next generation is ready to carry forward the task of sustaining open source.Nithya Ruff Chair
45、 of the Board of Directors,The Linux FoundationANNUAL REPORT 20246THE LINUX FOUNDATIONLinux Foundation Board of DirectorsPeixin HouHuaweiXin LiuTencentBen MaurerMetaTakehisa KatayamaRenesasGold DirectorKen KomiyamaFujitsuDavid MarrQualcomm Yuichi NakamuraHitachiNithya RuffChairShojiro NakaoPanasonic
46、Gold DirectorStormy PetersGitHubSilver DirectorPhil RobbEricssonDaniel ParkSamsungDavid RudinMicrosoftErica BresciaAt-Large DirectorTim BirdSonyGold DirectorEileen EvansAt-Large DirectorMelissa E.EversIntelFrank FanzilliAt-Large Director/TreasurerKimberly CravenRed HatJim ZemlinLinux FoundationJim W
47、rightOracleKeiichi SekiNECDan WilliamsIntelANNUAL REPORT 20247THE LINUX FOUNDATIONThank you to our MembersIn 2024,the open source community faced fresh challenges,including tightening regulations,economic uncertainties,and continued geopolitical tensions.Despite these obstacles,our project communiti
48、es flourished,in no small part thanks to the support we receive from Linux Foundation members.As we move into 2025,our focus remains steadfast on providing developers and project communities with the tools,community events,training,research,and open governance frameworks that ensure thriving open so
49、urce ecosystems.Your support,through membership,governance,and code,enables us to continue this important work.Thank you for your dedication.Together,we are building the technological foundation of the future.The Linux FoundationPlatinum membersANNUAL REPORT 20248THE LINUX FOUNDATIONGold membersSilv
50、er members#1NCE GmbH1Nebula1Password23 Technologies GmbH24x7 Geeks Solutions Pvt Ltd.3Shake Inc42on45Drives6WIND S.A.8gearsAA10 NetworksAarna NetworksABB Switzerland Ltd,Group Technology ManagementAbsa Bank LimitedAc6ACC ICTAccelink Technologies Co.Account:Account NameAccuknoxAcend GmbHACKSTORMAcorn
51、 Labs,IncAcornsoftAcumatica Inc.Ada LogicsAdaptech GroupAdaptive Financial Consulting LimitedAdaptive6AddresscloudAdhara LimitedAdobe Inc.Adtran Holdings,Inc.Advanced Micro Devices(AMD)Aembit IncaeolabsAerospikeAffinidi Pte LtdAfi TechnologiesAgenda d.o.o.AIA Shared Services(Hong Kong)LimitedAirbnbA
52、irbyteAirwayzAisin CorporationAiven IncAkamai Technologies,Inc.Akatsuki Games IncAkenes SA(Exoscale)Akuity,Inc.Alauda,IncAlerant Zrt.Alibaba Cloud(Singapore)Private LTDAlien6Alif SemiconductorAllegro CloudAllianz Investment ManagementAlmaviva S.p.A.Alpha Business Solutions Private LimitedAlphaus Inc
53、.alphawave semiAlter WayAmadeus SASamazee.ioAmazon Web Services,Inc.Ambient ITAmerican AirlinesAmerican ExpressAMI US Holding Inc.AmnicAmpere ComputingAmundi Asset ManagementAnaconda,IncAnalog Devices,Inc.Andes DigitalAnimal Logic Pty LtdAnjuna Security,Inc.Anodot Inc.Anonyome Labs,Inc.AnsysAnt Grou
54、p Co.,Ltd.AntimetalAntmicroanynines GmbHAOEAokumo Inc.APE FACTORYApicaAPIIDA AGApiiroApollo GraphQLApollo Infoways Private LimitedApple Inc.Applied BlockchainAppstellarApptioAptumAqua Security Software,Inc.ARAADIGITArcheraArcium AssociationArcjetArcontech Group PLCArduinoareti S.p.A.Arista Networks,
55、Inc.ANNUAL REPORT 20249THE LINUX FOUNDATIONArm LimitedARMO(Cyber Armor)ArrcusARTELYSAruba SpAAryn,Inc.Ascensio System SIAAspen Technology,Inc.ASRock Rack IncorporationAstera Labs,Inc.Asterfusion Data TechnologiesAstronomer,Inc.ASUS Cloud CorporationAT&T Services,Inc.ATB VenturesAternos GmbHATIX AGAt
56、lassian US,IncAtolio,Inc.AtymAudiokinetic Inc.Augtera NetworksAuradineAuriStor Inc.AuthzedAutodeskAutomata NetworkAvanade Inc.AVAPAVEVA GroupAviatrixAvisi Cloud Services B.V.Aviva plcAviz NetworksAVL Software and Functions GmbHAVSystem sp.z o.o.AXA GroupAxcelinnoAxis CommunicationsAyanWorks Technolo
57、gy Solutions Pvt.Ltd.AzulBbnova Schweiz GmbHB1 Systems GmbHBACK MARKET,Inc.Banco de Crdito BCPBancolombiaBank of America CorporationBank of MontrealbasysKom GmbHBaumer Management Services AGBayer US LLCBayLibre Inc.BeaconPointBeijing Baolande Software CorporationBeijing Big Data Co.,Ltd.Beijing Date
58、nlord Technology Co.,Ltd.Beijing Dosec Technology Co.,LtdBeijing Shengxin Network Technology Co.,Ltd.(QINGTENG)Beijing Supinfo Information Technology Co.LtdBeijing Tenxcloud Technology Co.Ltd.Beijing Tongtech Co.,Ltd.Beijing VNET Broad Band Data Center Co.,Ltd.Beijing Wangxun TechnologyBellSoftBerry
59、BytesBeyondEdgeBhumaBinario EticoBISDNBitrockBlackRock,Inc.BlakYaksBlock,Inc.Blockchain Game Partners Inc.(?Gala?)Bloombase,Inc.Bloomberg Finance L.P.Blue SentryBlues Inc.BMWBNP ParibasBNYBoeingBolt GraphicsBONbLOC IncBoost SecurityBootlinBooz Allen Hamilton,Inc.BoschBoston Consulting GroupBright Ma
60、chines,Inc.Broadcom CorporationBrobridgeBS Company SrlBull SASBuoyant,Inc.Businessintelligence of Oriental Nations Corporation LtdbytesatworkByteSource Technology Consulting GmbHCCable Television Laboratories Inc.Cadence Design Systems,Inc.CaligraCalyptiaCamptocampCanaryBitCanon IncCanonical Group L
61、imitedCapgeminiCapital One Services LLCCarbonatedCARIAD SECasperLabs LLCCASTCast AI Group,Inc.Catalyst CloudCathay Financial Holding Co.,Ltd.CECloud Computing Technology Co.,LtdCelerDataCelesticaCentillionCerbosCertizen LimitedCesiumChainguardChainloopChainyardChaos Software LTDchargebyteCharter Com
62、municationsChaucer Group Limited trading as BIP UKCheckmarxCheesecake LabsChelsio CommunicationsChina Mobile Communication Company LtdChina Systems Holdings LimitedChina Telecommunications CorporationChina UnicomChislitel LabChkk IncChronosphere,Inc.Ciena Canada,ULCCinemo GmbHCINQ ICTCircle Internet
63、 Services,IncCirconusCirculor Ltd.Cirrus LogicCISEL Informatique SACitiCivo Ltd.claionClastix SRLClockwork.ioCloud AceCloud KineticsCloud Software Group,Inc.Cloudbase Solutions S.R.LCloudBees,Inc.CloudBolt SoftwareCloudera,Inc.CloudFerro S.A.CloudFixCloudGeometry Inc.CloudHiroCloudificationCloudLinu
64、xCloudmateCloudMonitorCloudoorCloudSaverCloudsmith LtdCloudThrottleCloudZeroClounix(Shanghai)Technology LimitedClussys IncClyso GmbHCME Group Inc.Code IntelligenceCodefresh,Inc.CoderANNUAL REPORT 202410THE LINUX FOUNDATIONCodethinkCodium LtdCog SystemsColder Products CoCollabora Ltd.Comcast Cable Co
65、mmunications,LLCCoMira Solutions IncCommon ToolsComplianceCowComponent Soft Kft.con terraConfidentialMindConnect 5G,Inc.ConnectifiConoa ABConsensys AGControlPlane.ioControlMonkeyControlTheoryConverge Technology Solutions CorpCOPILOT TRAVEL IncCORE 24/7 LLPCoredge.ioCoreStackCoreWeave,Inc.Cornelis Ne
66、tworksCorshaCortexCosmonicCrayonCreationline,Inc.Credo Semiconductor IncCrest Infosolutions Sdn BhdCRIF S.p.Acroit GmbHCrowdStrikeCrunchy Data Solutions,Inc.crystaldb.cloudCTO.aiCtrlstackcuegee itCuemby Inc.CVS HealthCyberArk Software LtdCybertrust Japan Co.,Ltd.Cybozu,Inc.Cycode,Inc.DdFine GmbHDABC
67、o LtdDAEKYO CNSDaoCloud Network Technology Co.,Ltd.Dash0Data Storage Research,LLC d/b/a DSR CorporationDatabricks Inc.DataCore SoftwareDatadog,IncDatadriversDataStax,Inc.DatastratoDataverseDaugherty Business SolutionsDaytona Platforms Inc.DB Systel GmbHDBOSDe Novo LLCDeeperThanBlue LtdDeepfactorDeep
68、shore GmbHDefense UnicornsDeloitte Consulting LLPDembach Goo Informatik GmbH&Co.KGDenodo TechnologiesDENSO CORPORATIONDenvr DataworksDENX Software Engineering GmbH(DENX)DeployHub,Inc.Depository Trust and Clearing Corporation(DTCC)Design Barn IncDesotech srlDETECH.AI INC.Deutsche Bank AGDeutsche Tele
69、kom AGDevelopment SeedDevsOperativeDevtron Inc.DevZeroDfnsDhiway Networks Private LimitedDiagridDiamanti,Inc.DianomicDigiCert,Inc.Digital Asset(Switzerland)GmbHDigitalEx,Inc.DigitalFish IncDigitalOcean,LLCDigitalPlatformsDiscover Financial ServicesDMetaSoulDNEGDocker,Inc.DoiT InternationalDongobiDor
70、ado SoftwareDornerWorks,Ltd.Douyin Vision Co.,Ltd.Dr.DroidDrafttDragonflydbDreamBig Semiconductor Inc.DrimAESDriveNetsDTEX Systems Inc.Dynatrace LLCEE.ONEasyStack Inc.eBay,Inc.Edge DeltaEdgecore Network CorporationEdgeless SystemsEdgenesisefabless CorporationEffectual IncElasticsearch,Inc.Elastisys
71、ABElastx ABElectricity MapsElectronics and Telecommunications Research InstituteElektrobit Automotive GmbHElementlEleven Labs IncEliatraembearEmbrace Mobile Incembraceable TechnologyEmersonemlix GmbHenclaiveEndor LabsEnergy Web FoundationEnfabricaEnsigniaEnterprise DB CorporationEntigo OEntServ UK L
72、imitedenv0EnveilEnvironmental Systems Research Institute,Inc.(ESRI)EnvisorEPAM Systems,IncEpic Games,IncEpsio Labs LTDEquifax Inc.Equinix Services,Inc.Ernst&Young Global Limitedesatus AGEscala24x7EscapeEspeo SoftwareEsperanto Technologies Inc.Ethernity CLOUDetopus technologyEuropean IT Consultancy E
73、ITCO GmbHEvenkeel Inc.d/b/a DensifyEverest DX IncEvolvere TechnologiesEvonem LLCExeinExivityExostellarExpedia GroupExponential Science FoundationEzurioFF5,Inc.Facets Cloud Inc.FactoryFactSet Research Systems Inc.Fairwinds Ops,IncFarGalaxy Networks,Inh.Sebastian FohlerFastlyFathom RadiantANNUAL REPOR
74、T 202411THE LINUX FOUNDATIONFederal National Mortgage Association(Fannie Mae)Fermyon TechnologiesFidelity InvestmentsFilecoin FoundationFinOpsly Inc.FinoutFirecellFireflyFireHydrantFiveTwenty Inc.FLANT EUROPE OFlexeraFlexnodeFloxFortifiedFOSSAFossIDFoundries.io LTDFr0ntierX IncFramestoreFreedomFiFro
75、ntierftrack ABFUGA BVFUJIFILM CorporationFullStackSFullstaqFuriosaAI,Inc.GGaia Information TechnologyGarden Technologies Inc.Garmin International,Inc.GcoreGDIT General Dynamics Information TechnologyGE HealthCareGEICOGen DigitalGeneral Electric CompanyGenesis Global Technology LimitedGenvid Technolo
76、gies IncGenXcomm IncGetty ImagesGiant Swarm GmbHGienTechGitCodeGitGuardianGitHub,Inc.GitLab Inc.Gitpod GmbHGlobal Data QuantumGlobant LLCGoldman Sachs&Co.LLCGoLedgerGoliothGrab Holdings Inc.GrafbaseGramLabs,Inc.(d/b/a StormForge)GranicaGrape Up Sp.z.o.o.GraphcoreGravitational,IncGraylog,Inc.Green Hi
77、lls Software LLCGreenpixieGreptime HK Limitedgreymatter.iogroundcover Ltd.Grovf LLCGuangdong OPPO Mobile Telecommunications Corp.,Ltd.Guangdong Sunvega Information Technology Co.,LtdGuidaHHackerOneHammerspaceHangzhou ApeCloud Co.,Ltd.Hangzhou EMQ TechnologiesHangzhou Harmony Cloud Technology Co.,Ltd
78、.Hanover Insurance GroupHAProxy TechnologiesHarness Inc.Hartford Financial Services Group Inc.Hashgraph Foundry Inc.(DBA Hashgraph)HashiCorp IncHasura,Inc.HCL America Inc.Hedera Hashgraph LLCHedgehogHeeddataHelium Systems,Inc.HERE Global B.V.herodevsHewlett Packard Enterprise Development LPHexagon A
79、BHighlightHighway9 NetworksHon Hai Precision Industry Co.,Ltd.Honor Device Co.LtdHorizon RoboticsHostersi sp.z o.o.Hound Technology Inc.dba HoneycombHP Inc.HSA FoundationHSBCHugging Face IncHumanitecHunan Mango Innocreative Technology Co.,LtdHushmeshHygraphHyland Software,Inc.Hyundai Motor GroupIiCu
80、bedIdentity Technologies IncIDnow GmbHiExec Blockchain TechIFS World Operations ABIgalia,S.L.IITS ConsultingILKI FRANCEImagination Technologies Group Ltd.Indeed,Inc.IndicioIndyKite Inc.Infineon Technologies AGInfisicalInfluxData IncInfoblox Inc.InfoCertInformation Data SystemsInformation SecurityInf
81、osys LimitedInfracloud Technologies INCInfracostinfraeoInframappainitializ?InnogridInspur Cloud Information Technology Co.Instnt Inc.Instruqt B.V.Integrated Computer Solutions,Inc.IntellectEUIntellectual Highway,Corp.Intellias Global LimitedIntelligent Systems ServicesIntensivate,Inc.Inter IKEA Syst
82、ems B.V.InterCloudInternet Initiative JapanInterop.ioIntersectIntesi Group SpAIntuit,Inc.Intuitive Technology Partners,Inc.InvaryInviaIO Builders Blockchain Technologies&VenturesIOG Singapore Pte.LtdIONOS SEIOTech Systems LimitedIP Infusion IncIRNASiSoftStone Information Technology(Group)Co.,LtdIsov
83、alent Inc.ITGixITQ Consultancy B.V.JJapan Securities Clearing Corporation(JSCC)JD.com,Inc.JetifyJetstack LtdJFrog,IncJoby AeroJPMorgan ChaseJump Operations,LLCJuniper Networks,Inc.JUXT LtdJVC KENWOOD CorporationANNUAL REPORT 202412THE LINUX FOUNDATIONKKaartKaleidoKALRAY CorporationKapeta IncKapstanK
84、asten,Inc.KBSYS IncKentikkeringKey State CapitalKeyfactorKeyless technologies LTDKeysight Technologies Inc.KionKIOWYKioxia CorporationKiratech SpAKitwareKiwimooreKloia Software and Consulting LtdKloudfuse,Inc.KodeKloudKodem SecurityKoedrKomodor Inc.Kong Inc.Konsulko GroupKoor Technologies,Inc.KPIT T
85、echnologies LimitedKPMG LLP GmbH+Co.KGKry10 LimitedKrypc CorporationKSOCkt NexRKTrustKubeOps GmbHKubermatic GmbHKubernetes Innovation Labs LLC(Kubeshop)Kubiya IncKublrKudelski IoTKUKA Deutschland GmbHKumina B.V.Kusari IncKylinSoft Coporation(Beijing)KyndrylLL4B Software GmbHLablup Inc.LaceworkLantro
86、nix Inc.Larsen&Toubro Infotech LtdLast9 IncLaunchnodesLayerZero Labs Ltd.Leading PointLeaseweb Global B.V.Legit SecurityLeminnovLenovo(Beijing)Co.,LtdLG Electronics Inc.Lightbend IncLightmatterLightning AILightrun LtdLike Minds ConsultingLinaro LimitedLINBITLineo Solutions,Inc.LinkData Technology(Ti
87、anjin)Co.,LtdLinutronix GmbHLiquid ReplyLloyds Banking GroupLMAX Exchange LtdLockheed MartinLoft Labs,Inc.Logitech Europe SALogshero Ltd.London Stock Exchange GroupLoongson Technology Corporation LimitedLowes Companies,Inc.LPI.orgLSD OPENLucidity.cloudLucidPoint,Inc.Lumigo LtdLutech Advanced Solutio
88、ns S.p.A.LY CorporationMMacStadiumMagicOrange Group LimitedMainsail IndustriesMangoBoost,Inc.ManTech International CorporationMantech SolutionMarvell Semiconductors LtdMaryville Consulting GroupMassdriver IncMasterCard IncorporatedMatrix I.T CloudZone LTDMATRIXX SoftwareMatXMavenir Systems,Inc.Maven
89、SolutionsMaxon Computer GmbHMazda Motor CorporationMBDA Italia S.p.AMcKinsey&Company,IncMecha SystemsMediConCen LimitedMegazoneCloudMeinberg Funkuhren GmbH&Co KGMemfault IncMemphis.dev dba Stretch,Inc.MemVergeMend.ioMercedesBenz Tech Innovation GmbHMerly IncMetalBear Tech LtdMetoroMetroStar SystemsM
90、ezmoMIA s.r.l.Micas Networks Inc.MichelinMicro Focus International plcMicrochip Technology Inc.MicroEJMicron TechnologyMicware Co.Ltd.MiddlewareMidokura Japan K.K.Milligan PartnersMIllPontmimik Technology IncMinio,IncMIPS Tech LLC.Mirantis,Inc.Miraxia Edge Technology CorporationMitsubishi Electric C
91、orporationMitsubishi Motors CorporationMod Tech LabsmogeniusMolexMoment Technologies,Inc.Monostream AGMontaVista Software,LLCMoodysMoonLight MarketingMorgan StanleyMorpheus DataMotorola SolutionsMoxa Inc.Mozilla CorporationMSys TechnologiesMyFitnessPal LLCNN3XGEN Smart Information Technology ESTNAMU
92、TECH Co.,Ltd.Nanjing eCloud Technology Co.,Ltd.NapatechNatWestNavimentum Information System Co.,LTD.NAVISAMSNDrive Navigation Systems SAndustrialNearForm LtdNearmap Australia Pty LtdNEC Networks&System Integration Corp.Neo4j,Inc.NEOSNetApp,Inc.NetdataNetflix,Inc.NetgateNethopper LLCNetris,INC.NETSIA
93、 Inc.Netweb TechnologiesNeural MagicNeuReality LtdNeuroBladeNeurogliaNew H3C Technologies Co.,LtdANNUAL REPORT 202413THE LINUX FOUNDATIONNew Relic,Inc.nexB Inc.NextBillion.aiNGINX International LimitedngrokNHN CorporationNikon CorporationNIONIPANippon Seiki Co.Ltd.Nirmata,Inc.Nissan Motor Co.,Ltd.No
94、deShiftNokia Corporationnops.ioNordic Semiconductor ASANorthflank LtdNotarize,Inc.d/b/a PNovaGlobal Pte LtdNTT CorporationNTT DATA MSE CORPORATIONnudgebeeNumascaleNumbersNuNetNutanix,Inc.NuvitekNuvotex GmbHNVIDIA CorporationNXP Semiconductors Netherlands B.V.OOctopus Deploy PTY Ltd.OGISRI Co.,Ltd.Ok
95、ahu IncOKESTROOkta Inc.OllamaOmnistrateOodle AI,Inc.Opaque Systems Inc.Open Source Automation Development Lab(OSADL)eGOpen Source Consensus(Shanghai)Network Technology Co.,LtdOpen Source Consulting Inc.OpenAI IncOpenMetal.ioOpenNebulaOpenOpsOpenSynergy GmbHOperantOpsLevelOpsMxOpsNow Inc.Orange SAORC
96、ASIO,INCOrkes IncOrtec FinanceOsaka NDS Co.,Ltd.OSNEXUSOSSO B.V.Oteemo Inc.Oticon A/SOTOY,Inc.OtterizeOverlai LLCOVH SASOwneraPPalark GmbHPalCNetworksPalo Alto NetworksParamount Software Solutions Inc.Parler Cloud TechnologiesParsolvoPartisiaPatchstack OPayi IncPBG ConsultingPelanorPeloton Interacti
97、vePentenPepperDataPercepio ABPerconaPerfectScalePeridioPermifyPermit.ioPhoenix Software InternationalPHYTEC Technologie Holding AGPickfordPing An Technology(Shenzhen)Co.,LtdPingCAPPionativePioneer CorporationPionix GmbHPipekit IncPlanetScale,Inc.PlatHome Co.,LtdPlatform9 Systems,Inc.Platformaticplur
98、alplusserverPLVision CorporationPoint72,L.P.PointFive US IncPolar Signals IncPolygon Labs Services(Switzerland)AGPortPortainer.ioPortal26PosedioProfessional Cloud ConsultingPositPostmanPraetorian Security IncPrecisely Holdings,LLCPrecision Innovations IncPreferred Networks,Inc.Prescient SecurityPres
99、idio IncPreviderP LLCPrint2BlockProdigy EducationProdvanaPRODYNA SEProfiseaProgressive InsuranceProofcraft Pty LtdProSiebenSat.1 Tech Solutions GmbHProsperOpsProtect AIProvectus IT IncProximaOps LLCPS Internet Company LLPPTV GroupPublicis GroupePulumiPure StoragePuzzle ITC GmbHpwcQQANplatformQAware
100、GmbHQiming Information Technology Co.,Ltd.QingCloud Technologies Corp.QualiQuality Cloud Corp.QualitySoft CorporationQUANTUM C&SQubexQuesmaQuilyxQumuloQuSecure IncRR3 LLCRacknerRackspace US,Inc.Radisys CorporationRafay Systems,Inc.RaftRaincoatRaintank,Inc.?Grafana LabsRandstad Digital Germany AGrapi
101、d cycle solutionsRapidAPIRapidFort,Inc.Rayls FoundationRBC Capital Markets,LLCre:cinqRealCloudReality DefenderRealTheory IncRecurveRed Kubes BVRedeployRedocly IncRedpanda DataRedpill LinproREGnosys LimitedRelease Technologies,Inc.Reliance Jio Infocomm LimitedReplicated,Inc.Resolve TechnologyResolveA
102、RestatereThought FloodFlood Insurance Done RightReversingLabsANNUAL REPORT 202414THE LINUX FOUNDATIONRevolgyRicoh Company,Ltd.RigRipple Labs Inc.RISCstar SolutionsRivos IncRNG TechnologyRoadieRobin Systems,IncRobotec.ai sp.z o.o.Robusta.devRocket Software,Inc.Rockwell AutomationRodeoFXRoku,Inc.RootR
103、ootly,Inc.Royal Dutch ShellRTE(Reseau de Transport dElectricite)RTXRuijie Networks Co.,LtdRXM,LLCSS&P Global Inc.SAIC Motor Corporation LtdS,Inc.Salience LabsSalsifySambanova SystemsSanbornSANCLOUD LTDSandboxAQSanofiSAP SESAPEONSarturaSAS Institute Inc.SateliotSavoirfaire LinuxScala ComputingScalarS
104、caleOpsScaleUPScalewayScarf Systems,IncSchneider ElectricSchwarz IT KGScience Applications International CorporationScotiabankScott Logic LtdScoutAPMSDAX Exchange Pte LtdSeafarixSeagate Technology LLCSeal Software(Shenzhen)Co.,Ltd.SearceSecond StateSecondfrontSedaiSEIYAJ TECHSelective Insurance Grou
105、pSemiosSenofiSense ReplySentry SoftwareSeowon Information Co.,Ltd.SerNet GmbHServeTheWorld ASservicememeSERVICEWARESETIT SolutionsShabodiShandong Cvicse Middleware Co.,Ltd.Shanghai Mandao Technology Co.,LTDShanghai Yunsilicon Technology Co.,Ltd.Shanghai Yunzhou Information Technology Co.Ltd(ZStack)S
106、HE BASHShenzhen Wise2C Technology Co.,LtdShineSoft Co.Ltd.Shopify Inc.ShorelineShutterstock,Inc.SICPA SASideFXSidero LabsSiemens AGsifamoSiFiveSIGHUP s.r.l.SignadotSilicon Laboratories Inc.Silicon Studio CorporationSimba InnovationSimplyblockSirius XM Radio Inc.SK hynix IncSK TelecomSkyloudSmartBear
107、 Software,Inc.SmartCirqls Infotech Private LimitedSmartContract Inc.Smartiful,Inc.Snowflake Inc.Snyk LimitedSocionext Inc.Socketsocradev GmbhSoftBank Corp.Software MindSoftware Safety Technology co.,LtdSoftwareONE AGSoKubeSolidRun LtdSolo.io,Inc.Sonatus,Inc.Sonatype,Inc.SORAMITSU CO.,LTD.SouthworksS
108、pacelift,Inc.SpacemiT(Hangzhou)Technology Co.LtdSparkfabrik srlSparkgeoSpatialSpeakeasy Development,Inc.Spectro Cloud,Inc.SpeedScaleSpirent Communications IncSplunk Inc.Spotify ABSpringer NatureSprint CorporationSpyderbatSquarespace,Inc.SQUER Holding GmbHstack.ioStackGenstackgenieStackletStacklokSta
109、ckwatch IncState Street Bank and Trust CompanyStatefulStaubli CorporationSTCLABSteamhausStellar Development FoundationStellateStepSecuritySternumSTMicroelectronics International N.V.Storm Reply srl.StorPool Storage ADStratascaleStrategic BlueStratox Cloud NativeStravaStructsure,LLCStyra IncSudo Info
110、rmation Technology Co.Ltd.Sumo Logic,Inc.Super Micro Computer,Inc.Super ProtocolSupercriticalSuperOrbital,LLC.SurveilSUSE LLCSuzhou Beyondcent&Software Co.,Ltd.(BoCloud)Suzhou Centec CommunicationsSuzuki Motor CorporationSVA System Vertrieb Alexander GmbHSvixSwisscomSymboticSymphony Communication Se
111、rvices LLCSynax GmbHSynechron,Inc.SyngenioSynopsys,IncSyntassoSynyegaSysdig,Inc.SysEleven GmbHSYSGO GmbHTTAC Security Inctaikun.cloud a.s.Tangoe US,Inc.TaplyticsANNUAL REPORT 202415THE LINUX FOUNDATIONTata Communications LimitedTata Consultancy Services LimitedTDT AGTech Mahindra LimitedtechnativeTe
112、chnology Innovation InstituteTelechips,Inc.Telecom Italia Mobile(TIM)S.p.A.Telefonica,S.A.TELUS CorporationTemporal Technologies IncTenable,Inc.TenneTTenstorrentTeraSkyTernaryTerramateTesla,Inc.TestifySecTestkubeTetrate.ioT Netzdienste GmbHTexas Instruments IncorporatedThales SAThavron SolutionsThe
113、4th Paradigm Technology Co.,LtdThe Constant Company,LLC/VultrThe Foundry Visionmongers LimitedThe GuildThe Qt Company OyThe Scale Factory LimitedThe Walt Disney StudiosThornstein GroepThought Machine Group LimitedThoughtWorks,IncThunder Software Technology Co.Ltd.Tidelift,Inc.TietoevryTigera,Inc.Tim
114、esys CorporationTimspiritTmaxCloudTO THE NEWTomTom International B.V.Trace MachinaSimulate Robotic SystemsTrace3Traceroute42TradeHeaderTraefik Labs SASTrail of BitsTravelping GmbHTrenchant Limited(trading as GResearch)Trend Micro IncorporatedTreyeeTrimble Inc.Tripadvisor LLCTripleID SolutionsTrue B.
115、V.Truepic,Inc.TrustwiseTsavorite Scalable Intelligence,incTurk Telekomnikasyon A.S.turntablTuxera Inc.Tyk Technologies Ltd.UU.S.BankUber Technologies Inc.UBS AGUfi SpaceUltraviolet Consult DOOUMB AGUNIBERGUnicloud Tech Co.,LTD.Unikraft GmbHUnion.aiUnravelUnryo IncUpbound,Inc.UpCloud LtdUpsiderUptycs
116、,Inc.USU GMBHUtilidataUtilityAPIUTMStackUturn Data SolutionsVVA Linux Systems Japan K.K.Validation CloudValueMentorValve CorporationVantageVatesVattenfall Eldistribution ABVaxowavevbrickVDURAVeea Inc.Vega Cloud IncVelocityVentana Micro SystemsVeriSilicon,Inc.Veritas AutomataVerizon Corporate Service
117、sVerticeVES LLCVEXXHOST,Inc.VicOne Inc.VictoriaMetricsVidendum Media Solutions SpaVirasemi IncVirtasantVisa Inc.Vivendivivo Mobile Communication Co.,Ltd.VNC Automotive LimitedVodafone Group Plc.Volkswagen AktiengesellschaftVSHN AGWW?t?FX LimitedWalmart Inc.WanchainW LimitedWattCarbonWavecon GmbHWave
118、labsWegmans Food MarketsWellington Management Company,LLPWelotecWeScale SASWestern Digital CorporationWhaTap Labs IncWherobots,IncWhirlpool CorporationWhitestack LLCWhizUs GmbHWIIT AGWind River Systems,Inc.Wing Programming Language Monada EBS LTDWipro LimitedWistron CorporationWitekio HoldingWiv.aiW
119、orkday,Inc.WorldTech IT LLCWorley LimitedWPP plcWSO2 LLC.Xxcellent technologies GmbHxion GmbHXero LimitedxFlow RxgeeksXian Tieke Jingwei Information Technology Co.,Ltd.(CARS)XosphereXsight LabsYYRKENYazaki CorporationYellowbrick DataYLD!LimitedYotascaleYovilyZZEDEDA,Inc.Zeeve IncZendutyZenosicZesty
120、Tech Ltd.Zettabytes,Inc.ZillizZoiZoniqx Inc.Zoss Team,LLCZouzZTE CorporationZuplo IncZutaCoreANNUAL REPORT 202416THE LINUX FOUNDATIONThe Linux Kernel OrganizationIn tandem with security,nurturing open source innovation to create a better world is at the heart of the Linux Foundations activities.In 2
121、021,we celebrated the Linux kernels 30th birthday.Three years later,Linux remains among the top three global open source projects in terms of development velocity.Each release results from the work of thousands of contributors worldwide and many organizations.The kernel community actively maintains
122、a steady flow of innovative improvements to expand the footprint of Linux and enhance its capabilities.CVE announced on February 13,2024,that kernel.org is a CVE Numbering Authority for any vulnerabilities in the Linux kernel as listed on kernel.org,excluding endoflife versions.The Linux Kernel docu
123、mentation states the following on CVEs:“The Linux kernel developer team does have the ability to assign CVEs for potential Linux kernel security issues.This assignment is independent of the normal Linux kernel security bug reporting process.A list of all assigned CVEs for the Linux kernel can be fou
124、nd in the archives of the linux-cve mailing list,as seen on https:/lore.kernel.org/linux-cve-announce/.To get notice of the assigned CVEs,please subscribe to that mailing list.”Linux kernel maintainers and developers got together in Vienna in September for the Maintainer Summit,Kernel Summit,and Lin
125、ux Plumbers conferences to discuss a range of technical topics.The Linux kernel community created a maintainer list to be able to reach all current maintainers,should there be a need to communicate something of importance to the entire kernel maintainer community.ANNUAL REPORT 202417THE LINUX FOUNDA
126、TION Open Source Software 73%Open Standard/Specification 18%Community Initiative 3%Open Data 3%Open Hardware 2%Open Governance Network 1%Peer Network 1%Project typeProject technical segmentCloud,Containers,&Virtualization 23%Networking&Edge 15%AI,ML,Data&Analytics 11%Web&Application Development 11%C
127、rossTechnology 9%Privacy&Security 5%Blockchain 4%IoT&Embedded 4%DevOps,CI/CD,&Site Reliability 3%Open Source&Compliance Best Practices 3%System Administration 2%Storage 2%Linux Kernel 2%System Engineering 2%Open Hardware 1%SafetyCritical Systems 1%Visual Effects 1%Serving Nearly 1,300 Open Source Pr
128、oject CommunitiesANNUAL REPORT 202418THE LINUX FOUNDATIONBy the numbers:The Linux Foundation 20241.7 billion lines of codegenerated.1,906 members supported the Linux Foundation.71,101 developersactivelycontributingvThe Linux Foundation hosted 88 webinars with 12,879 attendees.17.6K organizationscont
129、ributed to Linux Foundation open source projects.The Linux Foundation hosted 219 events with 70K+attendees from 162 countries,over 9k organizations.14.5Kactive member contributionsThe Linux Foundation hosts over 1000 open source projects.LF Education enrolled204K learners.LF Education:49.5K certific
130、ations,representing a 33%increase.LFX Security detected 16,040 code vulnerabilities.The Linux Foundation open source community contributed to over 4.2 million project builds.ANNUAL REPORT 202419THE LINUX FOUNDATIONAccelerating Community EngagementANNUAL REPORT 202420THE LINUX FOUNDATIONDeepening Imp
131、act with Standards and Specifications Open sourcecompatible standards and specifications development are top of mind for many of our communities.Participating in this ecosystem,whether by contributing to upstream specifications,creating open source implementations of open standards,or developing and
132、 advancing their own specifications,helps technologies stabilize and mature in order to reach their full potential.To achieve those goals,projects are using the Joint Development Foundation(JDF)and the Community Specification License(CSL)for developing specifications and other technical deliverables
133、 that are complementary to their open source activities.These hosting structures enable quickstart momentum for technical activities by using widely adopted IP and governance policies.To illustrate this interest,several core Linux Foundation communities,including FinOps Foundation,FINOS,GraphQL Foun
134、dation,LF Decentralized Trust,LF Energy,OpenSSF,and Tazama,have paired with JDF or CSL specification efforts.We expect to see similar programs in place for all LFs core communities by the end of next year.To support these new groups,we have been growing our standards practitioners team and developin
135、g resources such as the Standards&Specifications Forum at Open Source Summit,standardscentric webinars,and training materials.Our standards and specifications projects enjoyed wide success in 2024.In addition to launching new efforts,such as App Defense Alliance(application security)and Margo(indust
136、rial automation for edge deployments),we shipped highly anticipated spec releases,such as:Open Container Initiative specifications Image v1.1,Runtime v1.2,and Distribution v1.1 FinOps Open Cost and Usage Specification v1.0 C2PA Content Credentials 2.1 Overture Maps Schema v1.2 SPDX v3.0 Trust Over I
137、P Trust Spanning Protocol Implementors Draft v1.0 Many,many more specifications are under active development and at varying stages of advancement.Projects are reaching greater levels of consensus than ever before using wide review techniques and building strong bonds with other standards development
138、 organizations or industry consortia.Liaison agreements,MOUs,partnership programs,and open source collaborations are enabling more crossorganizational collaboration between open source and open standards organizations,putting the best and brightest ideas together for a common cause.Our communities h
139、ave been hard at work developing solutions that address critical social issues and/or meet compliance requirements.Security,supply chain management,content provenance,and sustainability technologies will continue to be key focus areas for many of these groups as they work to ship specs and tools tha
140、t address tomorrows problems on todays timeline.The Linux Foundations standards team is very proud to stand behind these projects and looks forward to empowering them further in the years to come.ANNUAL REPORT 202421THE LINUX FOUNDATIONPolicy Stewardship in Europe,and BeyondOpen source technology is
141、 transforming Europes digital landscape by driving innovation,enhancing security,and fostering collaboration across various sectors.As European industries and public institutions increasingly rely on open source solutions,its role has become pivotal in addressing complex challenges such as cybersecu
142、rity,digital sovereignty,and the ethical development of artificial intelligence(AI).Linux Foundation Europe plays a crucial role in this ecosystem by supporting and advancing open source initiatives,facilitating crossborder cooperation,and promoting best practices.LF Europe helps to bridge gaps betw
143、een organizations,communities,and policymakers,ensuring that there is an integration of open source principles into Europes digital strategies.By hosting events like the webinars on the E.U.Cyber Resilience Acts impact on open source development,business engagement,and the Open Source Software Stewa
144、rds and Manufacturers Workshop,LF Europe highlights the importance of policy stewardship.These discussions are essential for understanding how regulations influence open source contributions and how businesses can adapt.Why is policy stewardship important?This is because open source thrives on openn
145、ess and freedom,which requires safeguarding through thoughtful regulation.ANNUAL REPORT 202422THE LINUX FOUNDATIONLFX:Understanding Code Contributors and Velocity Through Data We know that the strength of any open source project depends on its contributors and speed of work.Over the past year,weve f
146、ocused on supporting them by leveraging data.Our platform has enabled 784,054 contributing developers and 19,442 contributing companies to actively improve 14,930 repositories,collectively making 12.7M commits.Listening to What Maintainers NeedOpen source maintainers want:More time to work on open s
147、ource projects.Better tools and processes to streamline their work and bring on new contributors.Many developers work on open source projects in their offhourslate at night or on weekends,indicating insufficient workday time for these contributions.With data,weve opened conversations with employers
148、to provide more dedicated time.Weve also improved tools for maintainers to develop projects efficiently.Each week,31.6M lines of code are added and 12.52M lines removed,ensuring infrastructure and compliance.Weve also raised$3.3M through LFX Crowdfunding,supported 10.7K mentees,added 54,835 CLA cont
149、ributors,and hosted 27K meetings.These improvements let maintainers focus on building better open source projects.LFX Insights:Helping Projects Stay HealthyLFX Insights helps maintainers understand the health of their projects with realtime data on code velocity,new contributors,documentation qualit
150、y,security,and legal compliance.Weve monitored 2.65M pull requests and overseen 4M builds to ensure smooth workflows,detected 555,121 vulnerabilities,and recommended 89,248 fixes,fixing 92,892 vulnerabilities to ensure that our projects are secure.This data allows maintainers to clearly see the over
151、all health of their projects and take action.Our platforms insights also helped us detect and address 1.34M logged issues across projects supporting 29,929 community meetings to maintain strong collaboration.Taking Action with DataLFX Insights provides actionable insights.For example,if code velocit
152、y slows down,maintainers can identify bottlenecks.Proactive SupportAt the Linux Foundation,we actively engage with maintainers and communities.When we see a problem,we step in to help,whether its fixing a security issue,improving documentation,or advocating for more developer support.ANNUAL REPORT 2
153、02423THE LINUX FOUNDATIONLF Education Accelerating Workforce GrowthContinuing a trend we saw last year,organizations are increasingly upskilling and crossskilling to address technical talent gaps.This recognizes the value of investing in existing staff and the challenges of finding,onboarding,and re
154、taining the right external candidates.Organizations increasingly agree that talent is something you should build as well as buy.This aligns with another accelerating trend,the accep tance of reallife experience and certifications as proof of knowledge and skills for nondegreed candidates.Unsurprisin
155、gly,demand for cloud,DevOps,cybersecurity,and AI/ML talent continues to grow.GenAI continues to drive intelligent automation across the workforce,with organizations planning to use it for data analysis and reporting,IT infrastructure monitoring,and software development.While some organizations are r
156、educing head count due to GenAI,many are planning to maintain or increase their overall technical head count.Taking a step back to the big picture,the major trends we have seen for more than a decade continue.The pace of technological evolution continues to accelerate along with the challenges of id
157、entifying,recruiting,retaining,and upskilling IT talent.It appears,however,that organizations are shifting their approach,carefully replacing the hireatallcosts perspective with an approach focused on identifying smart,talented IT professionals and providing them with the tools they need to keep the
158、mselvesand the organizations they work foralong,if not ahead of,the curve.Scholarships In 2024,we awarded more than 500 scholarships to individuals from 111 countries in memory of Shubhra Kar,Linux Foundations CTO.Hundreds more scholarships were awarded via partnerships with diverse nonprofits.Linux
159、 Foundation Training&Certification is now Linux Foundation Education.The evolution of technology has always been about what technology enables all of us to do.Educational technology has evolved significantly during the last several years,and we are positioning ourselves to take full advantage of the
160、 new innovations in learning tech,enabling us to do more to help the tech community learn,grow,and succeed.ANNUAL REPORT 202424THE LINUX FOUNDATION2024 LaunchesCourses Creating Effective Documentation for Developers Remote Work at Scale Introduction to RISCV Understanding Vulnerabilities&Security Th
161、reats Securing Coding Fundamentals Mastering Infrastructure Security:Strategies,Tools,and Practices Zero Trust Security with SPIFFE&SPIRE Introduction to DevOps&Site Reliability Engineering Mastering Kubernetes Security with Kyverno DevOps and Workflow Management with Argo Mastering Kubernetes Event
162、Driven Autoscaling with KEDA Introduction to AI/ML Toolkits with Kubeflow Dapr with WebAssembly Introduction to Nephio Leading HighPerformance Working Group Meetings Istio Service Mesh Essentials Generative AI Prompt Engineering Machine Learning&AI Introduction Retrieval Augmented Generation(RAG)Int
163、roduction Threat Modeling:The Essentials Toolkit Hyperledger Fabric:Design,Develop&Deploy Cloud Cost Monitoring for FinOps with OpenCost Serverless&EventDriven Applications with Knative Conversational AI:Risk Mitigation Strategies Evaluating Generative AI Solutions in the Workplace Linux Kernel Debu
164、gging Kubernetes TroubleshootingExpress Learning Scaling Cloud Native Applications with KEDA OpenAPI Fundamentals XSS Exploits&Defenses Introduction to the Common Domain ModelCertificationsDEVELOPERFINANCIALSERVICESOPEN SOURCEC E R T I F I E DA S S O C I AT EAssociateCERTIFIEDANNUAL REPORT 202425THE
165、 LINUX FOUNDATIONLF ResearchNow in its fourth year,LF Research has led dozens of studies across disciplines,geographies,and technologies,with over 25 unique reports published in 2024 alone!Today,our program features a standardized sponsorship offering,a new survey page to host LF and community surve
166、ys,and the LF Research Forum,a community of open source experts who contribute critical insight as survey respondents on a regular basis.Research highlights in 2024 include the following:Our academic collaboration continues with Harvard through the Census III&Open Source Funding projects;We partnere
167、d with OpenSSF and LF Education on a project to investigate gaps in cybersecurity training and identify what topic their next security course should cover;AWS commissioned a study to explore how to best invest in,grow,and position the OpenSearch project to support the needs of its community;Intel co
168、mmissioned research to understand the specific needs and strategies that open source developers employ to advance their careers;We collaborated with stakeholders across the energy and healthcare sectors to produce qualitative research on interoperability for the Canadian energy grid and health data
169、infrastructure;We worked with Futurewei and MIT to produce a report tracking open source technologies and the impact of AI on decentralized computing domains;We published yearoveryear trend reports for FINOS in the financial services sector,LF Education on the state of tech talent,the TODO Group on
170、the state of the OSPO,and across geographic regions(Europe,Japan,and worldwide);and We delivered key findings of our research at various conferences and in interviews,expand ing our knowledge translation efforts in AI,cloud native confidential computing,and beyond!As we look ahead to 2025,we look fo
171、rward to tackling new and pressing research questions and to expanding our program and our community of collaborators to further engage government agencies,industry stakeholders,and the open source developer community.We would like to thank our community of study participants,sponsors,and readers fo
172、r their commitment to making LF Research the definitive,communityled resource for open source insights in 2024 and into the future!We are grateful for your ongoing support.ANNUAL REPORT 202426THE LINUX FOUNDATIONLF EventsIn 2024,Linux Foundation events continued to play a crucial role in growing and
173、 sustaining open source communities and projects worldwide,whether by gathering kernel maintainers to discuss the next release cycle,by bringing together European open source leaders to collaborate and discuss the CRA and other policy affecting open source,or by joining together 12,000 cloud native
174、developers and community members from across the globe in person for deep technical dives and relationship building.These events not only foster deep colla boration and innovation but also significantly expand access to open source education and dialogue.The full return to inperson events in 2024 ha
175、s been particularly successful,with landmark gatherings such as KubeCon+CloudNativeCon Europe 2024,which set a new attendance record,and PyTorch Conference 2024,which saw nearly triple the registrations compared to 2023,reflecting the rapid growth of AI and machine learning communities around open s
176、ource technologies.The OpenSSF continued its upward trajectory in 2024 with a series of SOSS Community Days worldwide,culminating in the SOSS Fusion conference in Atlanta in October.This series has been instrumental in advancing education and security practices across the open source landscape.The f
177、irst AI_dev Europe conference in June 2024 also marked a key event,attracting over 600 developers eager to engage with open source AI,GenAI,and ML technologies.This event was a significant milestone for the open source AI developer community.KubeCon+CloudNativeCon+Open Source Summit China 2024,held
178、in Hong Kong for the first time,brought together attendees from China,Thailand,India,and across Asia,creating a powerful forum for regional and global open source leaders.The event demonstrated remarkable growth,especially from regions that were previously underrepresented.While the Linux Foundation
179、 reduced the number of virtual events,it has continued to provide widespread access to conference sessions through its YouTube channels.As of September 2024,the Linux Foundation and its projects have a combined total of over 366,000 subscribers and have garnered nearly 1.9 million views between Janu
180、ary and September 2024,primarily of conference content offered openly to anyone around the globe.These numbers highlight the ongoing demand for open source knowledge,enabling developers and community members from around the world to access critical discussions and educational content even if they ca
181、nnot attend in person.Despite economic challenges,2024 saw a return to pre-pandemic attendance levels for many events,underscoring the enduring importance of these gatherings for fostering vibrant and innovative open source ecosystems.ANNUAL REPORT 202427THE LINUX FOUNDATION OSS ChinaThe LFX Mentors
182、hip Showcase,Thursday,August 22,2024 OSS EuropeThe LFX Mentorship Showcase,Monday,September 16,2024 OSS JapanThe LFX Mentorship Showcase,Monday,October 28,2024MentorshipOpen source software is the backbone of our world infrastructure in financial,healthcare,and telecommunications sectors and critica
183、l Internet infrastructure.As a result,ensuring that these communities are healthy and sustainable for the long term is paramount to keeping this infrastructure working.Our responsibility as maintainers and contributors is to invest in the future by empowering the next generation of open source devel
184、opers.It is difficult for thinly stretched experts to take on mentoring roles;however,it is important to the continued success and health of the communities.Equitable access to learning resources is a barrier for many new developers.Making access to learning equitable is essential to attract and ret
185、ain new open source talent to keep communities healthy.Empowering aspiring open source developers to have agency over their learning and skill development is important.We at the LF have recognized that access to resources is a barrier,and we have designed our programs with that in mind.Our allremote
186、,opentoall fulltime and parttime mentorships,webinars,and training resources enable women and people with worklife balance challenges to overcome the barriers to learning.The LFX Mentorship programs spanning a wide range of LF projects and technologies,have been training the next generation of open
187、source developers since its inception in 2019.As of this writing,we have received 14.9K applications,accepted 1.2K candidates,and had 864 participants graduate from the programs.We have paid$2M in stipend payments.Except for a small number of unpaid programs,most of our programs pay a stipend to lea
188、rn.Our mentorship programs are open to all,allowing students and developers to advance their careers and expand their skills in technical areas of interest.Empowered LearningWe look at mentoring from a broader perspective,offering structured mentorship programs as well as mentoring in our LF Live:Me
189、ntorship Series interactive webinars.These webinars offer opportunities for new developers to learn from experts in various technical areas.These webinars are free for anyone to attend,and we are offering them to support the development of skills and further empowerment of the community.We archive p
190、ast webinars,and they are available as a selflearning resource for developers.2024 HighlightsApplications came from all corners of the globe,spanning all the continents.LFX Mentorship Showcases are held at Open Source Summits across the globe in collaboration with the LF Events.Our 2023 graduates sh
191、owcased their mentorship projects and the skills they learned at the LFX Mentorship Showcases.The Linux Foundation provided funding to enable the graduates to connect with developers and communities.OSS NAThe LFX Mentorship Showcase,Monday,April 15,2024THE LINUX FOUNDATIONGrowing LF Charities1Global
192、 AntiScam Alliance,2024.Global Anti Scam Summit:Turning the tide on scams.https:/www.gasa.org/globalantiscamsummit2023.In 2024,LF Charities furthered its charitable mission,proudly launching two transformative open source initiativesTazama and Project Jupyterand facilitating philanthropic support fo
193、r open source.Each of these formations demonstrates the LFs commitment to leveraging collaborative technology to address critical societal challenges and inequalities.Tazama:A Revolutionary Approach to Fraud PreventionLaunched in February 2024,Tazama is an innovative open source software solution de
194、signed for realtime fraud prevention in digital payments.Supported by the Bill&Melinda Gates Foundation,Tazama addresses the staggering$1 trillion lost to online fraud in 20221.Traditional proprietary solutions often come with high costs and limited accessibility,particularly affecting developing ec
195、onomies.Tazama provides a scalable,costeffective,easytoimplement alternative that democratizes access to advanced fraud management tools.The project focuses on fraud detection,antimoney laundering compliance,and monitoring digital transactions,with architecture emphasizing data sovereignty,privacy,a
196、nd transparencyaligning with global governmental priorities.Collaborations with organizations like BankservAfrica and IPSL are assessing Tazamas effectiveness in realworld scenarios,ensuring it meets the diverse needs of Digital Financial Services Providers.Tazama invites engagement from central ban
197、ks,regulators,and mobile payment providers to further its mission.Project Jupyter:Strengthening Interactive ComputingIn October 2024,LF Charities announced that it would host Project Jupyter under its umbrella,offering improvements for the projects sustainability and governance.Jupyter has become a
198、vital tool for interactive computing,data science,artificial intelligence,and research,with millions relying on its capabilities.Transitioning to LF Charities marks a pivotal moment for Jupyter,as LF Charities provides increased support to ensure its longterm viability.With interactive notebooks and
199、 standards,Project Jupyter fosters collaboration across diverse fields,allowing users to explore data dynamically and integrate AI into workflows.Both Tazama and Jupyter exemplify LF Charities mission to leverage open source technology for societal betterment,fostering community engagement and innov
200、ative solutions for todays pressing challenges.ANNUAL REPORT 202429THE LINUX FOUNDATIONProtection Against Patent AggressionThis year the open source community witnessed an uptick in activity from nonpracticing entities(NPEs),commonly known as patent trolls,targeting open source project innovation wi
201、thin and beyond cloud native.In response,the Linux Foundation and Cloud Native Computing Foundation(CNCF)expanded their partnership with Unified Patents to enhance protection and mitigate costly and unwarranted aggression from NPEs for our members in a significant way.The partnership with Unified Pa
202、tents began in collaboration with Open Invention Network,IBM,and Microsoft in 2019.The extended benefits aim to curb the increasing risk of frivolous patent litigation targeting open source project communities and hurting organizations of all sizes,which then jeopardizes innovation and collaboration
203、 within the community.Through this partnership,LF and CNCF membersmore than 1,400 companieswill benefit from various resources depending on their membership level,including annual NPE risk analyses,patent portfolio assessments,and access to Unifieds PATROLL prior art bounty program.They will also re
204、ceive updates on NPE activities and opportunities to participate in royaltyfree licenses from settlements,and attend inperson events.As cloud native and open source technologies evolve,proactive measures against patent trolls become increasingly essential to ensure the ongoing innovation and product
205、ivity of the open source ecosystem.This collaborative initiative strengthens the collective defense strategy of the LF and CNCF,equipping members with the necessary tools to navigate the complex landscape of patent threats,and its a development that we hope our members will take full advantage of.AN
206、NUAL REPORT 202430THE LINUX FOUNDATIONSpheres of ImpactANNUAL REPORT 202431THE LINUX FOUNDATION“The right to fork open source code is at the core of open source licensing.All open source licenses grant the right to fork their code,that is to start a new development effort using an existing code as i
207、ts base.Thus,code forking represents the single greatest tool available for guaranteeing sustainability in open source software.In addition to bolstering program sustainability,code forking directly affects the governance of open source initiatives.Forking,and even the mere possibility of forking co
208、de,affects the governance and sustainability of open source initiatives on three distinct levels:software,community,and ecosystem.”2 2Nyman,L.and J.Lindman.2013.Code Forking,Governance,and Sustainability in Open Source Software.Technology Innovation Management Review.January 2013:712.Available at:ht
209、tps:/timreview.ca/sites/default/files/article_PDF/NymanLindman_TIMReview_January2013.pdfThe Right to ForkThe“right to fork”has always been an option of last resort but an important one nonetheless.Over the past year,the Linux Foundation assisted communities seeking support and a neutral home in orde
210、r to exercise their right to fork.Over the last year,these vibrant,energetic communities have shown that it is possible to sustain forks where all parties can collaborate under neutral terms and a true open source license without use restrictions.Until recently,many considered the right to fork an e
211、mpty threat.Over the last five years,however,several software companies have unexpectedly changed the license for their open source projects to more restrictive licenses.Often,these new models promise“sustainability,”“fairness,”and more as a means to“remedy”open source.They come with catchy websites
212、 and brands such as“business source,”“fair source,”“commercial source,”or what we generally call all of these nonopen source licenses:“source available.”While it is within a companys right to change direction,it has a crippling effect on the external contributors and the community of users who took
213、a dependency on that software.They trusted that company to operate a project under an open source license.Commercial entities and users dependent on that software suddenly face a deadline to pay for a commercial license or migrate.Many chose to fork the previous open source version of the project an
214、d migrate.The rapid emergence of OpenTofu,OpenBao,and Valkey as recently forked projects has established a new reality for companies contemplating a license switch.These forks set a clear precedent for quickly creating a viable community and ecosystem.The Linux Foundation provided the projects with
215、a neutral home,best practices,templates,operational guidance,events,legal support,marketing,and technical infrastructure and support for growing their community.The emergence of wellorchestrated and wellsupported forks also transforms the communities to become more open to contributors of all stripe
216、s,absent the pure profit motive.For example,some companies had a reputation for being unfriendly to community contributions or resistant to features that they wanted to retain for enterprise customers.Having a neutral community enabled many existing contributors and noncontributors to show up and co
217、ntribute morethe results are amazing.The announcements of OpenTofu and OpenBao came shortly after HashiCorp decided to relicense its popular Terraform and Vault codebases under a closed source license.HashiCorps relicensing event disrupted many users and open source project communities that depended
218、 on those codebases.OpenTofu is an open source infrastructureascode platform that offers a communitydriven alternative to Terraform,providing features for managing cloud infrastructure with a focus on maintaining open governance and stability.OpenBao,a project under LF Edge,is an open source,communi
219、tydriven alternative to Vault for managing,storing,and distributing sensitive data such as secrets,certificates,and encryption keys.As these open source projects ANNUAL REPORT 202432THE LINUX FOUNDATION“On the software level,the right to fork makes planned obsolescence,versioning,vendor lock-in,end-
220、of-support issues,and similar initiatives all but impossible to implement.On the community level,forking impacts both sustainability and governance through the power it grants the community to safeguard against unfavourable actions by corporations or project leaders.On the business-ecosystem level,f
221、orking can serve as a catalyst for innovation while simultaneously promoting better quality software through natural selection.Thus,forking helps keep open source initiatives relevant and presents opportunities for the development and commercialization of current and abandoned programs.”33Nyman,L.an
222、d J.Lindman.2013.Code Forking,Governance,and Sustainability in Open Source Software.Technology Innovation Management Review.January 2013:712.Available at:https:/timreview.ca/sites/default/files/article_PDF/NymanLindman_TIMReview_January2013.pdfstarted to grow in popularity and adoption among develop
223、ers,HashiCorp incorrectly accused OpenTofu of copyright infringement,and the community quickly responded with full transparency,debunking the false claims.And in March of this year,the Linux Foundation announced the formation of the Valkey project following the license change of Redis to“dual source
224、available.”The right to fork is not just a 2024 trend.Just over three years ago,ElasticSearch changed the license for its popular codebase to a closed source license.Amazon AWS forked the ElasticSearch codebase to create OpenSearch and invited others to participate.OpenSearch received tremendous gro
225、wth during this time from community participants,including a doubledigit number of maintainers from outside AWS,resulting in two major and 19 minor releases,and 700 million downloads.A singlevendorsponsored open source project achieved all these amazing milestones.In September,AWS worked with its co
226、mmunity to transition OpenSearch to a neutral governance structure under the Linux Foundation,setting up future opportunities for further scale and putting the future of the project into the hands of the community.During his keynote at Open Source Summit Europe,Gabriele Columbro offered the followin
227、g:“Having an open source project stewarded by a foundation means that there is very little chance that the project will change its license over time,and if that happens,it will be because of consensus of the governing bodies of the project community,certainly not the decision of a single member,so e
228、ffectively this allows open source to stay open,forever.An open source license on its own is not enough.”2024 has shown that neutral,communitydriven governance for a project truly matters.The foundation model ensures that intellectual property has neutral governance,aligns with the communitys needs,
229、offers lower risk for organizations taking a dependency on the open source project,and aligns forked projects more closely with the communitys interests.In September,the Valkey project released version 8.0,reflecting the strength of support and rapid innovation through a commitment to open source co
230、llaboration.The growth of Valkey,OpenTofu,OpenBao,and OpenSearch represents an important counterbalance to the singlevendor relicensing situation.The communities that are dependent on those projects have taken a stand to invest and keep projects theyre all dependent on truly open source.The communit
231、y now has a clear playbook for ensuring innovation continuity by organizing in response to license changes and demonstrating that open source projects can thrive independently of any single corporate entity.As open source evolves,the right to fork will remain a crucial mechanism for preserving trust
232、 in open source software and ensuring that its future remains community driven.ANNUAL REPORT 202433THE LINUX FOUNDATIONConfronting Security Challenges in All FormsOpen source software security and supply chain resilience are critical focus areas for the global tech community.With attacks increasing
233、in both volume and sophistication,even targeting schools,hospitals,and municipalities the world over,software security has become closely tied to physical security and wellbeing.In the face of ongoing challenges,projects and teams across the Linux Foundation community continue to drive several key i
234、nitiatives aimed at strengthening software security posture through collaboration.Many will remember 2024 as a year defined by hackers who showed new levels of creativity in attempting to take over open source projects through sophisticated,multiparty social engineering attacks.We witnessed bad acto
235、rs pairing complaints and comments,telling maintainers they had to move faster,with seemingly wellintentioned community members with no track record of trusted contributions offering to ease maintainers burdens.This situation came to a head when the XZ Utils project was compromised,and a hardtodetec
236、t backdoor was installed in the project code.Thankfully,because of a thoughtful,paced release process,the compromised packages were contained to a narrow distribution,as the Open Source Security Foundation(OpenSSF)describes in this report.But XZ Utils was not an isolated incident.One credible takeov
237、er attempt within an OpenJS Foundation project,home to JavaScriptcritical technologies that support the web ecosystem,was intercepted.Consequently,the OpenJS Foundation and OpenSSF jointly responded by creating new guidance for recognizing and mitigating social engineering threats within open source
238、 projects,a great example of their ongoing support of the open source community.Whats the lesson?Reputation and trust have never been more important among open source contributors.We learned that we need to do a better job of understanding contributors track records and motivations,especially in the
239、 absence of knowing contributors identities.Another security arena where Linux Foundation projects made notable progress is in the development and maturation of Software Bill of Materials(SBOM)standards and tools.The System Package Data Exchange(SPDX)project released its 3.0 standard,a milestone tha
240、t introduced profiles for popular use cases such as AI/ML modeling,dataset provenance,security,software build attestation,and licensing.Updated validation and migration tools,as well as porting libraries,have been released with it as well.The OpenSSF also released new tools to simplify SBOM usage,in
241、cluding Protobom(crossstandard SBOM management),SBOMit(verification and attestation),and bomctl(a formatagnostic management tool supporting complex operations on many SBOMs).A companion piece of SBOMs is code signing and provenance,which the Sigstore project leads.Over the course of the year,the pro
242、ject added support for multiple programming languages(Java and Go)and expanded verification to popular package ANNUAL REPORT 202434THE LINUX FOUNDATIONmanagement tools(NPM and Homebrew).This progress moves closer to a future where all code has attestations and is verified before deployment.Alpha Ome
243、ga,another important initiative under OpenSSF,provided grants to support the development of security tools such as Typomania,which detects typosquatting in Rust crates.The grants also helped improve the security of critical projects such as Node.js,jQuery,Apache Airflow,PyPI,and Homebrew.AI security
244、 is emerging as the next critical frontier in both cyberattacks and defense.DARPAs AI Cyber Challenge(AIxCC),launched in partnership with OpenSSF,has driven significant innovation in this space,offering a$29.5 million prize pool to winning teams.Launched in 2023,the AIxCC project showcased results a
245、t Black Hat USA 2024,where semifinalists presented technologies designed to automate the identification and patching of software vulnerabilities,secure supply chains,and defend against zeroday exploits.These AIdriven approaches represent a transformative shift in cybersecurity.With quantum computing
246、 rapidly moving from the lab to production,postquantum cryptography(PQC)is an essential focus.In February,the Linux Foundation launched the Post-Quantum Cryptography Alliance(PQCA)to address the challenges of quantum computing,which has the potential to break current cryptographic systems.The PQCAs
247、mission is to design cryptographic algorithms that can withstand quantum attacks,ensuring the security of open source projects well into the future.Equally important for building a secure future is education.Teaching developers how to code more securely by default is a critical priority.An OpenSSF s
248、urvey of 400 developers found that educational programs that emphasize functionality over security are a hindrance to security awareness.This leads most professionals(69%)to learn security on the job.However,to achieve familiarity with security best practices in this way requires at least five years
249、,and it is not always successful.Other challenges included lack of time(58%)and lack of knowledge of quality security training courses(44%).To begin addressing this issue,the OpenSSF created a free course on secure software development,which is also available on the EdX platform.This year,we added l
250、abs to this course.Since its inception,more than 25,000 individuals have enrolled in some version of this course.We encourage all software developers to consider taking our free Developing Secure Software(LFD121)course or one of the many other excellent courses we offer.This only scratches the surfa
251、ce.The OpenSSF hosted and contributed to many events,created and expanded its guides,added new projects,and raised awareness(e.g.,through its blog).Foundations and projects across the Linux Foundation took steps to improve the security of the software they steward.Without security and trust,none of
252、the progress in open source will be sustainable or reliable.Fortunately,through these efforts,the community is making significant strides toward a future where open source software is transparent,verifiable,and trustworthy.To learn more about the full scope of securityfocused projects,initiatives,an
253、d resources at the Linux Foundation,including guidance on reporting vulnerabilities within projects,visit LF Security.ANNUAL REPORT 202435THE LINUX FOUNDATIONAccelerating Cloud InfrastructureSustained innovation over time is the hallmark of enduring open source technology,and cloud computing is soli
254、difying its place in this category.Now 10 years old,Kubernetes continues to be the core driver of growth for the Cloud Native Computing Foundation(CNCF)and the cloud native community.Ranking just behind Linux in velocity,based on tracked commits and contributors,it stands out among foundation projec
255、ts.Other notable CNCF projects,such as OpenTelemetry,Argo,Istio,Backstage,and Prometheus,also rank highly in velocity,placing them among the top 20 projects within the Linux Foundation.Growth is important,but so are resilience and reliability.This year,the CNCF community further emphasized the impor
256、tance of project continuity when its own project,Flux,required support following the closure of its primary corporate sponsor.Thanks to CNCF and its community of contributors,cloud native technology has become the dominant approach to modern application and infrastructure deployment.Equally importan
257、t as innovation is maximizing the value of cloud spend.Over the past year,the FinOps Foundation has made remarkable strides,growing to over 150 membersincluding all of the top cloudsand gaining the participation of 48 of the Fortune 50.FinOps,a wellestablished operational framework,creates a culture
258、 of collaboration across engineering,finance,and business teams to maximize the value of cloud.In October,the U.S.Department of Defense formally adopted the FinOps Framework by order of the CIO of the Pentagon.The release of the FinOps Open Cost and Usage Specification 1.0 in mid2024with immediate s
259、upport from AWS,Microsoft,Google,and Oracle Cloudmarked a significant milestone,with an aim to normalize cloud billing data across platforms to drive decisionmaking and,ultimately,more value from cloud.Industries such as telecommunicationsthrough LF Networkingand financial servicesvia the Fintech Op
260、en Source Foundation(FINOS)have embraced cloud computing as an integral part of their operations and innovation.FINOS,for example,made notable progress with its Common Cloud Controls standards.These standards provide a unified set of cybersecurity,resilience,and compliance controls across major clou
261、d service providers,helping regulated industries such as financial services adopt cloud computing more safely.Continuous delivery,a crucial advancement driven by cloud native technology,has liberated developers,DevOps,and PlatformOps teams from the complexities of monolithic architectures.The transi
262、tion to microservices and serverless has enabled faster,more predictable software deployments without compromising application delivery.Since inception,the Continuous Delivery Foundation(CDF)has been at the forefront of this movement,with Jenkins growing even more vital for build automation and Spin
263、naker leading the way in crosscloud continuous delivery.Innovative approaches such as Tekton aim to simplify the CD process and make it more modular.Over the past year,CDF experienced rapid growth in membership and community engagement,with the discipline of CD becoming more central to cloud native
264、deployments.Additionally,CDF is advancing the CDEvents standard,with version 0.4 released in the Spring of 2024.This open source standard will allow continuous delivery systems to share common definitions and methods across environments and disparate CI/CD pipelinesa critical maturity milestone for
265、CD and companies using cloud native deployments.These achievements across CNCF,FinOps,FINOS,and CDF underscore the continued evolution of cloud computing as a transformative force for industries.By fostering innovation,supporting critical projects,and establishing standards for cost management,secur
266、ity,and continuous delivery,these communities have cemented cloud native as the cornerstone for modern software development and infrastructure.As cloud adoption accelerates across industries,the Linux Foundation projects ensure that the cloud remains not only a platform for sustained innovation but
267、also a mature,reliable,and secure environment for future growth.ANNUAL REPORT 202436THE LINUX FOUNDATIONOpen Source at the Heart of AI InnovationArtificial intelligence(AI)is rapidly moving from early adoption to mainstream and the Linux Foundation is playing a key role in guiding this shift by fost
268、ering a strong opensource AI ecosystem.The Foundations efforts encompass core technologies,legal and IP frameworks,innovation sandboxes,and a newly launched series of conferences that unite the leading minds in AI and open source on a single platform.These initiatives are designed to ensure that AIs
269、 future remains grounded in open source principles.PyTorch accelerated its growth this year.Contributions are up 133%,from 2 times more organizations worldwide.The project has seen 20%YOY growth in new repositories using PyTorch,and 30%increase in forks and users this past year.In addition,over 70%o
270、f AI research implementations are using PyTorch.The project enjoyed one of the three highest velocities in the Linux Foundation project universe,driven by rapid membership growth and the impressive participation of contributors looking to add additional functionality to the already expansive AI fram
271、ework.The PyTorch core team pushed out numerous innovations to accelerate model construction and inferencing,with advances in quantization,checkpoints,and FlashAttention and memory tuning,among others.The PyTorch Tools ecosystem grew by over 25%,enhancing both software and hardware capabilities.Work
272、ing with all major cloud service providers,dozens of major software vendors,and industry partners,PyTorch is setting a new bar for the pace and breadth of AI innovation.Projects incubating in the LF AI&Data continued to multiply,with three notable additions in the summer of 2024Delta Lake,an open so
273、urce storage layer that brings reliability to data lakes,Unity Catalog,a unified governance tool that provides finegrained controls for data and metadata management,and vLLM,an opensource library for fast LLM inference and serving.These projects,in addition to 7 other new projects that entered the L
274、F AI&Data incubation program in 2024,have thousands of enterprise users and are well established in the AI landscape,adding additional gravity to open source.To counter restrictive licensing practices that hinder enterprise adoption,LF AI&Data welcomed the Open Model Initiative(OMI)as an effort unde
275、r its Generate AI Commons to promote the development of highquality,openly licensed AI models.OMI focuses on training generative AI models,establishing governance frameworks,creating shared standards for interoperability,and providing transparent datasets.Enterprise adoption of open source AI is cru
276、cial to building a health open source AI ecosystem.LF AI&Data launched Open Platform for Enterprise AI(OPEA)to create an open,multiprovider platform for building scalable AI systems on standardized frameworks.Now with more than 50 partners,OPEA focuses on integrating composable building blocks for g
277、enerative AI,including large language models(LLMs)and retrievalaugmented generation(RAG)workflows,while providing standardized frameworks and architectural blueprints.OPEAs Demopalooza event,showcasing 10 GenAI solutions,has been well received.LF Networking and Automotive Grade Linux are collaborati
278、ng with OPEA to facilitate the smooth adoption of opensource AI in telecommunications and transportation.In financial services,FINOS AI Readiness is a dedicated initiative to prepare the industry for the safe and reliable deployment of GenAI.ANNUAL REPORT 202437THE LINUX FOUNDATIONIn 2024,LF AI&Data
279、 also launched the Generative AI Commons,a collaborative initiative to promote developing and adopting efficient,secure,reliable,and ethical opensource generative AI.The initiative has already garnered strong interest,with over 80 organizations joining and participating in the various workstreams.Th
280、e LF AI&Data Generative AI Commons working group developed the Model Openness Framework(MOF),a threetiered ranked classification system that rates machine learning models based on their completeness and openness.The MOF provides timely practical guidance for(i)model producers to enhance the openness
281、 and completeness of their publiclyreleased models,and(ii)model consumers to identify open models and their constituent components that can be permissively used,studied,modified,and redistributed.The Model Openness Tool(MOT)provides a userfriendly reference implementation of the MOFand assigns a sco
282、re based on the accessibility of model components and the chosen licensing.Currently,in beta,MOT reflects the Linux Foundations commitment to reducing the complexity of operating opensource projects.Additionally,extending from the Model Openness Framework,the LF AI&Data Foundation helped broaden the
283、 understanding,context,and nuance of different AI use cases by releasing a community-driven definition of open source AI models and open science AI models,two very different artifacts in this rapidly evolving space.AI is the future,and open source is the way forward.The LF AI&Data communities are pr
284、oviding the guidance and energy needed to help us achieve this vision.ANNUAL REPORT 202438THE LINUX FOUNDATIONThe Power of Open DataIn the age of AI,data is the new rocket fuel.All AI applications rely on models trained with a foundation of accurate,useful data.This point has been hammered home in 2
285、024 by large AI model builders aggressively signing licensing deals with StackOverflow and Reddit,seeking to safeguard their right to train on highquality data.The flipside of this trend is that more and more organizations are blocking access and requiring payment for training.The risk is that the b
286、est data goes to those with the deepest pockets,leaving the rest of the world“data poor.”Synthetically generated data offers hope.If tools can generate synthetic data that doesnt induce model collapse or inject uncertainty,then small amounts of high-quality open source data will go a long way.Altern
287、atively,the community can secure large pools of open source data to ensure open access.The Overture Maps Foundations(Overture)work in open data innovation is especially noteworthy.Geographical data is among the most important data sources affecting our lives and our daily user experiences.Launched i
288、n 2022,Overtures mission is to create reliable,easytouse map datasets to power current and nextgeneration mapping applications.Leveraging data from member contributions,civic organizations,and open data sources,Overtures open collaboration tackles the fragmented map data landscape.The foundation wor
289、ks with a“whos who”of tech powerhouses and geographical information systems specialists to create a viable alternative to proprietary map data vendors.Over the past year,Overture released its first productionready open map datasets,an astounding achievement given the short timeframe.The July 2024 Ge
290、neral Availability datasets feature 2.3 billion unique building footprints and 54 million places of interest,covering critical map layers that the user can further enrich with external data through Overtures open data schema and other data.Overture also made an alpha release of over 200 million addr
291、ess records across 14 countries that developers can use in navigation,logistics,and local search applications.The alpha release allows the public to see the proposed schema.Feedback from this release will inform the schema evolution to ensure that it can work across a worldwide set of address data.O
292、vertures Global Entity Reference System(GERS)assigns unique identifiers to entities within the data.With GERS IDs,developers can easily attach additional spatial data to entities and integrate various types of data,such as environmental factors,traffic,or property information.Overture is widely used
293、 in production.Meta,for instance,switched its internal mapping solution over to Overture.Hundreds of millions of consumers see Overture map data if they use Facebook,Instagram,or WhatsApp.Microsoft uses data from Overture in its Bing and Azure maps,which consumers and businesses then use to create p
294、roducts.Esri uses the data to enhance its ArcGIS Living Atlas of the World with new 2D and 3D map layers.Membership growth has been exceptionally strong.The communitydriven approach and continuous feedback loop ensure that Overtures datasets remain updated and adaptable to the changing needs of the
295、digital world.Other innovative LF data efforts include synthetic data.LF Energys OpenSynth offers a synthetic open source smart meter dataset to allow energy companies to perform energy modeling tasks with lower costs while ensuring consumer privacy.As technology grows more adept at consuming and us
296、ing data for AIpowered applications,maintaining equal access to highquality data becomes imperative for innovation.We are looking forward to working with the membership to make this a reality.ANNUAL REPORT 202439THE LINUX FOUNDATIONBuilding with Open Hardware and Infrastructure In 2024,the Linux Fou
297、ndation expanded our commitment to open hardware.By reducing the reliance on proprietary systems,open hardware standards enable developers and companies to customize and build solutions more efficiently and affordably.We believe open standard hardware,powered by open source software such as Linux,Ze
298、phyr realtime operating systems(RTOS),and the RISC-V open standard ISA(instruction set architecture),is on the cusp of a significant breakout.At the core of all open hardware is silicon.The open RISCV standard ISA is now a comparable alternative to proprietary ISAs with a mature ecosystem and toolin
299、g that enables RISCV usage for every conceivable semiconductor use case.In the past year,RISCV International surpassed 4,500 members from 70 countries.RISCV implementations are shipping at scale:Qualcomm has shipped over 1 billion devices that integrate RISCVbased microcontrollers.A slew of wellfund
300、ed startups are basing their entire chip designs on RISCV.Meta is utilizing RISCV for some of its inhouse design.Googles Android operating system and Linux both have prioritized RISCV support.The future of silicon is open,thanks largely to the success of RISCV.Among the highest velocity projects in
301、the Linux Foundation,the Zephyr Project is one of the quiet successes that is powering the future of hardware.With a fastgrowing and incredibly active community,Zephyr has rapidly matured in 2024,becoming more secure,flexible,and integrated into the broader embedded systems landscape,including its u
302、se as firmware for Intel processors and support of several ARM architectures.With the release of Zephyr 3.7 LTS,this RTOS introduced key features such as dynamic code loading,enhanced security,and expanded support for over 160 hardware platforms.Zephyr strengthened security in 2024 with enhanced sof
303、tware bill of materials(SBOM)generation and external security audits.In“Big Iron,”the Open Mainframe Project made strides toward integrating mainframes into distributed and cloud computing and improving the developer and DevOp experience.The Galasa project enables deep integration testing across pla
304、tforms and technologies within a DevOps pipeline.It supports repeatable,reliable,agile testing at scale across your enterprise.Another highprofile project,Zowe,is an open source software framework that enables DevOps teams to manage,control,script,and develop on the Mainframe just like they do in th
305、e cloud.According to the Arcati Mainframe Yearbook 2024,85%of mainframe organizations will adopt Zowe by the end of the year or have already adopted it into their modern enterprise solutions.With one of the most active mentorship programs in the Linux Foundation,Open Mainframe is a critical componen
306、t in bringing fresh talent into mainframes and making older but still critical languages like COBOL“cool”again.Other hardwarefocused projects made great progress in the last year.In 2024,Dronecode advanced open source drone hardware with new standards like the Pixhawk FMUv5X and Payload Bus and laun
307、ched the PX4 Autonomy Development Kit.The CHIPS Alliance continued to make progress on multiple fronts,including language support,support for FPGAs,and support for the Caliptra Root of Trust.The complexity of modern hardware requires collaborative efforts to develop robust software solutions.The Hig
308、h Performance Software Foundation(HPSF)launched in 2024 to build,promote,and advance a portable software stack for highperformance computing(HPC)by increasing adoption,lowering barriers to contribution,and supporting development efforts.Performance porta bility is key in HPC to enable the reuse of l
309、ibraries and applications on the diverse architectures existing today and make software resilient to the rapid ongoing hardware architecture innovation.Initial HPSF projects include package and container management solutions.Open hardware will win the battle for developer and designer hearts and min
310、ds for the same reasons open source software has succeededgreater transparency,better security,and a higher pace of innovation,powered by community.ANNUAL REPORT 202440THE LINUX FOUNDATIONAccelerating Industry InnovationIndustry end-user communities are leading open source innovation by sharing the
311、costs of common,pre-competitive,foundational technologies.Today,these communities exemplify collaboration and value mutual-ization among fierce competitors to an inspiring degree.In the automotive industry,Automotive Grade Linux(AGL)continues to make progress toward mainstreaming open source as the
312、core component of softwaredefined vehicles,with systems live in brands including Toyota,Honda,and MercedesBenz.In May,AGL went cloud native with support for AWS Graviton processors,allowing for virtual,streamlined development and testing of automotive systems.The new release also supports boards uti
313、lizing the RISCV architecture and includes an updated version of Toyotas Embedded Flutter UI,further simplifying invehicle app development.In the energy sector,LF Energy is pushing open source as a core element of technology for electrical utilities as well as energy policy.The TROLIE project was la
314、unched to accelerate the implementation of reliable,secure,and interoperable systems for the exchange of transmission facility ratings through an open conformance standard and software ecosystem,helping North American utilities meet the requirements of FERC Order 881.LF Energy also announced new pro
315、jects for hazard and risk analysis,collecting data on U.S.residential incentive programs,digitizing substations,and more.In addition,the foundation has partnered with the U.S.Joint Office of Energy and Transportation(Joint Office)to build an open source reference implementation for electric vehicle(
316、EV)charging infrastructure.In motion pictures,the open source projects hosted by the Academy Software Foundation(ASWF),including OpenColorIO,OpenTimelineIO,and OpenEXR,were used in major films and shows like Nimona,Oppenheimer,and Guardians of the Galaxy Vol.3.ASWF also partnered with the Alliance f
317、or OpenUSD to promote the 3D content interoperability standard OpenUSD.In gaming,the Open 3D Foundation saw the release of its first mobile game,MadWorld,built on the O3DE engine.In finance,FINOS released a cloudbased implementation of Digital Regulatory Reporting(DRR)using the Common Domain Model(C
318、DM).This groundbreaking project significantly reduces the complexity of regulatory reports implementations by financial institutions.Tazama,an LF Charities project launched earlier this year,democratizes antifraud technology to reduce barriers to entry to alternative financial services providers wit
319、h lower startup capital.This is particularly relevant in the developing world and for startups building payments infrastructure to better serve the worlds unbanked populations.Finally,LF Networking serves as the Collaboration Hub across the entire open network stack.With the worlds top telcos partic
320、ipating in LF projects,it is advancing digital transformation via domainspecific AI,cloud native network functions,5G/6G,open RAN,and more.Additionally,CAMARA brings global operators together with aggregators and hyperscalers to define a common set of industry APIs enabled across telco networks and
321、countries.SONiC,the leading OS Network Operating System(NOS),allows cloud operators to share the same software stack across hardware,decoupling network software from its underlying hardware.We are grateful that so many enduser members have become contributormembers,working toward upstream,verticalsp
322、ecific solutions that enable faster innovation and better management of risk while driving enterprise bottom lines.ANNUAL REPORT 202441THE LINUX FOUNDATIONStewarding the Foundations of TrustTrust is the foundation of a healthy society,and as technology increasingly drives social,political,and econom
323、ic interactions,its critical to embed trust into these systems.Cyberattacks,AIenabled deepfakes,and online fraud have eroded trust in technology and other aspects of our lives.The Linux Foundation believes that wide adoption of neutral,communitymanaged systems of distributed trust is necessary to ad
324、dress these growing risks to our collective happiness,prosperity,and safety.In 2024,the Linux Foundation formed LF Decentralized Trust as a neutral umbrella organization for projects working toward distributed trust.The new foundation includes active projects from the Hyperledger Foundation and a gr
325、owing ecosystem of projects focused on the next generation of decentralized trust applications for core social,financial,and political use cases.LF Decentralized Trust builds on the work and successes of the Hyperledger community while also incorporating new technologies.For example,Besu,a Hyperledg
326、er project now under LF Decentralized Trust,is the third most popular execution client for the Ethereum mainnet and has growing traction with major banks and financial services providers.To kick off the new foundation,Hedera donated Hiero,the software stack behind the blockchain and consensus engine
327、 of the enterprisefocused,highthroughput Hedera Network.We are optimistic that decentralized trust will enter the enterprise mainstream in the next few years,with LF Decentralized Trust leading the charge.Alongside the meteoric rise of AI,we have experienced a similar rise in deepfakes.The cost of g
328、enerating believable fake content of any type has fallen to nearly zero.The technology for generating lifelike deepfakes of voice,video,and images is now accessible to even the most nontechnical of users.Scammers using deepfake voice tools mimicking the CEO of car company Ferrari nearly convinced a
329、firm financial executive to wire tens of millions to suspicious accounts.Similar attacks,including a sophisticated video fake that used face swapping in a Zoom meeting,have been more successful.Indias National Stock Exchange(NSE)cautioned investors against deepfake videos posted on social media of i
330、ts chief executive giving stock recommendations.A major presidential candidate in the United States posted deepfake images purporting to garner a recommendation from a famous music star.These are just a handful of examples.To combat this,the Linux Foundations Coalition for Content Provenance and Aut
331、henticity(C2PA)is becoming the standard for verifying content authenticity.Supported by major AI and media brands,C2PA enables publishers and consumers to trace the origin of media and is extensible to documents,emails,and other online content.As financial services companies strive to compete,increa
332、sing liquidityand efficiencyare priority focus areas.To support this effort,the Global Synchronizer Foundation is working to foster adoption and participation in the Canton Network,the first privacyenabled interoperable blockchain network,designed for regulated,realworld assets.Blockchain applicatio
333、ns in the Canton Network can use the Global Synchronizer to enable atomic transactions across sovereign blockchains without sacrificing privacy or control.In our vision of the future,authenticity will be a commodity,verified by distributed systems under the control of neutral entities such as foundations.This is the best path to building trust into technology and,by extension,our world and our liv