Annual Report 2022

Leadership in
Security and
Innovation
www.linuxfoundation.org
Contents
PHO
TO
BY
H
Security, innovation, and impact:

AM
CELEBRATING THE INNOVATORS 26

AN
A message from our Executive Director ............. 5

NL
Innovation with a global impact ......................... 27

A: P
2022 in numbers.................................................... 5

E X EL S
Saving wildlife: Peace Parks Foundation and
Growing the global impact of open source........ 5 OpenJS Foundation.............................................. 27

Exceeding industry standards in diversity OpenCollar animal tracking and the Zephyr
and inclusion.......................................................... 7 real-time operating system................................. 27

Facing the challenges ahead: Cybersecurity Data modeling for climate change:
and techno-nationalism........................................ 7 OS-Climate............................................................ 28
A note about the images
Enabling innovation and security at Open charging for electric vehicles: in this Annual Report:
the Linux Foundation............................................. 9 EVerest (LF Energy).............................................. 28

Mine-to-manufacturer traceability All images in this book

Linux Foundation Board of Directors................. 11
of a conflict mineral: Circulor are sourced from Linux
Thank you to our members ................................ 12 (Hyperledger Foundation member) .................. 28 Foundation Flickr, Unsplash,,
Pexels, and Stocksnap.
Employee and student health v
Linux Foundation members................................ 13
erification: Cardea ............................................... 29
All icons used within are from
Platinum members.............................................. 13
Improving network access for The Noun Project.
Gold members...................................................... 13 underserved communities: Magma.................. 29

Silver members.................................................... 14 Securing open source software: OpenSSF........ 29

In memoriam: Shubhra Kar................................. 22 Welcoming the

PyTorch Foundation............................................. 30
Serving over 986 open source project
communities.......................................................... 23 Investing in European innovation:
The launch of Linux Foundation Europe ........... 31
Innovation with an evolving Linux kernel.......... 24
OpenWallet Foundation:
Fostering growth, quality, and velocity.............. 25 Advancing interoperability in digital wallets ..... 33

Sylva........................................................................ 34
SOFTWARE SUPPLY CHAIN SECURITY 35 Open Hardware
Diversity Alliance.................................................. 57
Engaging the public sector on
open source software worldwide....................... 36 Open Mainframe Project
diversity efforts.................................................... 57
OpenSSF................................................................. 37

2022 highlights..................................................... 37 INVESTING IN TRAINING AND

CERTIFICATION 58
Software Package Data Exchange (SPDX).......... 41
Leveraging learning to support
Related security activities at the Linux talent acquisition and retention......................... 59
Foundation............................................................ 42
New courses in 2022 .......................................... 60
Internet Security Research Group (ISRG)........... 42
Certifications and credentials............................. 61

Scholarships ......................................................... 61
LF RESEARCH: MEASURING THE
IMPACT OF OPEN SOURCE INNOVATION 43 10th Annual Jobs Report
summary of findings............................................ 61
2022: A year of insights........................................ 44

Focusing on people:
Maintainership and mentorship........................ 44 EVENTS 62

Focusing on priority issues: Returning to our global community................... 63

Core research projects ....................................... 45
Looking forward to 2023...................................... 64
People-powered innovation
within industry verticals...................................... 46

Focusing on technology trends: INNOVATION IN TELECOMMUNICATIONS

Research from Linux Foundation projects........ 47 AND THE EDGE 65

Open source networking:

Reshaping global connectivity for
LFX 48 five years and counting ....................................... 66

5G Super Blueprints:
MENTORSHIP AND DIVERSITY 51 Enabling integrated, accelerated cross-stack
5G use case deployments ................................... 67
LFX Mentorship .................................................... 52
Edge and IoT now mandating open source
Mentorship and Events....................................... 53
frameworks: A market four times the
Diversity, equity, and inclusion efforts............... 55 size of cloud computing...................................... 68

Grace Hopper Conference.................................. 55 U.S. GOV OPS........................................................ 69

 Nephio................................................................... 70 Gathering and inspiring FinOps
practitioners from all types of
SONiC..................................................................... 70 organizations globally.......................................... 83

DPDK...................................................................... 70 Increasing investments into our

thriving community.............................................. 84
Magma................................................................... 71
Building upon our innovative momentum
eBPF....................................................................... 71
into 2023 and beyond......................................... 85
ORAN-SC ............................................................... 71

DENT...................................................................... 71 INNOVATION IN ENTERTAINMENT 86

Academy Software Foundation........................... 87

INNOVATION IN WEB, CLOUD,
AND DEVOPS 72 Open 3D Foundation and Open 3D Engine....... 89

OpenJS Foundation............................................... 73
MAKING AN IMPACT ON PEOPLE AND
Bringing JavaScript users together
THE PLANET 92
through diversity among people
and projects ......................................................... 75 LF Energy................................................................ 93

Cloud Native Computing Foundation................. 76 OS-Climate............................................................. 96

Contributor-led innovation................................. 76 Green Software Foundation (GSF)...................... 99

Humanizing security............................................ 76
AgStack................................................................... 99
Building the road ahead ..................................... 77
OpenTreatments and RareCamp ..................... 100
Continuous Delivery Foundation ....................... 78
Linux Foundation Public Health........................ 101

Hyperledger Foundation.................................... 102

COMMUNITIES BUILDING
OPEN SOURCE BEST PRACTICES 80 Climate change initiatives.................................. 102
TODO Group (open source program offices).... 81

OSPO educational publications ......................... 82 INNOVATING WITH HARDWARE,

EMBEDDED, DEPENDABLE,
FinOps Foundation: Advancing how AND IOT SYSTEMS 103
organizations understand and
RISC-V International............................................ 104
value cloud usage................................................. 83
OpenPower.......................................................... 106 The Coalition for Content Provenance and
Authenticity.......................................................... 123
CHIPS Alliance..................................................... 107
OpenAPI Specification ....................................... 124
Open Programmable Infrastructure (OPI)....... 109
Uptane ................................................................. 124
Automotive Grade Linux ................................... 110
GraphQL .............................................................. 124
AGL Unified Code Base......................................110
R Consortium....................................................... 125
Software Defined Vehicle..................................111

Trust over IP Foundation .................................. 112

UNIFIED PATENTS OPEN SOURCE ZONE 126
Confidential Computing Consortium............... 113

ELISA..................................................................... 113 INNOVATING WITH ARTIFICIAL

INTELLIGENCE, MACHINE LEARNING,
Yocto Project........................................................ 114 DATA, BLOCKCHAIN, AND
FINANCIAL SERVICES 128
seL4...................................................................... 114
Creating communities with the
Zephyr.................................................................. 115 LF AI & Data Foundation.................................... 129

Open Mainframe Project................................... 116 LF AI & Data by the numbers............................130

Civil Infrastructure Platform.............................. 117 Delta Lake............................................................ 130

Dronecode........................................................... 117 OpenHPC............................................................. 132

Open Voice Network........................................... 118 Hyperledger Foundation.................................... 132

openIDL ............................................................... 133

INNOVATION IN OPEN STANDARDS 119 FINOS.................................................................... 134

Standards and specification development ..... 120 Maintainer highlights.........................................136

LF Energy Carbon Data Specification

Consortium ......................................................... 121
FINANCIAL TRANSPARENCY 137
LF Energy Super Advanced Meter .................... 121 Revenue...............................................................138

Open19................................................................. 122 Expenditures.......................................................138

Quantum Intermediate Representation.......... 122 Profile of the Linux Foundation........................139

Alliance for Open Media .................................... 123 Linux Foundation around the world................139
Security, innovation, and impact:
A message from our Executive Director
The year 2022 was successful for numerous industries. Further,
both open source and the Linux open source users downloaded
Foundation, despite economic 12.6 billion containers, and we saw
headwinds. Our success during a strong bounce back for in-person
a year of many challenges is activities. We gathered over
a tribute to you, our member 92,000 people from 176 countries
supporters. You stuck with us and and over 12,000 organizations at
even increased your commitments. 230 official events, setting a new
Thank you. I also want to credit the attendance record. Lastly, we
hundreds of thousands of project convened over 29,000 community
contributors who run our projects meetings.
and the hard work and diligence
of the Linux Foundation’s talented During 2022, over 2.7 million

employees. Kudos all around. people received training and

certifications from the Linux of our total revenues. In 2022, we Here’s a simple thought exercise.
2022 in numbers Foundation, with over 10,000 set a new membership record, with There are currently 605,000
people signing up for our free over 3,000 organizations proudly technical contributors working
In 2022, we continued to
open source security training posting their logos on our site. on our projects. Based on the
demonstrate strong growth
course on release day. We will global averages of programmer
across all metrics. We added 79
continue to develop the research Growing the global salaries, that amounts to a $26
new projects and shipped 52.6
and insights field, with Linux impact of open source billion contribution in developer
million lines of code weekly across
Foundation Research releasing 15 hours in 2022. This is arguably a
more than 12,000 repositories. The Linux Foundation aims to have
unique reports in 2022. Financially, low estimate. The salary budgets of
The Linux Foundation is now an impact on the world around us.
we are more stable than ever the R&D arms of major technology
the leading player in the open Each year, we ask ourselves: Are
before—revenues continue to companies, which produce far less
standards space, with over 200 we moving the needle? In 2022,
increase, yet no single member code, are in the tens of billions
open standards efforts across the answer was a resounding yes.
company represents more than 1% of dollars a year. It is not an

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 5
 exaggeration to say that ⊲ RISC-V is now the world’s fast- ⊲ LF Energy and its SOGNO Project
contributors to Linux Foundation est-growing semiconductor members in Germany, Greece,
projects, and open source in chip instruction set architec- Ireland, Italy, and Romania are
general, comprise the largest ture (ISA). It was a small project improving power delivery effi-
distributed engineering workforce when it first came to the Linux ciency. Considering the skyrock-
“Ensuring that a globally by orders of magnitude. Foundation in 2018. Today, eting energy prices in Europe,
RISC-V is on track to be the top SOGNO demonstrates the critical
project like PyTorch We can do anything we put our ISA for 80 billion computer importance of open source for
lives in a neutral minds to by working together and cores by 2025. We are seeing tackling transnational challenges
collaborating under the auspices an explosion of RISC-V designs that affect citizens’ lives.
home where all can of a neutral foundation. The code across many applications,
⊲ We are partnering to monitor
we develop in our projects touches including IoT, aerospace,
benefit equally is a livestock movements through
billions of lives and makes the automotive, mobile devices,
the Open Collar Initiative, an
big deal.” planet safer, cleaner, more just, and datacenter hardware.
open hardware project built
and more prosperous.
⊲ When the U.S. Cyber Safety with code housed in the OpenJS
⊲ In October, PyTorch joined the Review Board (the equivalent of Foundation and using IoT code
Linux Foundation. PyTorch is the U.S. Transportation Safety from the Zephyr Project. The
one of the fastest-growing open Board) released its official review Peace Parks Project uses open
source projects in the world of the Log4J event, nine of the 19 source software to fight poach-
today, and more than half of recommendations came directly ers in South Africa.
the world’s artificial intelligence from OpenSSF’s Open Source
⊲ The OS Climate project is pio-
and machine learning applica- Software Security Mobilization
neering efforts to create soft-
tions depend on its framework. Plan.
ware standards and mechanisms
PyTorch is the foundation of
⊲ Over 60% of the world’s for efficient inventories and
models for predicting diseases,
top-grossing films in 2022 common definitions of carbon
directing autonomous vehicles,
used open source software emissions and offsets, laying the
and creating new medicines.
stewarded by the Academy foundation for better carbon
Ensuring that a project like
Software Foundation, which tracking and trading platforms.
PyTorch lives in a neutral home
allows the creative industries
where all can benefit equally is a
to share the costs of creating
big deal.
foundational tools for special
and visual effects.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 6
These impacts add to the growing industry writ large. Mentorship minorities, women, and nonbinary
influence of open source code is one of the most effective tools people to join and contribute to
and ecosystems housed in the for accelerating diversity. The free and open source software
Linux Foundation. Although Linux LFX Mentorship program works projects. Today, all our large
“We accomplished all
is now the dominant operating with more than 240 open source projects have ongoing diversity
system on the planet, the Linux developers, including 30 new initiatives. A notable example is this while delivering
Foundation is much more than kernel developers. In 2022, 20% the Inclusive Naming Initiative,
Linux. From supercomputers to of mentorship applicants were which provides guidance on
on our promise of
tiny IoT devices, Android phones to women, and 70% were from lower inclusive language best practices prioritizing diversity
automobiles, and space satellites middle- or working-class economic and specific word choices. The
to more than 1 million drones, the backgrounds. During the past year, Software Developer Diversity and and inclusion. At the
world increasingly runs on open we provided over $1 million in Inclusion (SDDI) Project and the
Linux Foundation,
source. Open source adoption will travel funding to 289 people from Diversity Empowerment Summit
only accelerate and spread. underrepresented communities, are popular and growing. We are women hold 32% of
246 maintainers and students, 104 also looking to instantiate diversity
Exceeding industry diversity registration scholarships, through code. The Five-Fifths Voter executive roles. That’s
standards in diversity and 65 needs-based registration Project, part of the Call for Code
roughly triple the
and inclusion scholarships to attend career- for Racial Justice, is an application

We accomplished all this while changing events. that aims to combat voter average at technology
delivering on our promise of suppression.
Beyond the numbers, we companies.”
prioritizing diversity and inclusion.
continued advancing programs Facing the challenges
At the Linux Foundation, women
and technologies to foster even ahead: Cybersecurity and
hold 32% of executive roles.
greater levels of diversity, equity,
That’s roughly triple the average techno-nationalism
and inclusion (DEI). Our events
at technology companies. On In 2022, we witnessed the
team rolled out comprehensive DEI
key project boards, women emergence of cybersecurity and
policies for all Linux Foundation
comprise 28% of members, which techno-nationalism as the key
events, including free childcare,
is double the percentage found challenges to the ongoing growth
nursing rooms, and all-gender
on corporate boards in tech. and adoption of open source. In
restrooms. Many of our projects
Moreover, more than half of our cybersecurity, the imperative of
participated in the Grace Hopper
employees are female, which is securing the open source supply
Celebration to encourage
roughly 20% more than the tech chain and providing assurances

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 7
 For 2023, we will continue to
focus on impact, diversity, and
moving the needle on solving big,
complex problems, such as climate
change, software security, and

BACKGROUND IMAGE THISISENGINEERING: PEXELS

food security, to push the envelope
of technology. Together, we are
smarter, faster, and better. I look
forward to seeing all of you in the
coming year as we continue on
this open source journey together.
Thank you for your support and
commitment.

that open source code is safe has With greater restrictions on

become a matter of international collaboration and trade, the
concern. Increasingly, cyberattacks, world risks losing the benefits Jim Zemlin
such as ransomware and malware, of open source and open Executive Director,
are impacting the physical collaboration. As one of my The Linux Foundation
world. Two examples of this are heroes, former U.S. Secretary of
hospitals rerouting ambulances State Madeleine Albright, said,
and shipping companies being we must compartmentalize our
unable to route trucks or planes. disputes and agree on common
Therefore, OpenSSF and its areas of interest. Open source is
initiatives in software bill of non-zero-sum in the best way. If
materials, code signing, secure it works, everyone benefits. Our
coding, and broad vulnerability job at the Linux Foundation is to
scanning will become even continue to advocate for more
more critical. open collaboration to drive global
dividends in technology innovation.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 8
Enabling innovation and security at the Linux Foundation
Nithya Ruff, Board Chair but also insights and ideas and The theme of this report is
even plants seeds for new projects innovation and security, and
Welcome to the 2022 Linux and technologies. 2022 was a breakout year for
Foundation Annual Report. I lead the Linux Foundation on both
the Open Source Program Office I am incredibly impressed by the fronts. PyTorch joining the Linux
(OSPO) at Amazon, and this report trajectory of the Linux Foundation Foundation and the rapid adoption
marks my fifth as Board Chair of and the progress we have made of RISC-V join the ongoing success
the Linux Foundation. on so many fronts in the past year. stories of the CNCF and cloud
I daresay we enter a golden age native and builds on the progress
In late September, I had the of open source innovation, with of the Linux kernel itself. The
distinct pleasure of attending the the Linux Foundation guiding new innovation communities hosted
Open Source Symposium hosted entrants and paving the way for by the Linux Foundation made
by the University of California collaboration on new fronts. You, significant progress against shared
at Santa Cruz (UCSC). UCSC is a the members, made this progress global challenges in finance,
leader in open source, and this through funding and by dedicating transportation, energy, and food
symposium was a fabulous event engineers and code to Linux security. We are witnessing a
where I reconnected with peers Foundation initiatives. I also want
favorite things about open source grand expansion of open source
and learned new things about my to salute the Linux Foundation
is the community friendships at all levels, particularly in code
chosen field. It both was amazing team for raising the bar in 2022
and the personal bonds that we and infrastructure. We also
and felt normal. with a host of new programs and
build. Open source is much more fine-tune and develop methods
than a methodology and set of initiatives—LF Research, LFX, more and practices for peer-based
After two years of distance and
practices; seeing those people blogs, more podcasts, website innovation and collaborative
viewing the world through the
you care about makes this crystal improvements, improved tooling problem-solving.
lens of video conferencing, I have
clear. Meeting people in person and project infrastructure, and
tremendously enjoyed getting
also fuels innovation. Face-to-face more. With this grand expansion comes
back out there and meeting so
encounters and hallway chats greater responsibility. For open
many of you in person. One of my
invariably yield not just greetings source to continue to prosper

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 9
 and for the world to embrace it, On the consumption side, we
we must make open source more must make it easier for consumers
secure. This is self-evident and is a of open source to know exactly
“It takes resources, generational technology challenge what they are getting—with
—a true moonshot. The difference SBOMs, code signing, security
people, and is that moonshot can only stick the scorecards, and more. The
commitment to landing if everyone works together, OpenSSF has stepped up to this
because the problem is far too task with its many contributors and
achieve these big goals. sprawling and complex otherwise. contributing organizations. I am
confident we are on a path that
Whenever I go out and Unlike landing on the moon, will vastly improve open source
open source security is a moving
meet with you, I return security within the next few years.
target. Software and technology
more encouraged. are constantly evolving, and It takes resources, people, and
billions of lines of fresh code ship commitment to achieve these
The opportunity is daily. We must create a culture of big goals. Whenever I go out and

immense, and your security, tooling, and programs meet with you, I return more
to help better secure all open encouraged. The opportunity is
continued support source software at every project immense, and your continued
lifecycle stage. It is essential support makes it possible. Thank
makes it possible.” for massive efforts like Linux you, and I can’t wait to see you all
and Kubernetes down to small in 2023.
JavaScript dependencies that may
have a single maintainer but can Nithya Ruff

still “break the Internet.” Chair of the Board of Directors,

The Linux Foundation

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 10
 Linux Foundation Board of Directors

Suzanne Ambiel Tim Bird Erica Brescia Eileen Evans Melissa E. Evers Frank Fanzilli Peixin Hou
VMware Sony—Gold Director At-Large Director At-Large Director Intel At-Large Director / Treasurer Huawei

Eric Johnson Ken Komoyama Xin Liu David Marr Chris Mason Ben Maurer
GitLab, Inc.—Silver Director Fujitsu Tencent Qualcomm Meta Meta

Hisao Munakata Jessica Murillo Yuichi Nakamura Shojiro Nakao Sarah Novotny Daniel Park Phil Rob
Renesas—Gold Director IBM Hitachi Panasonic—Gold Director Microsoft Samsung Ericsson

Nithya Ruff Keiichi Seki Chris Wright Jim Wright Jim Zemlin
Chair NEC Red Hat Oracle Executive Director

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 11
Thank you to our members
After two long years of a global pandemic, Thanks to your spirit of collaborative innovation,
2022 ushered in a new era of promise for open we welcomed new projects across many fields
source. Thanks to the generous support of including cutting-edge areas like Digital Wallets
LF members like you—and the support of a and AI. We brought government and enterprise
diverse and global contributor and maintainer together to improve the state of open
community—we have advanced the adoption source software security. We expanded into
of powerful new open source solutions and Europe to foster region-specific open source
reignited the communities behind them. Thanks transformation. With your continued support,
to your dedication to open source, we are again we will drive open source transformation in
coming together at events. With each event, we regions worldwide.
celebrate our project developers, contributors,
reviewers, and maintainers in person, whose As we head into a year marked by global

cumulative efforts now service much of the conflict, rising inflation, and economic

global software stack. turbulence, your unwavering support for

collaborative innovation will enable us to solve
In January, you called for more sustainability, new challenges, build innovative solutions,
inclusion, and global perspectives. We listened. and broaden the adoption of open source
technologies.
Since then, we have expanded our climate
and environmental initiatives. We published Thank you for your commitment to open source
actionable insights and datasets through LF at the Linux Foundation. We wish you safety,
Research. We provided hundreds of scholarships prosperity, software security, and, above all,
to underserved communities, welcoming diverse success in 2023.
and talented people from around the world
to help build a better, more equitable open
source future. All of this was made possible
with your support.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 12
Linux Foundation members
Platinum members Gold members

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 13
Silver members
# AVSystem sp. j. Aiven Inc Anchnet Ascensio System SIA B
0Chain Aarna Networks Akamai Technologies, Inc. Anchore, Inc AsiaInfo Technologies B1 Systems GmbH
Absa Bank Limited Akatsuki inc. Andes Digital (China) Co., Ltd.
1Crew BCW Group
Accuknox Akenes SA (Exoscale) Anglepoint Group Inc Aspecto Inc
1NCE GmbH BMC Software, Inc
Acend GmbH Akuity, Inc. Anjuna Security, Inc. Aspen Mesh
1Password BMW
Acnodal, Inc. Alauda, Inc Anodot Inc. Asserts
23 Technologies GmbH BNP Paribas
Acorn Labs, Inc Alerant Zrt. Anonyome Labs, Inc. Astra Linux
3-Shake Inc BONbLOC Inc
Acornsoft Algorand Ant Group Co., Ltd. Aternos GmbH
3K Technologies BS Company Srl
Acumatica Inc. Allianz Investment Aokumo Inc. Atlassian Inc
6WIND S.A. Baidu USA LLC
Ad Hoc LLC Management Apiiro AtomicJar Inc
99Cloud Inc. Balena, Inc.
Adaptive Financial Alluxio, Inc. Apollo GraphQL Atos France
Bancolombia
Consulting Limited Allwinner Technology, Co. Audiokinetic Inc.
A Appaegis, Inc. Bank of America
Adfolks LLC Ltd. Augtera Networks
A10 Networks Appddiction Studio Corporation
Adobe Inc. Altair AuriStor Inc.
ABB Ltd Apple Inc. Bank of Montreal
Adva Optical Networking Alter Way Cloud Authzed
ACC ICT Appstellar Bank of New York Mellon
SE Consulting
Apptio Autodesk Banma Information
ACKSTORM
Advanced Driver Althea
Appvia Ltd. Automat-IT Technology
AIA Information Technology Altinity
Aqua Security Software, Automatic Data Baumer Management
AIFRICA Corporation Altoros Processing, Inc. (ADP) Services AG
Inc.
AIM (agile-im.de) Advanced Micro Devices Amadeus IT Group, S.A. Automotive Intelligence BayLibre Inc.
(AMD) ArangoDB
ALPS ALPINE Amantya Technologies, and Control of China BeOpenIt
Adventium Labs Arcadyan
ANTMICRO LTD Inc Co., Ltd.
ArcherOS Software Co., BedRock Systems Inc.
APE FACTORY Aerospike Amazon Web Services, Inc. Avanade Inc.
Ltd. Beechwoods Software,
APIIDA AG Affinidi Pte Ltd Ambassador Labs (f/k/a Avanza Innovations IT
Archera Inc.
AQSACOM Afi Technologies Datawire) Solutions LLC
Arcontech Group PLC Beijing Baolande Software
ARIMA Agenda d.o.o. Amberflo.io Avast Software, Inc. Corporation
Arduino
ARMO (Cyber Armor) Agile Lab Ambient IT Avesha Beijing Big Data Co.,Ltd.
Argonaut
ASRock Rack Agree Technology Co., Ltd. Amdocs Limited Avisi Cloud Beijing Datenlord
Arista Networks, Inc.
Incorporation Ahana Cloud, Inc. American Express Banking Aviz Networks Technology Co., Ltd.
Corp. Arkamys
ASUS Cloud Corporation Airbnb Axcelinno Beijing Dosec Technology
American Tower Arm Limited Co., Ltd
ATB Ventures Airbyte Axiata Digital Labs
Corporation Armory Inc. Beijing Huijun Technology
ATIX AG Airlock by Ergon Axis Communications
Informatik AG Amido Arnica Co. Ltd. (JD Cloud)
AVEVA Group
Airwayz Ampere Computing Arrikto, Inc.
AVL Software and
Functions GmbH Aisin Corporation Anaconda, Inc Arvancloud

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 14
Beijing Ji Ke Tian Cheng Boost Security Capital One Services LLC Chronosphere, Inc. Cloudwiry CoreHive Computing LLC
Technology Co., Ltd Booz Allen Hamilton, Inc. CarbonLaces Ciena Canada, ULC Cloudyuga Technologies CoreStack
(ScaleFlash) Private Limited
Bosch Carbonated Cinemo GmbH Coredge.io
Beijing Proinsight Clyso GmbH
Boston Consulting Group CasperLabs LLC Cirba d/b/a Densify Corsha
Technology Co., Ltd.
BoxBoat Technologies Cast AI Group, Inc. Circle Internet Services, CoSoSys S.R.L. Cortex
Beijing Security
Brickdoc (Ningbo) Cloud Catalogic Software Inc Cockroach Labs Cosaic, Inc.
Consensus Technology
Co., Ltd Computing Technology Catalyst Cloud Circulor Ltd. Codasip s.r.o. Cosmonic
co., ltd. Cirrus Logic Code Zero Technologies
Beijing Shengxin Network Catena cyber Couchbase, Inc.
Technology Co., Ltd. Broadcom Corporation Citi Inc
Caylent Inc Cox Communications, Inc.
(QINGTENG) Brobridge CodeWave
Centilytics Civo Ltd. Crafter CMS
Beijing Shuyue Mingjin Bunnyshell Codefresh, Inc.
Cerbos Clastix SRL Crayon
Technology Co., Ltd. Buoyant, Inc. Cleartrace Codethink
Certizen Limited Creationline, Inc.
Beijing Sup-info Business-intelligence Clockwork.io Cog Systems
Information Technology Chainguard Cribl Inc
of Oriental Nations Cognizant Technology
Co. Ltd Chainyard Cloud Kinetics CrowdStrike
Corporation Ltd Solutions
Beijing Teamsun Chaitin Tech CloudBees, Inc. Crunchy Data Solutions,
Bytedance Ltd Coinbase Inc.
Technology Co., Ltd CloudBolt Software Inc.
Changzhou Citos Software
Colder Products Co
Beijing VNET Broad Band
C Co., Ltd. CloudControl, Inc.
Collabora Ltd.
Cryptape Technology Co.,
Data Center Co., Ltd. Ltd.
CINQ ICT Charter Communications CloudCover Pte. Ltd.
Beijing Xiaomi Mobile Comcast Cable Cuemby Inc.
CISEL Informatique SA Checkmarx CloudFerro Sp. z o.o.
Software Co., Ltd Communications, LLC
Chef Software Inc. CloudFix Cybeats
Bell Canada CME Group Inc. Commvault Systems, Inc.
Chengdu Yuan Lai Yun Zhi CloudIQ Technologies CyberArk Software Ltd
BellSoft CNO Component Soft Kft.
Technologies Inc. CloudLinux Cybertrust Japan Co., Ltd.
BetterCloud CORE 24/7 LLP Connect 5G, Inc.
China Electronic System CloudMatos LLC Cybozu, Inc.
Biqmind Pte Ltd CRYPTOSENSE Conoa AB
Cloud Data and Cycode, Inc.
CSEngineering CloudNatix, Inc.
Bitrock Intelligence Technology ConsenSys AG
CTO.ai Co., LTD. (CECLOUD) CloudOps Inc.
Constantia
Blameless Inc
CloudZero
D
CVS Health China Mobile ContainIQ
Block, Inc. D2iQ, Inc. (f/k/a
Communication Cloudbase Solutions S.R.L
Blockchain Technology CYSEC SA Container Solutions BV Mesosphere)
Company Ltd
Partners, Inc. Cable Television Cloudera, Inc.
Continental Automotive DAEKYO CNS
China Systems Holdings
Bloomberg Finance L.P. Laboratories Inc. Cloudical Systems
Limited DB Systel GmbH
Blue Sentry Cachengo Cloudshape Inc Contino
China DENSO CORPORATION
BlueArch Group Inc. Calyptia Telecommunications Cloudside Technologies Contrast Security DENX Software
Boeing Camptocamp Corporation Cloudsmith Ltd Control Plane Corporation Engineering GmbH
Boer Technology (BTech) Camunda Services GmbH China Unicom Cloudsoft Corporation Ltd ControlPlane.io (DENX)

BondEvalue Pte. Ltd. CanaryBit China-ASEAN Information Cloudstratex Convox Opco Inc. DLT Global Inc.
Canonical Group Limited Harbor Co., Ltd Cloudthread DNEG
Bonifii CoolIT Systems Inc.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 15
Dalian Hi-Think Computer Deutsche Bank AG EPAM Systems, Inc Esperanto Technologies Ford Motor Company Gitpod GmbH
Technology, Corp. Deutsche Telekom AG EXEM Inc. Fortanix Globant LLC
DaoCloud Network DevOps Institute EasyStack Inc. Estateably Inc. Fortress Information Globo
Technology Co., Ltd. Ethernity CLOUD Security
DevSamurai Edge Delta Go Firefly, Inc
Daon Inc Exein FossID
DevsOperative EdgeRay Technologies GoDaddy Operating
Data Essential Co., Ltd Exivity Foundries.io LTD Company, LLC
Dhiway Networks Private
Data Storage Research, Limited Edgecore Network Exotanium Inc. Fournine Cloud Solutions Goldman Sachs & Co. LLC
LLC d/b/a DSR Corporation
DiDi USA Expedia Group FreedomFi Golioth
Corporation
Diagrid Edgeless Systems Expert Thinking Fullstaq GotoAdmins
DataCore Software
Diamanti, Inc. Educational Testing Exstratus FuriosaAI, Inc. Grafbase
DataStax, Inc. Service (ETS)
Dianomic Extreme Networks, Inc. Futurewei Technologies, GramLabs, Inc. (d/b/a
Databricks Inc. Eficode Oy
Didim365 Inc. StormForge)
Datachain, Inc. Elasticsearch, Inc.
DigiCert, Inc. F Granulate Cloud Solutions
Datadog, Inc
Digital Asset Holdings, LLC
Elastisys AB
F5, Inc. G Ltd
Datadrivers Elastx AB Grape Up Sp. z.o.o.
Far-Galaxy Networks G-Research
Digital Impact LLC
Datree.io Electronics and Grapheene inc
FLANT EUROPE O√ú GRAVITI TECHNOLOGIES
DigitalOcean
Datto, Inc. Telecommunications INC Gravitational, Inc
Dimagi Inc Research Institute FOSSA
Daugherty Business GSBN “DBA” Teleport
Solutions Direktiv Elektrobit Automotive Fabrick S.p.A
Gaia Information Green Hills Software LLC
Daynix Computing LTD Distributed Ledger GmbH Fairwinds Ops, Inc
Technology Gremlin, Inc.
Technologies (DLT) Pte Elementl Fauna, Inc.
Debricked Garden Technologies Inc. Guangdong OPPO Mobile
Ltd.
DeepFactor Elotl, Inc Federal Express Telecommunications
Gatsby Inc
Dito
Deepfence, Inc EngineerBetter Ltd Federal National Corp., Ltd.
Gemini Open Cloud
Docker, Inc. Mortgage Association
Deepshore GmbH Entando Inc. Computing Inc. Guangxi Tidu Technology
DoiT International (Fannie Mae) Co., Ltd. (TIDU)
Dellfer, Inc. Enterprise DB Corporation GenX
Doppler Federated Wireless Guangzhou Xiaopeng
Deloitte Consulting LLP Entigo O√ú GenXcomm Inc
Dorado Software Fidelity Technology Motors Technology Co
Delta Electronics Enveil General Electric Company
Group, LLC Ltd
DornerWorks, Ltd.
Worldwide Envisor Genesis Global
Filecoin Foundation Guida
DreamBig Semiconductor Technology Limited
Dembach Goo Informatik Eolinker
Inc. Finout
GmbH & Co. KG Genvid Technologies Inc
DrimAES
Equideum Health
FireHydrant H
DeployHub, Inc. Equinix, Inc. German Edge Cloud
Dynatrace LLC Firecell HAProxy Technologies
Depository Trust and GmbH
Era Software, Inc. HCL Technologies Ltd.
Clearing Corporation Flanksource
Ghost Locomotion Inc.
Ernst & Young LLP
(DTCC) E Flexera
Giant Swarm GmbH
HENSOLDT Cyber GmbH
Escala24x7 HERE Global B.V.
Desay SV Automotive EGAR Global NoCode FlexiDAO
GienTech
Escape HP Inc.
Design Barn Inc EMQ Technologies Co., Flowchain
GitHub, Inc.
Ltd. Espeo Software HSA Foundation
Desotech srl FogHorn Systems
GitLab Inc.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 16
HSBC Highway9 Networks Identity Technologies Inc IoT.bzh Keysight Technologies Inc. Larsen & Toubro Infotech
HackerOne Honda Motor Co., Ltd. Igalia, S.L. Isovalent Inc. Kioxia Corporation Ltd

Hadean Supercomputing Honor Device Co. Ltd Imagination Technologies Itera Technologies a.s. Kiratech SpA LatticeX Foundation
Ltd Horizon Robotics Group Ltd. Itopia KitBash3D Lawrence Livermore
Hammerspace Imperas Software Ltd National Laboratory
Hound Technology Inc. Ituum OU (DBA Dysnix) Kloia Software and
(LLNL)
Hangzhou FIT2CLOUD dba Honeycomb Indeed, Inc. Consulting Ltd
Information Technology LeanIX GmbH
Hub Security Index Analytics J Klotho
Co., Ltd Lear Corporation
Humanitec Indicio JFrog, Inc KodeKloud
Hangzhou Harmony Cloud Legit Security
Humio Indra JMA Wireless Komodor Inc.
Technology Co., Ltd. Lenovo (United States) Inc.
Hygraph IndyKite Inc. JPMorgan Chase Kong Inc.
Hangzhou Langhe Li Auto Inc.
Technology Co. Ltd. Hyland Software, Inc. Infineon Technologies AG JVC KENWOOD Konsulko Group
Lightbend Inc
(Netease) Hyundai Mobis Co., Ltd. InfinyOn Inc Corporation Koor Technologies Inc
Lightlytics
Hangzhou MoreSec Hyundai Motor Company InfluxData Inc Jeli.io Kry10 Limited
Technology Co., Ltd. Lightrun Ltd
InfoCert Jetstack Ltd Krypc Corporation
Lightstep, Inc.
Hangzhou Nuowei I Infoblox Inc. Joby Aero KubeOps
Information Technology Linaro Limited
IDnow GmbH Information Data Systems Joisto Group Oy Kubermatic GmbH
Co. Ltd. Lineo Solutions, Inc.
IFS World Operations AB Infosys Limited Jump Operations, LLC Kubernetes Innovation
Hangzhou WOQU
Labs LLC (Kubeshop) LinkedIn Corporation
Technology Co., Ltd. IGNW Infracloud Technologies Juniper Networks, Inc.
INC Kubiya Inc Linklogis Inc
Hanover Insurance Group IHS Markit

Harness Inc. IITS Consulting Infracost K Kublr Linode LLC.

Inigo KBSYS Inc Kumina B.V. Linutronix GmbH

Harpoon Corp ILKI FRANCE
Innablr Pty Ltd KDDI Corporation KylinSoft Coporation Liquid Avatar Operations
Hartford Financial IN-COM Data Systems
(Beijing) Inc.
Services Group Inc. ING Group Innogrid KINX
Kythera AI Liquid Reply
HashiCorp Inc IO Builders Blockchain Inspur Group KNS Group LLC
(trademark YADRO) Lockheed Martin
Hasura, Inc. Technologies & Instaclustr
Ventures
Instana, Inc.
KPIT Technologies Limited L Loft Labs, Inc. (DevSpace
Hedera Hashgraph LLC Technologies)
IOG Singapore Pte. Ltd KPMG L4B Software GmbH
Hedgehog IntellectEU
Logiq.ai Inc.
IOTech Systems Limited KSOC LG Electronics Inc.
Helios Intelligent Systems
Logshero Ltd.
IPChain Association Services KUKA Deutschland GmbH LINBIT USA LLC
Helium Systems, Inc. Lumedic Acquisition Corp
IPwe InterCloud Kaleido LMAX Exchange Ltd
Hermes Fund Managers Luxoft Global Operations
Limited (Federated ITAU BBA USA SECURITIES, Interdynamix Kaloom Inc. LPI.org
GmbH
Hermes) INC. LSD OPEN
Intesa Sanpaolo Kasten, Inc.
Heroic Labs ITRenew Lablup Inc.
Intuit, Inc. KatRisk LLC M
Hewlett Packard IVIS Automotive Solutions Lacework
Intuitive Technology Kentik MATRIXX Software
Enterprise Iauro Systems Partners, Inc. Laird Connectivity, Inc
Kernkonzept GmbH
Development LP MBDA Italia S.p.A
IdRamp InwinSTACK Lantronix Inc.
Keyless technologies LTD MDxBlocks Inc.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 17
MIA s.r.l. Mezmo NCC Group New H3C Technologies Open Source Alliance PantaRei Design
MSys Technologies Micro Focus International NCSOFT Corporation Co., Ltd Open Source Automation Paramount Software
MUFG Union Bank plc NEOS New Relic, Inc. Development Lab Solutions Inc.
Micron Technology NexCloud (OSADL) eG Parasoft
MacStadium NGINX International
Micware Co. Ltd. Limited NextGen Tek Consulting Open Source Consulting Particule
MaibornWolff GmbH
Inc.
Mail.Ru Cloud Solutions Mido Holdings Co., Ltd NHN Corporation Niantic PayPal Holdings, Inc.
(Midokura) Open Source Security, Inc.
MakinaRocks NIO Nikon Corporation Pegasystems Inc.
Milligan Partners OpenNebula
Man Technology NIPA Nippon Seiki Co. Ltd. Peloton Interactive
Mindtree Limited OpenSynergy GmbH
Marelli Corporation NSONE, Inc. Nirmata, Inc. Penten
Minio, Inc OpsLevel
Marketnode NTT Corporation Nissan Motor Co. Ltd. Percepio AB
Mirantis, Inc. OpsMx
Marvell Semiconductors NTT DATA MSE Nokia Corporation Percona
Miraxia Edge Technology CORPORATION OpsVerse
Ltd Nomura Holding America Permit.io
Corporation NVIDIA Corporation Opsera
MasterCard Incorporated Nomura Research Phoenix Software
Mission:data Coalition NXP Semiconductors Institute, Ltd. Optic International
Matrix I.T CloudZone LTD
Mithril Security Netherlands B.V. Noname Security Optum/UnitedHealth Phylum
Mattermost, Inc.
Mitsubishi Electric Nanjing Pengyun Network Group
Mavenir Systems, Inc. Nordic Semiconductor Ping An Technology
Corporation Technology Co., Ltd. ASA Orange SA (Shenzhen) Co., Ltd
Maxon Computer GmbH
Mitsubishi Motors Nanjing eCloud Numbers Orca Security, Inc. PingCAP
MayaData Inc. (f/k/a Corporation Technology Co., Ltd.
Nutanix, Inc. Ori Industries Pioneer Corporation
CloudByte, Inc)
Mobilise Cloud Services NatWest Origoss Solutions Ltd
Mayfield Fund Nuvitek Pionix GmbH
Model9 National Instruments Orkes Inc
Mazda Motor Corporation Pipekit Inc
Mondoo Corporation
McKinsey & Company, Inc
O Ortec Finance PlanetScale, Inc.
Monetago Inc Navitas Business
OBSS Osaka NDS Co., Ltd. Plat’Home Co., Ltd
MediConCen Limited Consulting Inc.
Monokee OGIS-RI Co., Ltd. Oteemo Inc.
MediaTek USA Inc. NearForm Ltd Platform9 Systems, Inc.
Monostream AG OKESTRO Oticon A/S
MegaEase, Inc. Nebulon Point72, L.P.
MontaVista Software, LLC OSNEXUS Ovoo Spółka z o. o.
MegazoneCloud Neo4j, Inc. Polar Signals Inc
Morgan Stanley OVH SAS Oxeye
Meinberg Funkuhren NetApp, Inc Polar Squad
Morpheus Data Ozone Cloud Inc.
GmbH & Co KG Occentus Network Polyverse Corporation
NetFoundry
Moscow Exchange (MICEX-
Memfault Inc Octo Consulting Group Portainer.io
RTS) Netdata
Mercedes-Benz Tech OctopusDeploy P Posedio - Professional
MotoJeannie Netflix, Inc.
Innovation GmbH OhmConnect Inc PANTHEON.tech s.r.o Cloud Consulting
Moxa Inc. Netgate
Merck & Co., Inc. Okteto PBG Consulting Poste Italiane SPA
MyFitnessPal LLC Nethopper
MetaBlox Foundation OnGres PRODYNA Postman
Mycelial Netris, INC.
Metrics Design Ondat Paladin Cloud Precisely Holdings, LLC
Neuroglia
Automation Inc. Palm NFT Studio Precision Innovations Inc
Opaque Systems Inc.
MetroStar Systems
N Nevexis
Open Raven Palo Alto Networks Prefect
NAMUTECH Co., Ltd. New Black

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 18
Pricewaterhouse Coopers RStudio PBC Ripple, Inc. Salesforce.com, Inc. ServeTheWorld AS SingleStore, Inc.
LLP RTE (Reseau de Transport Rivos Inc Salsify Serverless Singularity Data
Prisma Data, Inc dElectricite) Roadie Saltware Services4-IT Sirius XM Radio Inc.
Prodigy Education RX-M, LLC Robin Systems, Inc Sartura Shanghai Mandao Sivantos GmbH
Profian Rackner Robusta.dev Sateliot Technology Co., LTD Skyloud
Profisea Rackspace US, Inc. Rocket Software, Inc. Sauce Labs Inc Shanghai Pudong Slim.AI
Progressive Insurance Radisys Corporation Development Bank
RodeoFX Savoir-faire Linux Smallstep
Project N Rafay Systems, Inc. Shanghai Sectrend
Rookout Ltd. Scaleway SmartBear Software, Inc.
Information Technology
Proofcraft Pty Ltd Raft Royal Dutch Shell Scality Inc. Smartiful, Inc.
Co.,Ltd
ProsperOps Raftt Ruby Protocol Scantist Pte. Ltd. Snapper Future Tech Pvt
Shanghai Vonechain
Pulumi Raintank, Inc. – Grafana Scarf Systems, Inc Information Technology Ltd
Labs
Puppet, Inc. S Schaeffler Technologies Co., Ltd Snow Software Inc
Pure Storage Rapid Silicon Shanghai Yunzhou Snyk Limited
S&P Global Inc. Schellman & Company,
Puzzle ITC GmbH RapidAPI LLC Information Technology SoKube
SADA Systems
RapidFort, Inc. Co. Ltd (ZStack)
SAIC Motor Corporation Schneider Electric Société Générale
Shanghai Zhuyun
Q Raytheon Technologies Ltd Schwarz IT GmbH & Co. Socket
Information Technology
QAware GmbH ReadMe SANCLOUD LTD KG SoftBank Corp.
Co., Ltd.
Qamcom Group AB Reblaze SAP Science Applications SoftIron Inc
Shenzhen Forms Syntron
Recurve International
Qiming Information SAS Institute Inc. Information Co. Ltd Softax SP.j.
Corporation
Technology Co., Ltd. Red Date (Hong Kong) SHE BASH Shenzhen Goodix Softchoice LP and
Technology Limited Scott Logic Ltd
QingCloud Technologies SHINESOFT Technology Co.,Ltd. Softchoice Corporation
Corp. Red Kubes BV ScoutAPM
SICPA SA Shenzhen Jiangxing Software Mind
Quali Red Reply Scribe Security Intelligence Inc.
SIGHUP, Inc SoftwareONE AG
QualitySoft Corporation Redeploy Seagate Technology LLC Shenzhen Wise2C
SIMBA Chain SolidRun Ltd
Qualys, Inc. Searce Technology Co.,Ltd
Redpanda Data Solo.io
SMBC Americas
Quant Network Second State Shenzhen ZhiLiu
Release Technologies, Inc. Sonatus, Inc.
SOCNOC AI Technology Co., Ltd.
Quobyte Inc. Reliance Jio Infocomm SecureKey Technologies,
SOLIZE Corporation ShiftLeft Sonatype, Inc.
Limited Inc.
SORAMITSU CO., LTD. Shipa Sosivio
R Replicated, Inc. Seekret Software Security
STMicroelectronics Ltd. Shopify Inc. Spacelift, Inc.
R3 LLC ReversingLabs
International N.V. Sparkfabrik srl
Selective Insurance Group Shoreline
RADTONICS Revolgy
SUSE LLC Spectral
Selector Software, Inc. SiFive
RANDA Solutions Rezilion
SVA System Vertrieb Spectro Cloud, Inc.
Sempre.ai Sibros Technologies
RBC Capital Markets, LLC Ribbon Communications Alexander GmbH
Senofi Sidero Labs SpeedScale
REALTO GROUP INC Operating Company,
SWIFT, INC.
Inc. Sense Reply Siemens AG SphereEx
REGnosys Limited SYSGO GmbH
Ricoh Company, Ltd. Sentara Healthcare, Inc. Silicon Laboratories Inc. Spirent Communications
RNG Technology Saleor Commerce Inc

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 19
Splunk Inc. Suzuki Motor Corporation TenneT TmaxCloud Uffizzi Videndum Media
Spotify AB Swisscom TensorSecurity Tokentrust AG Ultraviolet Consult DOO Solutions Spa

Sprint Corporation Symbridge LLC Technology Ltd TomTom International B.V. UnifabriX Virtasant

Spyderbat Symphony TensorWorks Torch Consulting Group Union.ai Virtual Power Systems

Squarespace, Inc. Communication TenxCloud Toyota Tsusho UnionTech Software Visa Inc.
Services LLC TeraSky Corporation Technology Co., Ltd. Vodafone Group Plc.
StackHawk
Synax GmbH Ternary Traceable Uniserver VoerEir AB
Stacklet
Sync Computing Tetrate.io Traceroute42 Unisys Volkswagen
Stackwatch Inc
Synechron, Inc. Teuto.net Netzdienste Traefik Labs SAS Unity Technologies Aktiengesellschaft
Starburst Data
Syngenio GmbH Trail of Bits UpCloud Ltd
Stark & Wayne LLC
Synopsys, Inc Texas Instruments Translucent Computing Upbound
W
State Farm Mutual
SysEleven Gmbh Incorporated WSO2 Inc.
Automobile Insurance Transposit Corporation Upsolver Data, Inc.
Company Sysdig, Inc. Thales SA Wallarm
Transwarp Technology Utilidata
Steamhaus The 4th Paradigm (Shanghai) Co., Ltd Walmart Inc.
UtilityAPI
T Technology Co., Ltd Wanclouds Inc.
Stellate Travelers
The Constant Company,
StepZen, Inc. TDT AG
LLC / Vultr
Travelping GmbH V Wandelbots
Sterlite Technologies TELUS Corporation Trend Micro Incorporated VA Linux Systems Japan Wargaming.net Limited
The Foundry
Limited TL Consulting Group Trilio Data K.K. WattCarbon
Visionmongers Limited
StorPool Storage AD TLM Partners True B.V. VES LLC Wavelabs
The Guild
Storm Reply GmbH TO THE NEW Truepic, Inc. VEXXHOST, Inc. Wayfair
The Medium
Strata Identity Tafi Turk Telekomünikasyon VNC Automotive Limited We.Trade Innovation DAC
The Qt Company Oy
Stratascale Tangem AG A.S. VSHN AG WeHealth Solutions PBC
The Scale Factory Limited
Strategic Blue Target Corporation Turnium Technology ValueCloud WeScale SAS
Thebes Cloud
Stratox Cloud Native Tata Communications Group Inc Valve Corporation
Management Limited Weaveworks Inc.
StreamNative Limited Tuxera Inc. Vapor IO
Thnk Webera, LLC
Structsure, LLC Teal Communications, Inc. Twitter Inc. Vattenfall Eldistribution
Thought Machine Group Wegmans Food Markets
Styra Inc Tech Mahindra Limited Limited Tyk Technologies Ltd. AB Wellington Management
Successive Technologies Technology Innovation ThoughtWorks, Inc Vaxowave Company, LLP
Sumo Logic, Inc.
Institute Thunder Software
U Veea Inc. Western Digital
Tectonic Labs Ltd. Technology Co. Ltd. UBS AG Vega Cloud Inc Corporation
Super Micro Computer,
Inc. Telaverge Tick42 ULAK HABERLESME A.S. Vela Wevr
Communications UMB AG WhaTap Labs Inc
SuperOrbital, LLC. Tidelift, Inc. Velocity
Telechips, Inc. UNIBERG WhiteSource Ltd.
Superblocks TietoEVRY VeriSilicon, Inc.
Telecom Italia Mobile US Navy Whitestack LLC
Supercritical Tigera, Inc. Vertiv
(TIM) S.p.A.
Suzhou Beyondcent & Timescale USAA Viable Data WhizUs GmbH
Temporal Technologies Inc
Software Co., Ltd. Timesys Corporation UWS Inc. Wind River Systems, Inc.
VicOne Inc.
(BoCloud) Tenable, Inc.
Timspirit Ubiquitous AI Corporation Vicom Infinity, Inc. Windmill Engineering

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 20
Wingtecher Technology Co., Ltd.
Z
Winning Health Technology Group
ZEDEDA, Inc.
Wipro Limited
ZTE Corporation
Wistron Corporation
Zebrium, Inc.
Witekio Holding
Zeeve Inc
Wowjoy Technology
Zelarsoft LLC
Wuhan Lotus Technology Co.,Ltd
ZenHub
Zenlayer Inc
X
Zerto, Inc.
Xcalibyte
Zettabytes, Inc.
Xenit AB
Zilliz
XenonStack Inc.
Zoi
Xevo Inc.
Zoss Team, LLC
Xi’an Tieke Jingwei Information
Technology Co.,Ltd. (CARS) ZutaCore

Xilinx Inc
Xopero Software

Y
YLD! Limited
Yahoo Japan Corporation
Yazaki Corporation
Yellowbrick Data
Yotascale

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 21
In memoriam: Shubhra Kar
This year, we lost our dear friend, the work than the reward. At the same
colleague, and a true champion of the time, he was incredibly ambitious—
open source community. Our CTO, wanting to build a platform that would
Shubhra Kar, passed away suddenly not only transform The Linux Foundation
while he was with his entire LF family at but support open source development
our first in-person, all-hands gathering communities around the world. This was
since before the pandemic. the week his team unveiled significant
new enhancements across the LFX
Those who had the honor to work platform. It was a project he led from
with him will know, he was a special vision to reality, after many—even
leader and a wonderful human being. members of his own team—had told him
Above all, Shubhra was the kind of the path to success was impossible. He
leader who quickly passed the credit was a transformational leader that has
for accomplishments to his team left his legacy here.
over himself. His humble spirit and
everpresent smile was admired by all While he was passionate about his work
around him. He was so proud of the and his team, he loved his family even “Shubhra was a special leader and a wonderful
world class team he had built here, and more. In fact, his children were often
did that in part with engineers who spotted behind him during video calls human being. He always passed the credit for
followed him from one organization to throughout the day. He was a fantastic accomplishments to his team over himself.
another throughout his career. husband and father, and we are so
grateful for his wife, son, and daughter His humble spirit and constant smile were
We also knew Shubhra as a selfless sharing him with us.
admired by all around him. He was so proud
leader—one who was more interested in
of the world-class team he had built. Most
of his engineers had followed him from one
organization to another—a true testament to the
type of manager Shubhra was.”

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 22
 Serving over 986 open source project communities

Project technical
Project type
segment

Cloud, Containers, & Virtualization 23% Open Source & Compliance Open Source Software 73%
Best Practices 3.5%
Networking & Edge 16.5% Open Standard / Specification 19%
System Administration 2.4%
Web & Application Development 12% Open Data 3%
Linux Kernel 2.3%
AI, ML, Data, & Analytics 10.4% Open Hardware 2%
System Engineering 2.2%
Cross-Technology 5.6% Peer Network 1%
Storage 2.2%
Privacy & Security 4.4% Open Governance Network 1%
Open Hardware 1.7%
IoT & Embedded 4.1%
Safety-Critical Systems 1.4%
DevOps, CI/CD, & Site Reliability 3.7%
Visual Effects 0.9%
Blockchain 3.7%

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 23
Innovation with an evolving Linux kernel
In tandem with security, nurturing system, regzbot, led by developer
open source innovation to create Thorsten Leemhuis, is currently in
a better world is at the heart of early testing.
Linux Foundation activities. Last
year, we celebrated the Linux It’s exciting to see that the first

kernel’s 30th birthday. In 2022, Rust modules are now slated for

Linux remains among the top rollout in Linux 6.1, marking the

three global open source projects start of a new journey toward

in terms of development velocity. memory safety.

Each release is the result of the

We’re also excited to see
work of thousands of contributors
developers showing how the
worldwide and from a wide variety
Linux eBPF subsystem runtime is
of organizations. The kernel
turning into a utility tool that goes
community actively maintains
beyond package filtering to adjust
a steady flow of innovative
process scheduling and make
improvements to expand the
accommodating new input devices
footprint of Linux and improve its
easier. New features, such as
capabilities.
io_uring, will make Linux much

Attendees at the 2022 Linux faster by eliminating many

Plumbers event in Dublin system calls back to the kernel.

discussed a future Linux that is Considering that most open

faster, more versatile, and more source projects have a healthy

secure, but also an increased lifespan of a decade or less, the

desire to improve regression speed at which Linux accelerates

testing methodologies to reduce its innovation is all the more

the number of bugs introduced remarkable.

into the code with new commits.

A new kernel regression tracking

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 24
 Fostering growth, quality, and velocity

There are over 52M+ lines of 17K global

850 active open code organizations
source projects are generated every contributed to
week by our project Linux Foundation
being hosted by the
communities, up open source projects
Linux Foundation.
13% year over year. in 2022.

The Linux Foundation 827K developers In 2022, the Linux

open source community
contributed to over
actively Foundation acquired
contribute
3.2 million to Linux Foundation 321 new
project builds projects, resulting in a members.
in 2022. 12% increase in 2022.

Active member LFX Security detected 10,700

contributions applications
264K code
increased 13% for LFX
in FY22, and
vulnerabilities
148K were by new
in 2022, aiding faster Mentorships
fixes by developers. were received in 2022.
contributors.

135K developers Events hosted by

enrolled in training the Linux Foundation
$3.3 million
courses in 2022 had a total of in funds were raised
and earned 26K 188K attendees, this year through
certifications, an increase of 120% LFX Crowdfunding.
an increase of 15%. from the previous year.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 25
Celebrating the innovators

Throughout history, innovation has abounded

during times of crisis or adversity. This past
year was no exception. We continued to serve
and grow our communities as we welcomed
new projects such as PyTorch and launched
Linux Foundation Europe and its OpenWallet
Foundation.

We also saw sparks of innovation aiming

to change the world, from tracking conflict
minerals to providing broadband to poor
and remote communities to creating open
source technology for animal tracking as part
of endangered species conservation efforts.
Here’s a roundup of the innovation from 2022…
and here’s to the project innovators!

IMAGE BY DANIELE FRANCHI: UNSPLASH LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 26

 CELEBRATING THE INNOVATORS

Innovation with a global impact

Saving wildlife: Peace OpenCollar animal
Parks Foundation and tracking and the Zephyr
OpenJS Foundation real-time operating
The Peace Parks Foundation system
is leveraging OpenJS-hosted The OpenCollar Initiative is
technologies like Node-RED, a conservation collaboration
Electron, jQuery, Lint, and Moment for designing, supporting, and
to fight poaching in African deploying open source tracking
national parks. Using a network of collar hardware and software
cameras that monitor endangered for wildlife monitoring projects.
wildlife, they have created a low- OpenCollar integrates LoRa,
cost, scalable system that identifies GSM, Bluetooth LE, and GPS
poachers and notifies local police technologies for a seamless wildlife
in realtime. monitoring solution based on
the Zephyr real-time operating
The monitoring system relies system. By making the hardware
heavily on Node-RED, a low-code and software open source, the
programming language for event- OpenCollar Initiative aims to
driven applications. Node-RED is attract and inspire talented
built on Node.js, making it ideal students, researchers, and tech-
for running at the network's edge

PHOTO BY GERAN DE KLERK: UNSLAPSH

savvy conservationists to develop
on low-cost hardware and in the tracking systems that are more
cloud. OpenJS technologies enable customizable to accommodate the
organizations like the Peace Parks needs of various animals.
Foundation, which have limited
resources, to fight poachers and The OpenCollar Initiative started
protect endangered ecosystems with the design and deployment of
at scale. elephant tracking collars and has

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 27
 CELEBRATING THE INNOVATORS

since expanded. It now provides built on climate-friendly economic

field-tested solutions for tracking practices. They are working to
rhinos, lions, cheetahs, wisents, develop an AI-enhanced physical-
wild dogs, and other animals. economic model that functions like
an operating system and enables
⊲ https://www.zephyrproject.org/
powerful applications for climate-
portfolio/opencollar/
integrated investing.
⊲ https://www.smartparks.org/
opencollar-io/ Open charging for Circulor’s blockchain-based system: The first ever mine-to-manufacturer
electric vehicles: traceability solution for the conflict mineral.
Data modeling for climate EVerest (LF Energy)
innovation and adoption. processed under OECD-approved
change: OS-Climate As the demand for electric In the future, the project will conditions and without slavery or
OS-Climate is an open source vehicles (EVs) continues to grow, focus on providing new features child labor.
collaboration community that is LF Energy's EVerest project is for local energy management,
building data and software tools developing an open source Tantalum is one of the rarest
PV integration, grid-friendliness,
to drive climate change mitigation software stack for EV charging chemical elements in our solar
and more.
and action. Founded to accelerate infrastructure. The EVerest project system, and there is a growing
the global investment shift toward aims to speed deployment, demand for it in a variety of
Mine-to-manufacturer
green technologies, infrastructure, ensure interoperability, and avoid industries. It is also a conflict
traceability of a conflict
and business practices, OS-Climate stranded infrastructure for EV mineral, meaning that a portion
mineral: Circulor
is helping stakeholders across charging solutions. Developed with of its supply comes from warlords
(Hyperledger Foundation
industries align on sustainability modularity and customizability in in the Congo who enlist enslaved
member)
goals. This alignment allows them mind, EVerest works with all types people and children to mine it.
Circulor's blockchain-based
to accelerate the adoption of new of fast public charging, including The OECD, the U.S., and the E.U.
system provides much-needed
business models and take action smart charging, DC charging, passed regulations to improve its
provenance for tantalum and is the
to meet the targets outlined in the bidirectional charging, and even traceability, but there has not been
first ever mine-to-manufacturer
Paris Climate Accords. emergency energy backups, for a way to accurately track tantalum
traceability solution for the
use during blackouts. from mine to manufacturer—
By aggregating the best available conflict mineral. Using Circulor,
until now. Using Circulor's
data, modeling, and computer By leveraging all the advantages manufacturers can ensure that
traceability solution, which is
science, OS-Climate is helping of open source for the EV charging tantalum ore purchased in
built using Hyperledger Fabric,
organizations prepare for a future world, EVerest is driving e-mobility Rwanda is mined, transported, and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 28
 CELEBRATING THE INNOVATORS

manufacturers and governments summit in Washington, D.C., that

Improving network
can ensure that rare-earth gathered government and industry
access for underserved
elements such as tantalum are representatives to discuss action and
communities: Magma
ethically and sustainably sourced. investment in open source security.
The Magma project is helping rural
and underserved communities Cross-industry conversations
Employee and student
gain better access to Internet and facilitated by the OpenSSF led to
health verification:
LTE networking. Using policy-rich the launch of a comprehensive
Cardea
network edges and simple fabrics, mobilization plan outlining
LF Public Health's Cardea project
the Magma project's broadly 10 streams of investment to
is a decentralized, open source,
applicable design provides flexible, improve the state of open source
privacy-preserving solution for
scalable, and low-cost networking software security. OpenSSF has
sharing health data. Initially built
solutions for use in various also funded security teams and
to support health data sharing for
low-service areas. First Nations projects in a variety of critical open
COVID-19 tests and vaccinations,
communities across North America source projects and released novel
the Cardea project has since
can now control their Internet tooling to enable secure software
expanded, with use cases in
access using private LTE networks development. With the support
employee and student health
powered by Magma, thereby of more than 95 members, the
verification and drug testing.
providing support for critical OpenSSF is taking actionable steps
communications and cultural to secure the open source software
The underlying architecture of
resources. powering our world.
Cardea is optimized for sharing
privacy-sensitive data. Individuals
can submit health data as tamper-
Securing open source
proof digital credentials with software: OpenSSF
consent-based sharing of specific The Open Source Security
data. This makes it perfect for Foundation (OpenSSF) brings
universities and organizations that together government and industry
OSS North America 2022
rely on a paper-based method to leaders to improve the state of
verify the health requirements of open source software security.
students and employees. Cardea Several targeted initiatives were
can verify the health credentials of released by the OpenSSF in 2022,
individuals in a convenient, digital, including education courses, best
and privacy-centered way. practices, and an open source
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 29
 CELEBRATING THE INNOVATORS

Welcoming the
PyTorch Foundation
In September, we welcomed In the coming year, we look
PyTorch as a new project under forward to building upon the
the Linux Foundation, and we success that PyTorch has already
formed the PyTorch Foundation. established with the AI and ML
Since its initial release in 2016, over community. Artificial intelligence
2,400 contributors and 180,000 and machine learning remain key
organizations have adopted technologies in open source, and
the PyTorch ML framework for we know that the neutral home of
academic research and production the Linux Foundation will bring in
environments. And, within the last even more diverse contributions
year, PyTorch counted over 65,000 to the PyTorch community. By
Linus Torvalds (left), the creator of the Linux kernel, met with Soumith Chintala
code commits and was one of the creating a neutral home for
(right), the creator of PyTorch, at Open Source Summit Europe this year in Dublin.
world's five fastest-growing open PyTorch, we open up possibilities
source software communities, for further collaboration,
alongside the Linux kernel and innovation, and growth. We
Kubernetes. are excited to offer training,
certification, and access to our LFX
PyTorch is one of the world's most platform to PyTorch maintainers
important and successful machine- and contributors.
learning software projects. We
are grateful to the team at Meta
for trusting the foundation with
this project and to our founding
members from Amazon Web
Services, AMD, Google, Microsoft,
and NVIDIA.
Mark Zuckerberg initially announced the PyTorch Foundation on his
Facebook page.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 30
 CELEBRATING THE INNOVATORS

Investing in European innovation:

The launch of Linux Foundation Europe
As the pace of digital
transformation is accelerating
in Europe, we realized that we
needed to establish a presence
in the region and promote the
role of open source as a critical
competitive differentiator. By
planting roots in the European
open source community, we are

BACKGROUND IMAGE BY LARA JAMESON: PEXELS

manifesting our vision to help
promote the ideals of collaborating
locally to drive open source
innovation globally and provide
a neutral space for open source
innovators with a European bent.

In September, at Open Source

Summit Europe in Dublin, Ireland,
we officially launched Linux
Foundation Europe with over The foundation’s mission is to on-ramp so that European projects We see different regions worldwide
15 founding members. It is a accelerate the growth of open and companies can collaborate saying, ‘...we want to have our own
Brussels-based non-profit that collaborative efforts focused on and succeed on a grand scale. digital community and big digital
will be led by General Manager challenges and opportunities faced economy. We want to create new
Gabriele Columbro, a native-born by all European constituencies. Jim Zemlin, the executive director jobs, spur innovation regionally
Italian and long-time proponent Linux Foundation Europe will of the Linux Foundation, described because of our region's special
of the European open source provide individuals in the public the regional opportunity: circumstances, or because people
ecosystem. and private sectors with an here understand each other and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 31
 CELEBRATING THE INNOVATORS

collaborate more quickly.’ And so, has major potential for innovation
you have this balance where the free, leadership through open source.
organic, global innovation engine is We want to ensure that we enable
open source. collaborations that can start
here, in Europe, but then go to a
Europe is home to a thriving global scale.”
community of open source
contributors—from individuals During the launch, we published
to enterprises to governments— our study with Scott Logic, World
who deliver innovation that of Open Source: Europe Spotlight
positively impacts the region and 2022, which describes the state
the world. Today, policymakers of open source across Europe.
widely recognize open source At the Summit, Hilary Carter,
as a unique tool for achieving VP of Research at the Linux
ambitious Europe-wide goals, Foundation, said, ”This study
such as the digital commons and shows that open source remains an
digital sovereignty. According to apolitical key to fostering the digital
Columbro, ”The LF is already in commons, enabling innovations that
Europe. More than a third of our can originate in Europe and become
members are from Europe, split de facto standards used worldwide.”
evenly across regions. So why are
we launching a European branch
of the Linux Foundation? The first
and foremost reason is that Europe
is a unique region that includes
a supranational entity (the E.U.)
that aligns goals and defines a
collaboration framework that
crosses borders. And we realized
there was a need to support this type
of collaboration. It’s a pleasure to
OSS EU Dublin
focus on Europe, an area that I think

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 32
 CELEBRATING THE INNOVATORS

OpenWallet Foundation: Advancing interoperability in digital wallets

As announced at Open Source
Summit Europe in Dublin, the
mission of the OpenWallet
Foundation (OWF), LF Europe’s
first project, is to develop an open
source engine to create secure
and interoperable multi-purpose
wallets that anyone can use to
build solutions.

The OWF aims to set best practices

for digital wallet technology
through collaboration on open
source code that anyone can use
as a starting point for building
interoperable, secure, and privacy-
protecting wallets.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 33
 CELEBRATING THE INNOVATORS
Sylva

Less than two months into its Specific goals of the Sylva project
launch, LF Europe announced its include the following:
first hosted project, Sylva.
⊲ Release a cloud software

A collaboration between leading framework to prioritize require-

European telcos and vendors ments, develop solutions to be

integrated within existing open
(Deutsche Telekom, Ericsson,
source components, and
Nokia, Orange, Telecom Italia,
produce production-grade
Telefonica, and Vodafone),
solutions to be leveraged
Sylva is designed to create a
within commercial products.
new, open source production-
grade telco cloud stack within ⊲ Develop a reference implemen-
Europe. Sylva’s common cloud tation of this cloud software
software framework and adjacent framework and create an
reference implementation will integration and validation
reduce fragmentation of the program to accelerate the
cloud infrastructure layer for adoption of network functions
telecommunication and edge within the cloud.
services and build on top of
Learn more about Sylva at https://
existing open source projects to
gitlab.com/sylva-projects/sylva.
provide implementations and
extensions.

IMAGE BY K AREN UPPAL: UNSPLASH

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 34
Software supply chain security

The Linux Foundation spent a large part of

2022 working on building a community around
the urgent task of securing our open source
software (OSS) supply chain, which is important
to society and repeatedly in the news.
This section includes more information on
the Open Source Security Foundation
(OpenSSF), OpenChain, SPDX, and other
cybersecurity activities at the Linux Foundation.

IMAGE BY MA XIMALFOCUS: UNSPLASH LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 35

 SOFTWARE SUPPLY CHAIN SECURITY

Engaging the public sector on

open source software worldwide
Throughout 2022, the Linux This has included presentations,
Foundation has been at the heart responses to requests for
of several important conversations information, and more informal
concerning the open source discussions with cybersecurity
software (OSS) community leaders in the U.S., Singapore,
and the sustainability of the Japan, the U.K., the E.U., and
ecosystem. Many of our worldwide elsewhere.
engagement efforts have been
focused on educating public
and private sector leaders about
open source software, including
its security. Specifically, we have
focused on three key priority
areas:

1. Improving security and

reducing systemic risk in
the OSS ecosystem,

BACKGROUND IMAGE BY GERD ALTMANN: PIX ABAY

2. Closing talent shortages
through improved training and
educational initiatives, and,

3. Imparting the value of

openness and the importance
of the community.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 36
 SOFTWARE SUPPLY CHAIN SECURITY

OpenSSF
The OpenSSF is a cross-industry mitigate risk and enhance resil- on the Mobilization Plan and will ⊲ Sigstore has continued to see
collaboration that brings leaders ience. Both the Linux Foundation continue to do so into 2023 and massive contributions and adop-
together to improve OSS security and OpenSSF participated in beyond. tion to sign, verify, and protect
through targeted initiatives, this meeting. As a follow-up, OSS, emphasizing improving the
⊲ OpenSSF launched the Alpha-
education, and best practices. the OpenSSF hosted the Open integrity of the software supply
Omega Project. The “Alpha”
Throughout 2022, OpenSSF Source Software Security chain and reducing the friction
portion improves global OSS
membership increased to 95 Summit II in May, bringing developers face regarding imple-
supply chain security by work-
members. Premier members together over 90 executives menting security within their
ing with project maintainers to
include 1Password, AWS, Atlassian, from 37 companies and U.S. daily work. In June 2022, soft-
improve the security posture
Capital One, Cisco, Citi, Coinbase, government leaders to reach a ware developers, DevOps
of their projects. The “Omega”
Dell Technologies, Ericsson, consensus on critical actions to engineers, security engineers,
portion systematically looks for
improve the resiliency and secu- and software maintainers could
Fidelity, GitHub, Google, Huawei, new, as-yet-undiscovered vul-
rity of OSS. take the new free course on
Intel, IBM, JFrog, JPMorgan Chase, nerabilities in open source code
Securing Your Software Supply
Meta, Microsoft, Morgan Stanley, ⊲ During Summit II, the OpenSSF and fixes them. Alpha-Omega
Chain with Sigstore.
Oracle, Red Hat, Snyk, Sonatype, released the Open Source issued a total of $1.5 million in
VMware, and Wipro. Software Security Mobilization grants to the OpenJS Foundation ⊲ In developers of critical open
Plan and announced $30 mil- in support of Node.js, the Eclipse source projects’ pursuit of en-
2022 highlights lion in pledges to improve OSS Foundation, the Python Software couraging the wider adoption
⊲ In January 2022, the U.S. White security. The Mobilization Plan Foundation, and the Rust of multi-factor authentication
House, along with leaders and outlines 10 streams of invest- Foundation. For example, the (MFA), the OpenSSF Technical
experts of many U.S. federal ment to rapidly advance well-vet- funding to the Rust Foundation Advisory Council publicly sup-
agencies, convened an import- ted solutions to make immediate is for enhanced security, includ- ported, in strong terms, the
ant cross-section of the open improvements to OSS security ing a threat model of the Rust various efforts to increase the
source developer and commer- worldwide and build a strong ecosystem and an assessment of use of MFA in various organi-
cial ecosystem to identify the foundation for a more secure the security of zations.2 The Securing Critical
challenges in the OSS supply future. Throughout 2022, the the Rust build/deployment Projects Working Group (WG)
chain and share ideas on how to OpenSSF community has acted infrastructure.1 coordinated the distribution of

1 https://openssf.org/blog/2022/09/13/alpha-omega-project-announces-over-1-5m-in-grants-to-critical-open-source-projects-and-new-omega-analysis-toolchain/
2 https://openssf.org/blog/2022/07/20/openssf-supports-movements-toward-multi-factor-authentication/

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 37
 SOFTWARE SUPPLY CHAIN SECURITY

hundreds of codes for free MFA tokens ⊲ The Best Practices WG released new
to developers of the 100 most critical Scorecards features, such as a GitHub
open source projects in 2021–2022 in Action and REST API, added security
what was known as the “Great MFA checks, scaled-up scans of the open
Distribution.” source ecosystem, and badges. Over
1,600 repositories use Scorecards to
⊲ The Best Practices for Open Source
incorporate best practices into their
Developers WG increased aware-
software development lifecycle for
ness and education of security best
continuous improvement.
practices through improvements in
its free Developing Secure Software ⊲ The Vulnerability Disclosures WG
OpenSSF General Manager Brian Behlendorf, second from right,
Training Course. This is now available unveiled the next evolution in
appears alongside executives from the Linux Foundation, IBM and
through the Linux Foundation Training improving open source coordination Microsoft.
& Certification platform, on edX, and of vulnerability disclosures by crafting
on various organizations’ Learning a new guide focused on the security
Management Systems, and it has had researcher or Finder persona with a
over 8,000 enrollments. The course Guide for Security Researchers to
was updated this year to address the Coordinate Vulnerability Disclosures
attacks that have recently become with Open Source Software Projects.
more prominent (per the CWE Top 25
⊲ A key component of the Mobilization
and OWASP Top 10), as well as adding
Plan is using a software bill of materi-
material to cover topics such as
als (SBOM) as a foundational building
securing systems that use machine
block to improve the security posture
learning. It also released Concise
of the open source ecosystem known
Guides on Developing More Secure
as SBOM Everywhere. The SBOM
Software and Evaluating Open Source
Everywhere Special Interest Group
Software and provided an npm Best
(SIG) sprang up under the Security
Practices Guide for those using the
Tooling WG, and its first effort was to
popular npm package manager. The
fund work on an SPDX Python library to Open Source Security Summit II
OpenSSF Best Practices badge now has
support SBOM creation and processing.
over 5,000 participating projects and
over 850 passing projects.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 38
 SOFTWARE SUPPLY CHAIN SECURITY

⊲ The Security Tooling WG also improve integrity, and secure

LAPTOP PHOTO THISISENGINEERING: UNSPLASH

released Fuzz Introspector. Many packages and infrastructure.
development workflows have A draft is already public, and
come to rely on fuzzing, an auto- work continues to refine it
mated technique for finding bugs for a “version 1.0” release.
by feeding unexpected inputs The working group also
into software with the intent to began work on the comple-
trigger crashes or other prob- mentary Secure Supply Chain
lems. Fuzzing plays an important Consumption Framework
role in vulnerability discovery. (S2C2F) to further develop and
However, today fuzzing often continuously improve the S2C2F
hits roadblocks (“blockers”) that guide. This guide outlines and
prevent effective fuzzing of some defines how to securely consume
code areas. Fuzz Introspector OSS dependencies into the
provides actionable insights for developer’s workflow.
developers to identify fuzzing
⊲ The OpenSSF added two new
Security is always a primary concern and priority for companies and projects, and coverage blockers so they can
when there is a significant dependency on open source, it can cause anxiety. WGs. The Securing Software
be resolved, with the goal of
Repositories WG “provides a
(1) improving projects that use
collaborative environment for
fuzzing and (2) improving fuzz-
aligning on introducing new tools
ers themselves (by helping tool
and technologies
developers understand current
to strengthen and secure soft-
problems).3
ware repositories.” The End
⊲ The OpenSSF Supply Chain Users WG “represents the
Integrity WG continues to work interests of public and private
on refining the Supply chain sector organizations that primar-
Levels for Software Artifacts ily consume open source rather
(SLSA) (pronounced “salsa”). This than produce it.”
is a checklist of standards and
⊲ OpenSSF hosted OpenSSF Days
controls to prevent tampering,
in Austin and Dublin at both
3 https://openssf.org/blog/2022/06/09/
OpenSSF Day, OSS NA 2022, Austin introducing-fuzz-introspector-an-openssf-tool-to-improve-fuzzing-coverage/

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 39
 SOFTWARE SUPPLY CHAIN SECURITY

Open Source Summits North America ⊲ OpenSSF GM Brian Behlendorf

and Europe, bringing together the open testified to the U.S. House of
source community to discuss the chal- Representatives Committee on Science,
lenges, big-picture solutions, ongoing Space, and Technology about the work
work, and successes in securing the OSS being done within the OpenSSF and
supply chain. It is also hosting upcoming broader OSS community to improve
OpenSSF Days in China and Japan. the security and trustworthiness of OSS.

Maintainer’s POV

“I am a maintainer for Sigstore's Rekor and Cosign

projects. I've also been working on making the public
Rekor and Fulcio services generally available. There

OpenSSF Day, OSS 2022 Europe were a few reasons I chose to become involved. First,
I found the mission of Sigstore compelling, and I
wanted to work on a project that I thought was
focusing on important and fulfilling work.

Supply chain security is a huge problem, and there's

a lot of work to be done; I thought Sigstore could have a huge impact. I also liked that
it was an open source project to make security easier for everyone. The other major
reason I wanted to get involved was the community. The Sigstore community has
been so welcoming and fun to work with, and it really made my Sigstore experience a
positive one.”

—Priya Wadhwa, Software Engineer, Chainguard

OpenSSF Day, OSS 2022 Europe

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 40
 SOFTWARE SUPPLY CHAIN SECURITY
OpenChain

In October, we released version

1.0 of the OpenChain Security
The OpenChain project’s core mission Assurance Specification, which
is to build trust in the supply chain. results from over one year of work
The ISO/IEC OpenChain Specification throughout the global OpenChain
5230:2020 is the International community. It applies to an open
Standard for Open Source Compliance source management activity related
and builds trust in to security compliance. We regard this
that domain. as adjacent but different to license
compliance.
The next step is identifying the key
requirements of a quality open source Initially, the scope of this specification
security assurance program. is limited to ensuring that an
organization vets open source with
regard to known publicly available Software Package Data
security vulnerability issues (e.g.,
CVEs, GitHub dependency alerts, and Exchange (SPDX)
package manager alerts). The security
One key issue in improving software supply chains is
assurance specification’s scope may
improving software transparency through SBOMs. The Linux
grow over time based on community
Foundation has been a key player in this effort through its
feedback.
development of Software Package Data Exchange (SPDX),

We will proceed to the ISO/IEC JTC-1 including work to make it an ISO standard in 2021.

PAS submission with an estimated

Work is ongoing to develop SDPX version 2.3. SPDX 2.3
completion date of mid-2023. In the
includes improved interoperability with other exchange
meantime, our security assurance
formats, including adding fields to record the purpose of
specification is ready for market
a package and adding support for more hash algorithms.
adoption as a de facto standard.
SDPX 2.3 also adds new relationship types (to explain links
between elements further), new time information fields, and
IMAGE BY PETE LINFORTH: PIX ABAY
added ways to refer to external materials.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 41
 SOFTWARE SUPPLY CHAIN SECURITY

Related security activities at

Internet Security Research Group
the Linux Foundation
(ISRG)
Each Linux Foundation project is responsible for developing
ISRG’s Let’s Encrypt project provides
secure software for its own users, as projects such as
free, automated TLS certificates to
OpenSSF cannot rewrite all their software. However, the
over 300,000,000 websites. The project
Linux Foundation works to help its foundations and projects
continues to thrive, with an excellent
to achieve this, including sharing materials developed by
record of security and stability. This
other groups. Some foundations, such as the Cloud Native
year, Let’s Encrypt spearheaded a
Computing Foundation (CNCF), have their own groups that
new industry feature that makes early
specifically focus on security issues for their domain. We
certificate renewal seamless and
intend to continue to encourage collaboration between
automated. This feature will improve
foundations and projects as we work to counter attackers.
the agility and resilience of Let’s
Encrypt for the billions of people who
rely on it every day.
PHOTO BY MAREK PIWNICKI: UNSPLASH

ISRG also operates a privacy- Prossimo is the third project run by

preserving metrics service called Divvi ISRG. It focuses on bringing memory
Up. This project aims to dramatically safety to the Internet’s most critical
improve the privacy of data collected infrastructure. The project made
by web and mobile applications by significant code contributions over the
aggregating and anonymizing it. In past year to improve memory safety
2023, Divvi Up expects to finalize on the Internet, ending the year with
PHOTO BY PIX ABAY: PEXELS

its underlying protocols as an Rust support being merged into

industry standard and bring on initial the Linux kernel and completing a
subscribers. memory-safe NTP client and server
implementation.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 42
LF Research: Measuring
the impact of open
source innovation

Since launching in 2021, LF Research

has published a suite of in-depth reports
exploring all aspects of open source. Using
best practices in empirical methodologies,
LF Research offers deep data analysis and
a richer perspective into the community’s
current trends, challenges, and opportunities,
delivering actionable insights that support
future open source strategy formation.

IMAGE BY CHRIS TURGEON: UNSPLASH LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 43

 LF RESEARCH: MEASURING THE IMPACT OF OPEN SOURCE INNOVATION

2022: A year of insights

Thanks to the participation of Focusing on people:
developers, community leaders, Maintainership and
and member organizations in the mentorship
research development process, Among our core and project-
initial LF Research publications focused research efforts are
provide new evidence to support new studies exploring our most
the open source innovation important resource: The people at
opportunity and create an the helm of open source project
exciting new channel to engage communities. These people include
stakeholders. The scope, reach, maintainers, who not only make
and impact of open source critical decisions that impact
project communities is all around security, velocity, and innovation
us, captured by LF Research in open source but whose
deliverables and accessible on participation in mentorship and
the newly designed LF Research other volunteer programs helps
home page. to nurture the committers and
maintainers of tomorrow.
During the past year, we have

PHOTO BY MANUEL-MEURISSE: PEXELS

published more than two dozen The Linux Foundation has
reports and research newsletters, long valued broadening the
each of which describes how understanding of open source
open source drives innovation contributor dynamics, notably
and adds value. with the recent FOSS Contributor
Survey report in partnership with

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 44
 LF RESEARCH: MEASURING THE IMPACT OF OPEN SOURCE INNOVATION

the Laboratory of Innovation tifies security challenges in OSS. conducted with 25 maintainers nities, and demonstrates the
Science at Harvard (LISH) and The project began with a series and significant project contrib- myriad benefits (and some of
the 2021 report on Diversity, of candid interviews with OSS utors at the helm of the most the challenges) associated with
Equity, and Inclusion in Open maintainers and contributors. critical open source projects, mentorship programs for
Source. The key findings from Thanks to the involvement of many of which were identified mentees and mentors alike.
these reports inspired further many survey distribution part- in the Census II report published
ners, insights were derived from in collaboration with the LISH. Encouragingly, we see clear
research into the critical role that
more than 500 survey respon- The findings reveal maintainer patterns in how successful projects
open source developers play in
dents. The result is a deep dive motivations, describe how their and their maintainers recruit and
securing software supply chains
into critical software security communities and projects func- manage contributors, structure
and creating and sustaining
development challenges, includ- tion, identify the problems they project governance, address
high-impact innovations and
ing at the organizational level, experience, and share valuable security practices and challenges,
communities.
where policies requiring security lessons learned. and nurture overall project health.
In 2022, LF Research launched protocols are in short supply
⊲ Mentorship in Open Source:
several maintainer- and committer- and dependencies are often not Focusing on priority
Exploring the Intrinsic,
centric research studies to explore effectively managed. issues: Core research
Economic, and Career Values
how we can better support the projects
⊲ Critical Maintainers in of Open Source Mentorship
“super coders” across open source Core research examines all
Open Source: Motivations, Programs (4Q2022). This
project communities. In the strategic issues of importance
Community Dynamics, and upcoming report investigates
process, we hope to inspire a new across the Linux Foundation.
Challenges (4Q2022). What how mentorship programs influ-
cohort of participants to follow in makes a successful maintainer? ence the recruiting, onboarding, Below are the highlights
their footsteps, learning, growing, Can a set of best practices be and nurturing of the next gener- from 2022.
and thriving along the way. Below identified and codified, and how ation of open source developers,
⊲ World of Open Source: Europe
are a few examples of people- can the open source community some of whom will go on to be-
Spotlight 2022. In this inaugural,
centric research. best support their implementa- come future project maintainers.
geographically focused study,
tion? It explores challenges related to
⊲ Addressing Cybersecurity the Linux Foundation and its
A current study on “critical main- the succession of open source
Challenges in OSS: This study, partners examine the priorities
tainers” is set to answer these maintainers, explains how we
launched in partnership between and challenges of open source
questions and more. This project can improve the health of OSS
LF Research, the OpenSSF, Snyk, specific to Europe. It describes
will reveal insights derived from projects by increasing diversity
the Eclipse Foundation, CNCF, the “state of open source”
a series of qualitative interviews within our developer commu-
and the CI/CD Foundation, iden- across the European continent,

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 45
 LF RESEARCH: MEASURING THE IMPACT OF OPEN SOURCE INNOVATION

examining the current activity ⊲ Census II of Free and Open thousands of companies, thanks 90% of organizations have start-
levels through consumption and Source Software—Application to our Software Composition ed their SBOM journey.
contribution, inhibitors, motiva- Libraries. Produced in partner- Analysis partners Snyk, the
tors, and opportunities. ship with the LISH and OpenSSF, Synopsys Cybersecurity Research People-powered
Census II is the second investiga- Center, and FOSSA. innovation within
⊲ The 10th Annual Open Source
Jobs Report. This report con-
tion into the widespread use of
⊲ The State of SBOM and
industry verticals
Free and Open Source Software As every vertical industry becomes
tains practical information on Cybersecurity Readiness.
(FOSS). The report provides increasingly software-defined, LF
the state of open source talent Produced in partnership with
insights to identify the most Research has an important role to
that employers may use to guide SPDX, OpenChain, and OpenSSF,
common FOSS packages at the play to illustrate the impact of OSS
their hiring, training, and diver- this research reports on the
application library level.
sity awareness efforts. It also extent of organizational SBOM within this transformation. Recent
This facilitates prioritizing
provides IT professionals with readiness and adoption and studies illustrate the specific role
resources to address security
clear, unbiased insights into the its significance in improving that sector leaders and decision-
issues in the most widely used
most marketable skills. cybersecurity throughout the makers play in creating shared
software. The Census II utilizes
open source ecosystem. The value for all industry competitors.
500,000 aggregated data
study follows in the wake of the The two reports below highlight
observations of FOSS in
U.S. Administration’s Executive experiences from the energy and
production applications at
Order on Improving the Nation’s motion picture industries.
Cybersecurity and the disclo-
sure of the most recent and ⊲ Paving the Way to Battle
Of organizations using
#1 ACTION:
far-reaching Log4Shell security Climate Change: How Two
Get a vulnerability
SBOMs today,
reporting system vulnerability in Log4j. Its timing Utilities Embraced Open Source
74% produce AND
consume SBOMs. in order to better secure your
coincides with increasing global to Speed Modernization of the
software supply chain.

recognition of the importance Electric Grid. This inaugural

of identifying software compo- energy report describes how two

nents and helping accelerate the large European distribution and

When consuming SBOMs...
When producing SBOMs...
widespread implementation of transmission systems opera-
#1 BENEFIT: #1 BENEFIT:
Developers better Better support
cybersecurity best practices to tors, the Netherlands’ Alliander
understand for compliance
and reporting. mitigate the impact of software and France’s RTE, adopted and
dependencies.
vulnerabilities and security de- contributed to three significant

velopment gaps and challenges. LF Energy projects, SEAPATH,

From The State of Software Bill of Materials (SBOM) and
In our sample, it was found that CoMPAS, and OpenSTEF, to make
Cybersecurity Readiness report

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 46
 LF RESEARCH: MEASURING THE IMPACT OF OPEN SOURCE INNOVATION

their electrical substations more ⊲ The State of Open Source in ⊲ AI and Data in Open Source: As partnerships for impact through
modular, interoperable, and scal- Financial Services Report 2022 with other industries, OSS adop- responsible and potentially
able and alleviate the challenges (4Q2022). Produced in partner- tion in the AI field has increased beneficial approaches to climate
associated with less predictable ship with FINOS, Scott Logic, the use of open source in prod- solutions.
renewable energy sources. It Wipro, and GitHub, the second ucts and services, contributions
provides a pathway for others From telling the story of how open
annual release of this report ex- to existing projects, the creation
in the energy sector to follow to source is transforming the motion
plores the state of open source of projects fostering collabora-
speed up the digitalization of our picture industry to exploring
in the financial services sector. tion, and the development of
world’s power systems. standards and best practices
It identifies current levels of new technologies. This report
to create more secure software
consumption and contribution reviews critical challenges in the
⊲ Open Source in Entertainment:
of open source software and open source AI ecosystem, dis- supply chains, 2022 solidified the
How the Academy Software
standards in this industry and cusses common characteristics role of LF Research to provide
Foundation Creates Shared
the governance, cultural, and as- across AI and data projects, and data-driven insights that broaden
Value. Everyone loves a good
pirational issues of open source presents the role of the LF AI & the understanding of the impact of
story! This research project tells
among banks, asset managers, Data Foundation in empowering open source projects worldwide.
the story of the formation of the
and hedge funds. innovators and accelerating open We would like to thank all those in
Academy Software Foundation—
source development. the open source ecosystem who
how it came to be, where it came
from, what it has achieved so far, Focusing on technology participated in our research efforts
⊲ The Carbon Footprint of NFTs:
and where it aims to go next. It trends: Research from this year. Your contributions have
Not All Blockchains Are Created
is a story about engineers and Linux Foundation Equal: Produced with Palm
helped LF Research collectively

leaders who collectively generate projects NFT Studio and the Hyperledger
build and grow a valuable
“knowledge network” for all
value by developing critical open In the reports in partnership with Foundation, this report lays
source software that powers stakeholders across the Linux
Linux Foundation projects, we out key climate-related barri-
many entertainment, gaming, Foundation community.
examine the hottest trends in ers to NFTs and suggests some
and media industry productions tech and how the communities concrete strategies for embrac-
and the open standards needed behind open source software ing and building on the exciting
for growth. It is a powerful example development and open standards innovations that NFTs enable.
of competitors collaborating on are prime innovators, force Adopting these strategies may
open source projects. multipliers, and continual unlock new opportunities for
disruptors. global collaborations and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 47
LFX

Supporting data-driven open source project

growth and enabling digital transformation.

IMAGE BY MATTHEW MONTRONE: PEXELS LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 48

According to the Business For open source projects,
Research Company, the global foundations like the Linux
open source services market is Foundation have become the
expected to grow from $24.63 medium for cross-platform
billion in 2021 to $30.57 billion collaboration and building
in 2022 at a compound annual sustainable project technologies
growth rate (CAGR) of 24.1%. Open and communities. To best support

LAPTOP PHOTO BY BEN KOLDE: UNSPLASH

technologies are mission-critical, the 500K+ contributors and the
and so is the need to manage an organizations supporting them,
enterprise’s open source presence, we created LFX—a modular,
including code contributions, extensible, and API-driven
project participation, governance digital toolkit to grow, manage,
roles, and legal processes secure, and build open source
such as Contributor License technologies. Already, 750+
Agreements. Securing the open open source projects have been
source supply chain and all of the onboarded to the LFX platform,
projects incorporated in company leveraging the data sources and
infrastructure and products is tools the developer communities “Organizations require accurate and
crucial in deciding which open already use.
detailed metrics on community health to
source projects to support.
In building these tools for open
Organizations require accurate and make informed decisions on which open
detailed metrics on community source project communities,

health to make informed decisions we helped drive our digital technologies to consume and invest in.”
on which open technologies to transformation. LFX has enabled us

consume and invest in. to have better integration across

all of our services (events, training,
certification, projects, and IT) and
automate or reduce the complexity
of many day-to-day responsibilities.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 49
 In 2022, the LFX team: ⊲ Completed the cross-platform
integration and migration to a
⊲ Released the second version data lake infrastructure.
of Insights, which provides a
contextualized view of project What can you expect from
ecosystems, including contribu- LFX in 2023? In addition to
tion trends and analytics. supporting more connectors
like StackOverflow, Twitter, and
⊲ Introduced the ability in
StackShare, launching the next
Individual Dashboard to collect
version of Mentorship, and
LFX: Crowdfunding and display maintainer badges
introducing searchable community
simply by connecting a GitHub
account. profiles, we are working with
OpenSSF on the Risk Assessment
⊲ Released the first version of and Data Sharing projects as a part
Community Management to of the OSS Security Mobilization
help projects build healthy and Plan. We will also be opening
engaged communities.
up Project Control Center to
⊲ Launched a new Open Source community members, and, most
Program Office (OSPO) dash- importantly, onboarding open
board for managing employees source projects that aren’t hosted
in Organization Dashboard, at the Linux Foundation to Insights.
LFX: Mentorship
where you can better visualize
Learn more about LFX at
your entire open source project
investment and impact. lfx.linuxfoundation.org.

⊲ Made substantial improvements

to meeting and committee
management in Project Control
Center (PCC), a unified control
plane for managing open source
project operations.

LFX Insights: Project Trends

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 50
Mentorship and diversity

We’re committed to making a difference.

We believe that, by empowering people,
offering enriching learning opportunities—
structured and unstructured—and helping
to build diverse communities that develop
open source code, we can improve the
state of the open source ecosystem. We
aim to make it healthy and sustainable for
future generations.

IMAGE BY MAREK PIWNICKI: UNSPLASH LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 51

 MENTORSHIP AND DIVERSITY

LFX Mentorship
We started LFX Mentorship across all LFX projects.
in 2019 with just three new CNCF leads this group,
developers. We have come a with over 104 graduates.
long way since then.
In 2022, we received 6,852
We continue to get feedback applications, the vast majority
on our programs and improve coming from outside the
them based on that feedback. United States.
We started offering unpaid
mentorships this year based Our mentorships primarily went

on the feedback we received to younger applicants. This is

to enable participation by expected, as mentorships aim

individuals who cannot receive to benefit those early in their Open Source Summit North America, June 2022

stipends. This also allows us careers, and the vast majority of

to scale the program further applicants are relatively young.

undergraduate students, who are backgrounds. Open source
without additional funding. We most likely to seek internships and developers can counter income
We enjoyed great geographic
are exploring offering short-term other opportunities that further inequality, and LFX Mentorship
diversity across our mentees,
mentorship programs to meet their chances of employment upon certainly contributes to that ideal.
with a high concentration of
the needs of developers with graduation.
participants coming from India.
limited time and those wanting We continue to work on increasing
By launching Linux Foundation
to focus on a specific area or The Linux Foundation seeks applications from women and
Europe and working to expand in
educational need. to mentor engineers and people whose races are historically
other regions, we hope to increase
students from a wide array of underrepresented in technology.
geographic diversity even further.
As we look back at the year, LFX socioeconomic backgrounds. We Diversity comes in many forms,
Mentorship will wrap up 2022 are pleased to report that more and diversity in LFX Mentorship
Mentorships are useful for
with more than 30 new Linux than 70% of our mentorship is important. It creates widely
engineers of any education
kernel developers and more than program participants this past acknowledged benefits within
level. Understandably, our
240 new open source developers mentors concentrated on serving year were from low socioeconomic the open source community,

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 52
 MENTORSHIP AND DIVERSITY

and it brings opportunities to a

Mentorship applicants Mentorship applicants Mentorship applicants
greater range of people. While by gender by country by educational level
we’ve seen some improvement in
the participation of women since
the program’s inception (17%
of applicants in 2019 compared
with 20.1% of applicants in 2022),
we’d like to see a more significant
increase in 2023.

In summary, we are proud of

20 to 39
the work accomplished by LFX Male 77% Chose not India old
years 70%79.1% China 3.6% Some
Some Masters 4.1%
to provide All other
Less than 20 Pakistan 1.9 % College
College64%
64% Chose not
Mentorship thus far and the Female 20%
information 1.9% countries
years 10.2%
old 19.4% Canada 1.2% College
College23.3%
23.3% to provide
opportunities it has created for Nonbinary 0.8% USA 7.3%
40 to 60 Egypt 1.2% Some
SomeHigh
High information 0.8%
Nigeria
years old4.7%
1.1% School
School7.6%
7.6% Ph.D. 0.2%
a diverse set of folks around the
globe. We are striving to improve
in various ways and look forward provide unstructured, free, and Mentorship applicants Mentorship applicants
to sharing more next year on what accessible online education and by income level by age

we hope to accomplish in 2023. learning opportunities through the

LF Live Mentorship Series. The
We thank all our mentors for series provides expert knowledge
taking the time to share their and valuable interactive discussion
knowledge and expertise. Your across various topics related to
contributions are invaluable, and the Linux kernel and other OSS
your leadership is foundational. projects. A total of 12 sessions
were held throughout the year,
Mentorship and Events with an average live attendance of
Lower Middle Chose not to 20 to 39 Chose not to
The LFX Mentorship and LF 100 people per session. Included Class 52.9% provide years old 79.1% provide
information information 0.3%
Events teams continued their in these was a five-part series on Working Less than 20
12.6% years old 19.4% 61 years
Class 17.6%
collaboration with open source Rust. This is a timely resource Upper 40 to 60 or older 0.1%
Upper Middle
community experts in 2022 to as Rust grows in popularity and Class 0.8% years old 1.1%
Class 16.1%

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 53
 MENTORSHIP AND DIVERSITY

In-person speed mentoring ⊲ Helping to build diverse

sessions returned at our flagship communities that continue
Open Source Summit North developing open source code to
America and Europe conferences keep our ecosystem healthy and
this year, where over 40 sustainable.
community members sat down
⊲ It is a long road, and we plan to
with community veterans to ask
walk together with the gradu-
questions and receive mentorship
ates, mentors, and experts in our
on technical, community, and communities for many years and
career topics. many miles (or kilometers).

“If you want to walk far,

walk together.”
As we talk about the stats and
Open Source Summit North America, June 2022 numbers, let's not lose sight of

becomes a supported language source jobs, and employers the big picture. It’s all about the

in the Linux kernel 6.1 release. are always looking for talent. following:

We thank the Rust maintainers Additionally, this event allowed us ⊲ Making a difference and empow-
for taking the time to provide this to thank our mentors, who shared ering people by offering enrich-
valuable resource. their knowledge to train this new ing learning opportunities, both
talent. Some of our mentors do structured and unstructured.
In January 2022, we held our this in their spare time, helping
first LFX Mentorship Showcase ⊲ Paying them to learn while mak-
others with no expectation of
to connect our graduates with ing the resources available for
thanks. We hope to make this
prospective employers from free and accessible to all.
an annual event and are already
our member companies. In this planning for the next mentorship ⊲ Developing new talent and
virtual event, 28 mentees shared graduate showcase to be held in making it available to the open
their accomplishments with January 2023. source ecosystem.
other attendees and attending
employers. There are many open

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 54
 MENTORSHIP AND DIVERSITY

Diversity, equity, and inclusion

efforts
A richness of diversity—including ⊲ Policies against all-male panels
people from all walks of life, and speaker line-ups.
cultures, countries, and skin
⊲ Free childcare at events.
colors—is crucial for developing
sustainable and thriving open ⊲ Nursing rooms, pronoun
source communities. People from stickers, all-gender restrooms,
diverse backgrounds contribute and prayer rooms.
fresh and inventive ideas. This
⊲ D&I special events at our con-
creates a rich ecosystem that ferences, such as the Women
is inclusive and welcoming to & Nonbinary in Open Source
everyone. Open Source Summit North America, June 2022
Lunch (Open Source Summit),
Better Together Diversity Lunch
Creating diverse communities ⊲ Applying for CHAOSS project D&I
(Open Source Summit), and included over 20 sessions this year,
requires active effort and a badges to showcase our events
EmpowerUs Reception (KubeCon along with allyship workshops.
dedication to engineering as ones that take D&I seriously.
+ CloudNativeCon). These events
inclusive spaces. Grace Hopper Conference
celebrate diversity and provide ⊲ Ongoing outreach to invite and
opportunities for networking encourage more diverse speak- One important way the Linux
We are proud to use our own
and collaboration among people ers at events—we’re proud to Foundation helped to build
events as a way not only to create
with shared life experiences. share that. diversity and inclusion this
these inclusive spaces but as
opportunities to help build the ⊲ A strongly enforced code of con- year was by supporting the
In addition, the Diversity
diversity and inclusivity of the open duct across our events. This clari- Grace Hopper Celebration
Empowerment Summit micro
source ecosystem. To achieve fies that the Linux Foundation (GHC). Together, the OpenJS
conference at Open Source
this, we have many diversity and its project communities Foundation, OpenSSF, LF Training
Summit North America and Europe
and inclusion initiatives that we provide a harassment-free & Certification, CNCF, Hyperledger
creates a space for participants to
undertake across our events, experience for participants at all Foundation, and RISC-V teamed up
share D&I stories, best practices,
including the following: of our events, whether they are at GHC to support and encourage
insights, and lessons learned. It
held in person or virtually.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 55
 MENTORSHIP AND DIVERSITY

Ambika Sharma, Principal Data Shagun Bose, SWE at Intuit and

Product Manager at U.S. Bank and Grace Hopper Open Source
GHC22 Open Source Co-Chair, Co-Chair said, ”The Open Source
said, ”Open source was loud and community is so welcoming and
proud at GHC22! We're grateful for supportive! One of my favorite
the community coming together moments from the day was when
to welcome, celebrate, and elevate multiple representatives and
more women to take their first mentors from different projects
steps into the world of open source responded to a concerned
software. The Linux Foundation had participant asking whether she
a pivotal role in making open source could keep contributing post-event.
center-stage at GHC22, and we are It was a small moment, but it
grateful for their partnership. Five illustrates beautifully how events
of the 27 projects that participated like these can support and enable
in Open Source Day were from new contributors to confidently take
Open Source Summit North America, June 2022
the Linux Foundation. Two board their first step and forge lifelong
more women and nonbinary of the event. Because Open Source members of the Linux Foundation connections within the community.“
technologists to contribute to Day is a hackathon, participating in were speakers and shared advice on
open source projects. Open Source Day takes considerable building careers in open source—

time and effort, especially for Nithya Ruff and Sarah Novotny.
Anna Jung, Senior ML Open Source The Linux Foundation hosted a
projects and mentors. Therefore,
Engineer at VMware and GHC wonderful Happy Hour at GHC22
I am thankful to them for being
22 Open Source Co-Chair, said, in Orlando, bringing the open
true leaders in the movement to
“Reflecting back, I am so grateful source community together. Here's
increase diversity in open source.
to the open source community for to celebrating the next generation
They collectively helped thousands
being part of the Grace Hopper of open source contributors and
of attendees, and, in less than 7
Celebration, especially Open advocates.“
hours, there were more than 100+
Source Day. Open Source Day
contributions made to open source,
was only possible because 60+
mostly from women in tech.“
project maintainers/contributors,
70+ mentors, and 15+ speakers
volunteered their time to be part

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 56
 MENTORSHIP AND DIVERSITY

Open Hardware Open Mainframe Project

Diversity Alliance diversity efforts
The Open Hardware Diversity The Open Mainframe Project
Alliance (OHDA) is a RISC-V aims to ensure that diversity
incubating project. It aims is integral to the project and
to bring together the open technology landscape. Sharing
hardware community by providing the importance of belonging in
programs and networking the tech ecosystem, promoting
opportunities and encouraging neurodiversity in the workplace,
the participation and professional and giving staff and community
advancement of women and other members a place to share
underrepresented groups. In their struggles and personal
2021, OHDA hosted sessions on experiences for Asian American
diversity at Open Source Summit. and Pacific Islander Heritage
It continues to provide RISC-V Month are all part of the Open
diversity scholarships as well as Mainframe Project. The project has
free online training. provided an open conversation
about DEI that is honest and raw.
Through the “Making Our Strong
Community Stronger” collaborative
initiative, Open Mainframe has
hosted several webinars, engaging
with over 1,000 registrants,
presentations, and blogs focused
on diversity, equity, and inclusion.

Open Source Summit North America, June 2022

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 57
Investing in training
and certification

The demand for experienced open

source talent has never been greater.
Although organizations have navigated
a pandemic, the great resignation, and
uncertain economic times, the need to
bring innovative and secure products,
services, and systems to market is even
greater than the demand.

IMAGE BY ADRIEN OLICHON: PEXELS LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 58

 INVESTING IN TRAINING AND CERTIFICATIONS

Leveraging learning to
support talent acquisition
and retention
How do organizations manage their open source talent
shortage while meeting their business needs? Hiring
managers need to recruit technical professionals with
proven and verifiable skills and invest in the growth and
professional development of their current team.

The Linux Foundation works with organizations that

are facing these challenges and strives to help technical
professionals across the world gain the hands-on training
and performance-based certifications they need to
demonstrate their talent and advance in their careers.
To date, more than 2.3 million individuals have enrolled
in free training courses, and nearly 55,000 professionals
worldwide have achieved technical and verifiable
certification.

In 2022, our Training & Certification team launched more

than 25 new offerings in high-demand technical areas,
including cloud, cybersecurity, artificial intelligence, DevOps,

PHOTO BY WES HICKS: UNSPLASH

and other emerging technologies. We currently host nearly
100 online courses, deliver over 20 instructor-led courses,
and offer more than a dozen exams.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 59
INVESTING IN TRAINING AND CERTIFICATIONS

New courses in 2022

⊲ Antitrust for Open Source ⊲ Implementing Open

PHOTO BY KETUT SUBIYANTO: PEXELS

Project Communities Source License Compliance
Management
⊲ Building Applications with
RISC-V and FreeRTOS ⊲ Introduction to Backstage:
Developer Portals Made Easy
⊲ Data and AI Fundamentals
⊲ Introduction to DevSecOps
⊲ Developing Secure Software
for Managers
⊲ Ethics for Open Source
⊲ Introduction to Istio
Development
⊲ Introducción a Linux
⊲ Foundations of RISC-V on
(Spanish version)
Assembly Programming
⊲ Introduction to Protocol
⊲ Fundamentals of Quantum
Buffers 3
Computing
⊲ Kubernetes and Cloud Native
⊲ Getting Started with
Essentials
Self-Sovereign Identity
⊲ Linux for Cloud Technicians
⊲ Git for Distributed
Developing Secure Software
Development
⊲ Linux for Cloud Technicians ⊲ Microcontroller Applications ⊲ Securing Your Software Supply
⊲ GitHub Supply Chain Security
Essentials with RISC-V Chain with Sigstore
Using GitGat Foundations
of RISC-V on Assembly ⊲ Linux System Administration ⊲ OSS Development: Linux for ⊲ Software Engineering Basics
Programming Developers for Embedded Systems
⊲ Linux System Administration
⊲ Green Software for Essentials ⊲ PyTorch and Deep Learning for
Practitioners Decision Makers
⊲ Linux Tools for Developers

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 60
 INVESTING IN TRAINING AND CERTIFICATIONS

Certifications and
credentials
10th Annual Jobs Report summary of findings
This year, we updated the
Linux Foundation Certified Additional key findings include the following:
System Administrator exam,
⊲ A significant shortage of qualified open
developed a new certification for
source talent: Approximately 93% of employers
Linux Foundation Certificated
report struggling to find sufficient talent with
Technicians, worked with CNCF to
open source skills.
create the Prometheus Certified
Associate, and launched a new ⊲ Certifications hit new levels of importance:
credential series called SkillCreds Approximately 90% of employers stated that they
to support niche areas, such as would pay for employees to obtain certifications,
Vim, Bash, Git, YAML, and Helm. and 81% of professionals plan to add certifica-
tions this year. This demonstrates the weight
Scholarships these credentials hold.

In 2022, the Linux Foundation Organizations need to retain and recruit open ⊲ Cloud’s continued dominance: Cloud and
directly awarded 500 scholarships source talent container technology skills remain the most
for free training and certification in-demand this year, with 69% of employers
Our 10th Annual Open Source Jobs Report was
to individuals worldwide in seeking hires with these skills and 71% of open
published in June 2022.
memory of Shubhra Kar, the Linux source professionals agreeing that these skills
Foundation’s CTO. Hundreds are in high demand.
Hiring managers find that talented open source
more were awarded via non-profit
professionals are in even greater demand than ⊲ Cybersecurity concerns are mounting:
partnerships, including Blacks
in previous years. Closing the talent and skills Cybersecurity skills have the fourth-biggest
in Technology, TransTech Social
gap requires top-level recruitment incentives and impact on hiring decisions, as reported by 40% of
Enterprises, and Women Who Code.
aggressive upskilling and certification of existing employers, trailing only behind cloud, Linux,
talent, which will have the added impact of and DevOps.
supporting retention efforts.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 61
Events

This year finally allowed us to return to

global locations to reconnect with many of
our community members we haven’t seen
live since 2019 and meet new ones.

“I don't think anything replaces the face-to-face

meetings and the personal connections that
you get when you're in the same room or same
place with people.” – Annamie Paul

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 62
 EVENTS

Returning to our global ATTENDANCE ACROSS 2022 EVENTS

community
Europe’s reopening allowed With Japan’s recent
KubeCon + CloudNativeCon reopening, we are ecstatic
Europe (and 14 co-located to return to Japan in
92,000 12,000 176
events) attendees to December with Open Source attendees organizations countries
230 in-person, virtual, and
reconvene live, and over Summit Japan, KubeDay
hybrid events in 2022
7,000 did, in Valencia, Spain, Japan, SODACon, and Open
this May. Compliance Summit.
SPEAKERS AND CONTENT
After several smaller Across 230 in-person,
European events throughout virtual, and hybrid events
the summer, Open in 2022, we gathered over
Source Summit Europe, 92,000 attendees from 176
Hyperledger Global Forum, countries and over 12,000 7,933 836 4,354 3,079 talks across
Linux Plumbers Conference, organizations. submissions Program committee speakers 271 tracks
members
Kernel Maintainer Summit,
KVM Forum, Linux Security We received over 7,900

Summit, and several speaking submissions

across these events. Over TRAVEL FUNDING
other events were able to
830 program committee We provided just under $1.2M in travel funding in
return in person for the
members reviewed these 2022 to attend career-changing events:
first time since 2019 in
Dublin, Ireland. It has been submissions, resulting

truly amazing to see the in 4,416 open source

excitement and enthusiasm community leaders

that our communities have delivering over 3,000 talks

289 diversity travel 246 need-based travel
had as we’ve been able to across these events to an
scholarships ($636,730) scholarships ($471,209)
return to in-person events. audience around the world. 77 In-person and 27 Virtual Diversity 44 In-Person and 21 Virtual
Registration Scholarships awarded Need-Based Registration
Scholarships awarded

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 63
 EVENTS

Looking forward to 2023

We know the effect of COVID-19 may continue to shape our
event plans as we move forward into 2023, and we expect the
economic headwinds to do so as well. We will continue to evolve
and reshape our event offerings to provide the greatest benefit
to as many people as possible, in as many ways as possible,
through these times.

“As a first-time attendee, the OSS NA

exceeded my expectations. The keynotes.
The session speakers. The quantity of Open Source Summit, Dublin 2022

rich content—from everything open

source to DEI and mentorship. I loved
every minute of it.”

“One of the most important

events about Open Source! Many
interesting projects! Loved it.”

Open Source Summit North America, June 2022

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 64
Innovation in
telecommunications
and the edge

Massive global demands for data consumption

drive the need for digital transformation—with
tight security, strong infrastructure, and scalable
architecture—it is crucial to deliver data across
networks.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 65
 INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

Open source networking:

Reshaping global
connectivity for five years
and counting

Linux Foundation Networking LFN is now in its fifth year

(LFN) software and projects as an umbrella organization,
provide the foundations for and its maturity brings
network infrastructure and deeper cross-community
services across service and collaboration, with major
cloud providers, enterprises, integrations between building
vendors, and system blocks underway across the
integrators that enable rapid entire stack—from the core
interoperability, deployment, to the access and edge—
and adoption. We are the between ONAP and ORAN,
nexus for collaboration and Akraino and Magma, Anuket
enable people across the and Kubernetes, Nephio and
world to access networking EMCO, and many others.
innovations and achieve their

PHOTO BY NICLAS ILLG : UNSPLASH

digital transformation goals.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 66
 INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

5G Super Blueprints: Enabling integrated, accelerated cross-stack

5G use case deployments
A centerpiece of open integration is the 5G Super Blueprint initiative—
a community-driven integration and proof of concept involving multiple
LF OPEN SOURCE COMPONENT PROJECTS FOR 5G
open source projects that enable end-to-end use cases demonstrating
implementation architectures for end users. Intending to accelerate
deployment (e.g., from six months to six weeks), the 5G Super Blueprint
provides the framework for implementing real-world use cases in the open.

Integrating multiple open source projects and umbrellas (such as LF Edge,

Magma, Nephio, CNCF, O-RAN Alliance, and Linux Foundation Energy) with
a full-stack framework for underlying infrastructure and application layers
across the edge, access, and core, this initiative is a true “Integration and
Interoperability” framework across the ecosystem. Specific use cases include
fixed wireless, mobile broadband, private 5G, multi-access, IoT, voice services,
network slicing, and more (many of which are now in active production
deployment). In short, the 5G Super Blueprint is a vehicle for collaborating and
creating end-to-end 5G solutions. END-TO-END NETWORKING DISRUPTION

Currently, the U.S. government is the leading user of these blueprints across
all major case studies, including Static Transport Slicing, Distributed DOS, and
Factory Visual Inspection.

Another example of the 5G Super Blueprint comes from a Japanese

enterprise customer who collaborated with LFN member organization
Aarna Networks to leverage the 5G SBP. The collaboration delivered
a Radio Access Network (RAN) core and single pane of glass for an
enterprise customer to view, orchestrate, configure, and manage private
5G mobile broadband and IoT deployment.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 67
INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

and estimated by analysts to

​​FROM POC TO PRODUCTION be at least four times the size

Edge and IoT now of cloud computing, the edge
As open source networking fruition: The L3AF project,
mandating open source cloud construct is increasingly
solutions become more which Walmart donated to the
frameworks: A market a key enabler for the “Fourth
ubiquitous, 2022 saw even Linux Foundation in 2021 with
four times the size of Industrial Revolution,” in which
more LFN use cases come to the support of other leading
cloud computing the widespread deployment of
life, with new user deployment tech companies and enables
stories published from several Kernel Function as a Service As defined by the 2021 State of IoT, global sharing economy,

carriers, including Spark (New with lifecycle management of the Edge Report, edge computing and increase of zero-marginal-

Zealand), Tigo (Guatemala), eBPF networking application is the delivery of computing cost manufacturing deliver

and Orange (France), as well as programs. Similarly, the EMCO capabilities to the logical extremes unprecedented communication-

vendors and SIs, such as Aarna project, which was new in 2021, of a network to improve the driven opportunities with massive

Networks, Netgate, Equinix, helps organizations (including performance, security, operating economies of scale.

Intel, and Pantheon. Increasing enterprises) to securely cost, and reliability of applications
Now in its third year as an
industry organizations are connect and deploy workloads and services. As a natural
umbrella organization, LF Edge has
now reaping the benefits of across public clouds and edge extension of cloud computing
become the center of gravity for
open source technologies in locations, with end-to-end inter-
production, saving on CAPEX, application communication
OPEX, R&D, enabled. Join us on this journey LF EDGE PROJECTS
and more. and see where the open source
networking ecosystem goes in
Looking ahead, the LFN 2023.
ecosystem will increasingly www.lfnetworking.org
integrate across even more
touchpoints, such as the
metaverse, Open RAN, and AI /
ML. We’re also excited about the
following tangible networking
industry shift into the enterprise
that is already coming into

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 68
 U.S. GOV OPS
INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

to a distribution from edge to ⊲ UC Davis and Opus One use

cloud, all organizations benefit Fledge to create safer wine-mak-
from edge computing due to the ing conditions via a multi-node
lower latency, reduced bandwidth Founded in 2020, the U.S. GOV
wireless sensor network to pro-
costs, and maximized security and OPS project is an umbrella for
duce world-class wine.
privacy. This means the work of LF OS projects initiated by the U.S.

Edge, driven by EdgeX Foundry and The Mayflower Autonomous Department of Defense (DoD).

Akraino, is more crucial than ever. Ship leveraged Open Horizon

The first project under
The key impacts of LF Edge in 2022 components and successfully
the umbrella is the Open
are evidenced by the robust set of sailed across the Atlantic Ocean
Programmable Secure 5G project,
Akraino blueprints in deployment, unmanned.
which develops a secure, end-to-
EdgeX’s 10M+ container ⊲ Project Alvarium provides trust- end, open source architecture
downloads, and the project’s worthy sustainability reporting for 5G wireless networks. The
tenet publications, State of the and validated carbon emission
some of the world's most impactful resulting architecture will address
Edge Report, and the LF Edge measurements for organizations
open source edge computing DoD operational and security
Taxonomy, along with a diverse set that accurately track their carbon
projects, including EdgeX Foundry requirements. DARPA sponsors the
of new use case deployments. The footprint.
and Akaino—building an open, project, which utilizes the U.S. Navy
highlights include the following:
modular framework for edge as a management agent.
computing. LF Edge’s common ⊲ At the 2022 Olympic Games Notable successes include the
governance and collaborative in Beijing, Tencent and China following:
resources unify and open the Unicom created a multi-access
edge computing platform to ⊲ Development of an ONAP use
edge market, with massive global
track and analyze real-time case that enables security for
industry support accelerating the
PHOTO BY C MORRISON FROM F: PIX ABAY

traffic data based on Akraino’s network slices.

adoption and deployment of edge
Connected Vehicle Blueprint. ⊲ A new project proposal based on
applications across sector verticals,
including telecommunications, ⊲ Retailers use EdgeX Foundry to DDoS mitigation technology.
cloud, IoT, industrial IoT, retail, AI / combine POS, RFID, Weight Scale, ⊲ Contribution of use cases and
ML, factory floor, and smart home. and Computer Vision technology to LFN 5G Super
data to alert associates in real Blueprint.
As data gravity continues to shift
time, improving self-checkout
away from the centralized cloud
efficiency and saving costs.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 69
 INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

Learn more about Nephio

Nephio

and become part of this effort

DPDK
to enable the efficient and
In partnership with Google Cloud, on-demand consumption of cloud The strong and passionate DPDK
we announced the formation of and edge resources, opening new community met in person once
project Nephio on May 3, 2022. opportunities for the telecom again in September 2022 for DPDK
Nephio enables cloud native industry. Userspace in Arcachon, France.
automation and the management While in-person attendance was
of 5G networks across multiple DPDK Userspace in Arcachon, lower than pre-COVID-19 numbers,
France 2022
edge locations. With over 50 with 37 onsite, another 102 folks
supporting organizations, joined virtually, and the session
SONiC

Nephio has grown two-fold since scenarios to powering bare metal, recordings are available for
launching. AI and gaming, enterprise, and on-demand viewing. The event also
Created by Microsoft, Software now edge and 5G scenarios. With featured a hackathon to address
Momentum for Nephio in its first for Open Networking in the Cloud an active and vibrant ecosystem, zero-day issues and bug fixes.
year is strong. With developers (SONiC) is an open source network SONiC is now ready to handle
and representatives from over operating system based on Linux almost all scenarios with the Contributor strength has grown
25 major service providers and that runs on over 100 different network switch. The community by 11% yearly, and the DPDK
vendors, Nephio hosted its first switches from multiple vendors has also participated in the Open blog features more community
in-person Nephio Technical and ASICs. Since it launched, SONiC Networking Day with SONiC, developers. The project changed
Summit in the Bay Area during has grown rapidly, with over 50 OCP Summit, and ONE Summit its release cycle from four to three
the summer. Nephio held a leading organizations collaborating this year. releases per year and currently
follow-up event at ONE Summit to build a vibrant NOS community. supports a Long-Term Support
in November, with an even More information about SONiC, (LTS) release. The community also
SONiC joined the Linux Foundation including how to join, is available
stronger show of support. The published a user story outlining
in April 2022. Since then, the on the SONiC website.
Technical Steering Committee how SmartShare Systems used
new Governing Board comprises
is actively discussing strategies, DPDK to improve customers’ WAN
luminary leaders from major
a roadmap, and operations of bandwidth from 1GB to 10GB;
companies that have contributed
cloud native automation in the however, DPDK enabled up to
to SONiC since its development.
telecommunication world. 100GB of bandwidth.
The project has also grown from
mainly powering datacenter

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 70
 INNOVATION IN TELECOMMUNICATIONS AND THE EDGE

ORAN-SC
cadence. The group is looking at
contemporary Mobile Packet core
projects for integration with LFN
The O-RAN Software Community
In 2022, the Magma community 5G Super Blueprint. DENT, an open source network
Magma

(SC) is a collaboration between

underwent a transition to operating system utilizing the
the O-RAN Alliance and the Linux
becoming a full-fledged Linux Kernel, Switchdev, and
Foundation with the mission to
community-run project under the other Linux based projects, made
support the creation of software
auspices of the Linux Foundation significant strides in 2022. Its DENT
eBPF is in its second year at the for the RAN. The RAN is the next

DENT
across all governance functions. 2.0 release, “Beeblebrox,” added
Linux Foundation, working toward challenge for the open source
It is now a fully functioning open key features utilized by distributed
strengthening governance and community. The O-RAN SC plans to
source community working to enterprises in retail and remote
community structure. The year leverage other Linux Foundation
bring modern software networking facilities, providing a secure and
2022 brought an approved budget, Networking projects while
techniques to take on the scalable Linux-based NOS for
updates to the Charter and Project- addressing performance, scale,
challenge of rural Internet access. disaggregated switches adaptable
Progression Policies, the kick-off of and 3GPP alignment challenges.
eBPF

to edge deployment.
Magma issued its first major the marketing committee, and the
With a focus on cross-collaboration,
release since moving to the ability to accept new projects into In addition, Amazon deployed
ORAN-SC is now more fully
Linux Foundation—Magma 1.8— the foundation. DENT as part of its Just Walk Out
integrated across the open
which brings multi-architecture technology in third-party retail
The project sponsored the live networking stack, as it finalized its
containerized AGW to the market. stores worldwide to automate a
stream of the following two events ONAP Interface testing, leveraged
The addition of new Arm partner more efficient customer experience.
in the year's second half: Linux SMO using ONAP modules for
systems to the test list makes the
Plumbers Conference 2022 and synergy, and implemented Anuket’s The group held a successful Mini-
project accessible to both Arm and
Kubecon + CloudNativeCon’s xTesting tool. Summit, “NOS for the Distributed
x86 solutions.
eBPF Day. Edge: a DENT Mini Summit,”
The community issued its F and
Magma is seeing new deployments co-located with ONE Summit in

IMAGE BY ROBYNNE HU: UNSPLASH

The group is working on updating G releases and welcomed a new
that enable a better connection November, with over 70 attendees.
its website and growing the AI / ML framework project driven
across rural parts of Africa, as
developer community in 2023. by the member organization The next DENT release, due out
well as within the U.S. Open,
Samsung. in Q1’23, will include updates to
monthly meetings (“Magma 5G:
consistency configuration and
All You Need to Know”) are in full
802.1x features.
swing, alongside an updated blog

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 71
Innovation in web,
cloud, and DevOps

We remain focused on innovative

solutions that continuously improve the
software supply chain, making cloud native
ubiquitous, and growing a sustainable
continuous delivery ecosystem that fosters
vendor-neutral collaboration across
industries and organizations.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 72
 INNOVATION IN WEB, CLOUD, AND DEVOPS

OpenJS Foundation
People are the heart of the OpenJS We continue to build our OpenJS OpenJS also added a new technical
Foundation, as they bring fresh Security Working Group led by the solution in JavaScript development
ideas and innovations to keep our Cross Project Council (CPC). with the Urban Computing
community a safe and neutral Foundation (UCF). To continue this
home for JavaScript. The CPC sets the technical and impactful work, we announced
project governance strategies for
“JavaScript
the formation of the Open
Security issues have always been the foundation. Through these Visualization Collaboration Space, technologies are often
a part of the Internet, but they efforts, we hope to reduce the risk a place within OpenJS to neutrally
are now on a larger scale and and achieve ambitious security govern the most comprehensive
highly interconnected,
directly impact more people than goals for all our OpenJS projects. and widely adopted visualization so it’s great to see how
ever before. libraries based on JavaScript
“JavaScript technologies are often
and WebGL. We welcomed UCF maintainers support
This year, we set out to strengthen highly interconnected, so it’s great
members Foursquare, HERE
the security and sustainability of to see how maintainers support maintainers at the
Technologies, Joby Aviation,
the OpenJS projects to improve maintainers at the OpenJS CPC,”
the software supply chain and said Joe Sepi, Open Tech Program
and Uber as new members of OpenJS CPC”
the OpenJS Foundation. Open
increase our security contributions Director at IBM, and Chairperson
visualization technologies are
and collaboration with security of the CPC.
vital to each of these companies’
communities and JavaScript
Our footprint in testing and leadership positions in the market.
maintainers.
automation continues to grow. By supporting the foundation, they
Node.js was the first open source Joining other frameworks such as are supporting the infrastructure and
community onboarded to the Appium and Mocha, we welcomed long-term growth of the key open
OpenSSF’s Alpha-Omega Project Jest earlier this year, the most source projects that they rely on.​
to support these efforts. This popular testing framework
To celebrate the great work in
project has been ongoing since contributed by Meta. Jest currently
our community, we developed
the summer, and we’ve been has over 17 million weekly
JavaScriptLandia, the OpenJS
recapping the progress in our downloads, and companies of all
Foundation's supporter
monthly Node.js Security Reports. sizes, including Amazon, Google,
program. This year, our
Meta, Microsoft, and Stripe, use it.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 73
 INNOVATION IN WEB, CLOUD, AND DEVOPS

first-ever JavaScriptLandia awards

showcased the work of our
community leaders by highlighting
their leadership and contributions
to JavaScript. Matteo Collina and
Bethany Griggs received awards
this year for their strong leadership
and dedication to growing our
projects.

“Fastify just turned six, and the The OpenJS Foundation continues
foundation has helped grow the to invest in diversifying our
adoption of this ecosystem to attract members. This year, we added
new contributors,” said Matteo three new women board members
Collina, co-founder of Platformatic and participated in the Grace
Rachel Nabors, AWS, on The Human API, Building Your Project’s Second Source of Truth. and director of OpenJS CPC. Hopper Conference, the world’s
largest gathering of women
technologists.

JavaScript is everywhere,
including in 98% of the world’s
websites. Representing this
enormous developer ecosystem
is a humbling and awesome
responsibility. The work of our
maintainers matters, as they keep
JavaScript safe and modern for
those who depend on it.

Standards panel: Robin Ginn, OpenJS; James Snell, Cloudflare; Jordan Harband, Open
Source maintainer; Christian Bromann, Stateful.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 74
INNOVATION IN WEB, CLOUD, AND DEVOPS

Bringing JavaScript users together through diversity among people and projects

Matteo Collina Bethany Griggs Michał Gołębiowski-Owczarek Joe Sepi

Matteo received the Bethany received the Michał is a staff software Joe has been a critical success
JavaScriptLandia award for JavaScriptLandia Unsung Hero engineer for Sumo Logic, a factor in the OpenJS Foundation’s
Leading by Example. A strong award for being a powerful force contributor to various open Cross Project Council, leading
technical leader helps others to for Node.js behind the scenes. source libraries, and a core efforts to support our key
grow, provides mentorship, and She puts in tremendous work team member of jQuery. maintainers.
supports new contributors. on the release team for the
project, but that work often goes Michał has been leading an effort Joe ensures that the CPC
Matteo always tackles problems unrecognized. to update and modernize jQuery, progresses every week and
head-on and collaboratively. He which 77% of the world’s top 10 dedicates time to guiding
recently co-founded the new In addition to her service to million websites still use. Michał the technical strategy of the
company Platformatic, which the project, Beth volunteers on appeared in GitHub’s ReadMe foundation and evolution of
joined the OpenJS Foundation as other OpenJS committees and project for his work on jQuery.s. healthy governance policies.
a silver member in September. makes herself available to help
the foundation in various ways,
including in the marketing and
programming committees.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 75
 INNOVATION IN WEB, CLOUD, AND DEVOPS

Cloud Native Computing

Foundation
The Cloud Native Computing Contributor-led
Foundation (CNCF) has been innovation
building the road ahead #TeamCloudNative, CNCF’s
throughout 2022, creating a stable vibrant and diverse community
and sustainable, contributor-led of doers, continued to expand
springboard for the future as we and drive engagement across
continue to make cloud native many initiatives in 2022. From
ubiquitous. the expansion of Kubernetes
Community Days to cover eight
CNCF is the vendor-neutral hub of
regions across the globe to
cloud native computing, hosting 18
welcoming over 7,000 in-person
graduated projects, 34 incubating
attendees to KubeCon + KubeCon + CloudNativeCon Europe 2022, Valencia
projects, and 74 sandbox
CloudNativeCon Europe, 65% were
projects, driven by over 168,962
there for the first time. With a particular focus this year on Humanizing security
contributors representing almost cloud native security, The Cloud
Building on the importance
200 countries. Native Security Whitepaper,
of humans in security, CNCF
published in June by the TAG
Today, CNCF has over 830 partnered with Sonatype to
Security group, highlighted the
members, making it one of the introduce Security Slam, which
importance of humans within
largest open source foundations enables CNCF projects to improve
security, concluding that it “is the
in terms of member companies. their security posture while
mechanisms, processes, and intent
Up to September 2022 (when this attracting new contributors
by which humans and systems
report was curated), we welcomed through a fun and collaborative
interact with and make changes
108 new vendor members, an event leading up to KubeCon +
to cloud native applications and
increase of 15% from 2021. CloudNativeCon North America
technology.”
Additionally, we saw a 12% year- 2022. The hugely successful Bug
on-year increase in end-user Bash brought developers together
membership to 153. in a live, asynchronous, and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 76
 INNOVATION IN WEB, CLOUD, AND DEVOPS

cooperative model to find and

Building the road ahead
fix as many bugs as possible in
Underscoring CNCF’s dedication
open source projects. Meanwhile,
to innovation at all levels of
Fuzzing continued in 2022, with 18
the ecosystem, we hosted the
projects fuzzed continuously by the
inaugural CTO Summit at KubeCon
OSS-Fuzz project to uncover bugs.
+ CloudNativeCon Europe 2022,
Seven projects completed security bringing together 21 leaders from
audits, resulting in 132 security six different business verticals
fixes and improvements, 45 to discuss multi-cloud resiliency
common vulnerability exposure and how to achieve it. This was
fixes, and 51 security tool builds. so successful that CTO Summits
In addition, CNCF conducted will appear at each KubeCon +
several independent security CloudNativeCon.
audits throughout 2022 in strategic
partnership with the Open Source
Technology Improvement Fund.
Additionally, we announced
the inaugural CloudNative
SecurityCon, which will launch
in 2023 and allow application
developers and modern security
experts to propose solutions
that incrementally improve what
already exists and make room for
cutting-edge projects and advances
in modern security approaches.

KubeCon + CloudNativeCon Europe 2022, Valencia

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 77
 INNOVATION IN WEB, CLOUD, AND DEVOPS

Continuous Delivery Foundation

The Continuous Delivery achievements. The community
Foundation (CDF) serves as continued to shape the future
the vendor-neutral home of of CD by making impactful
the fastest-growing projects for contributions and kicking off new
Continuous Delivery (CD), such initiatives. One key initiative the
as Jenkins, Spinnaker, Tekton, community has been working
and CDEvents. Its mission is on is interoperability in the
to grow and sustain projects CD ecosystem, resulting in a
that are part of the broad and new project called CDEvents,
growing continuous delivery a common specification for CD
ecosystem. It fosters vendor- events that brings an innovative
neutral collaboration between approach to CD.
the industry’s top developers, Moderator (left): Fatih Degirmenci, CD Foundation. Speakers (left to right):
The CDF community started Sarah Novotny, Microsoft; Hong Wang, Akuity; Isaac Mosquera, AWS; and
end users, and vendors to further
Tim Jacomb, Kainos.
CD best practices and industry contributing to global

specifications. improvements of the software Supply Chain Maturity Model CloudNativeCon NA 2022.
supply chain by forming Workstream, onboarding a Furthermore, we launched the CD
The year 2022 has been exciting the Software Supply Chain new project called Pyrsia, and Best Practices website, allowing
for the CDF, as it has seen many Special Interest Group and the completing a Tekton Security the collaborative development
Audit. of CD best practices. We also
published the third State of the
We hosted many events CD Report 2022, measuring the
throughout the year, including evolution of software delivery
the first in-person cdCon, CD performance.
Mini Summit, co-located with
OSS Europe 2022, CD Summit, The projects within the CDF took
and Spinnaker Summit 2022, part in global initiatives, such as
co-located with KubeCon Google Summer of Code 2022

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 78
 INNOVATION IN WEB, CLOUD, AND DEVOPS

and Hacktoberfest 2022, with many individuals

contributing to moving our projects and the
overall CD ecosystem forward.

Our 2022 achievements have laid the

groundwork for greater things in 2023.
We look forward to driving the CD forward
with our wonderful community!

“We started CDEvents with the team at the Special

Interest Group as we recognized the need for a
common language across the tooling we use to
produce software, from development through build,
deployment, and operation.

The Continuous Delivery Foundation is the perfect

home for the project. The CDF team shares our
vision of interoperability, and they helped us to
connect to a great community of maintainers,
vendors, and DevOps practitioners.

Thanks to CDF in 2022, we hosted two events,

the CDEventsCon and the CDEvents Community
Summit, where we could get together, share our
work, and grow our community.”

Andrea Frittoli, CDEvents maintainer, IBM

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 79
Communities building open
source best practices

From creating OSPOs that help organizations

in their consumption and contributions in
enterprise FOSS to maximizing business value
in their data-driven cloud spending decisions,
Linux Foundation communities are leading the
way in the development and dissemination of
open source best practices.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 80
 COMMUNITIES BUILDING OPEN SOURCE BEST PRACTICES

TODO Group (open source

program offices)
source leaders from all industries
and regions collaborates on best
practices and tools to run effective
OSPOs. During the last decade,
Adopting a strategic posture
the community has published
around open source is no longer
numerous well-known guides,
optional. An Open Source Program
studies, courses, and toolkits.
Office (OSPO) is an open source
catalyzer for many organizations. The TODO Group began and
An OSPO is a designated place collaborated with other projects on
where open source is supported, many initiatives in 2022, including
nurtured, shared, explained, and the following:
grown inside an organization. share their knowledge and expe- ⊲ A Deep Dive into Open Source
With such an office in place, ⊲ OSPOlogy.live Europe: A
rience of OSPOs and open source Program Offices: A whitepaper
organizations can establish cross-community effort and
management within specific that includes OSPO characteris-
and execute their open source two-day convention to discuss
regions. Western Switzerland tics, structures, roles, responsi-
the organization’s open source
strategies and policies with OSPO (French speaking) was bilities, and challenges.
challenges in Europe, seek
clear terms and responsibilities, the first forum, launched in
advice from OSPO peers, con- ⊲ The Evolution of the OSPO:
giving their leaders, developers, September 2022.
nect OSPOs with open source An OSPO study that shares an
marketers, and other staff the
communities, and collaborate ⊲ The OSPO Mind Map project: OSPO maturity model, practi-
necessary processes and tools to
on shared solutions (e.g., open An interactive mind map that cal implementation from noted
make open source a success within
source policies, tooling, stan- schemes the main OSPO’s OSPO programs across regions
their operations.
dards, and community-building). responsibilities, roles, behavior, and sectors, and a set of OSPO
The TODO Group exists to support and team size within the ecosys- archetypes.
⊲ OSPO Local Meetups supported
the adoption of OSPOs worldwide. tem. The project can be found as
in native languages: A forum
This growing community of part of the OSPOlogy repo.
for like-minded professionals to
practitioners formed by open

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 81
 COMMUNITIES BUILDING OPEN SOURCE BEST PRACTICES

Foundation, research to get

an understanding of OSPO OSPO educational publications
adoption.
In 2022, Linux Foundation ⊲ A Guide to Enterprise
⊲ OSPO Courses: To build a Research released an ongoing Open Source: A practical and
comprehensive OSPO career series of reports published systematic approach.
path based on the many by Linux Foundation AI &
responsibilities of an OSPO in
Data’s general manager
the future.
Ibrahim Haddad, Ph.D., that
⊲ OSPO Landscape: A landscape explore fundamental topics
of the OSPO ecosystem to help of open source consumption
organizations see how many and contribution within the
OSPOs are out there and what enterprise.
tools can be used.
⊲ Releasing Internal Code into
These reports include the
⊲ Outbound Open Source Guide: ⊲ Awesome OSS Management: a New Open Source Project:
following:
A guide about contributing to or A list of packages and projects A Guide for Stakeholders:
built by the TODO Group com- ⊲ A Deep Dive into Open An overview of the process,
launching an open source project
munity or helpful for managing Source Program Offices identifying the critical
in the enterprise.
OSPOs. (sponsored by the TODO elements that ensure the
The TODO Group also continued to Group). necessary tasks are properly
⊲ OSPO News: TODO newsletter
refine its existing work, including captured and executed.
with OSPO trends, jobs, studies,
the following:
events, and more.
⊲ OSPOlogy Global meetings:
⊲ OSPOCon Events: Co-located
Released season two of OSPO
in OSSummit NA, Europe, and
end-user use cases.
Japan.
⊲ TODO Guides: Best practices on
We encourage practice leaders or
how to start and advance in an
people considering setting up an
OSPO.
OSPO to join us. Our doors are
⊲ Annual OSPO Surveys: In always open!
collaboration with the Linux

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 82
 COMMUNITIES BUILDING OPEN SOURCE BEST PRACTICES

FinOps Foundation: Advancing how organizations understand

and value cloud usage
FinOps is an evolving cloud this year, an increase of 21% since technology, manufacturing, and
financial management discipline last year. Enterprises continue others, representing most of the
and cultural practice that enables to experience upward pressure Global 2000.
The FinOps Foundation’s mission organizations to maximize to migrate to the cloud alongside
is to advance every individual who business value by helping downward pressure to operate In other words, FinOps is here

manages the value of the cloud engineering, finance, technology, efficiently, especially with economic to stay, and thousands of global

wherever they are by creating and business teams to collaborate uncertainty looming. The 2022 State practitioners are challenging and

connections, inspiring growth, and on data-driven spending decisions. of FinOps survey results (https:// strengthening best practices to

empowering best practices for data.finops.org/) show that every keep up with increasing cloud

cloud billing and operations. According to Gartner, overall cloud major industry now practices FinOps spend and complexity.
investment will reach $544 billion across retail, financial services,
Gathering and inspiring
FinOps practitioners from
all types of organizations
globally
The FinOps Foundation has seen
significant growth in membership
in 2022, as it now has 72 partner
members (including Google,
VMware, Accenture, Deloitte,
and McKinsey) and over 7,000
community users, up from
47 partners and over 1,500
community users last year. A new
End User Enterprise membership
was launched in January 2022,

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 83
 COMMUNITIES BUILDING OPEN SOURCE BEST PRACTICES

with Apple joining first, followed by ⊲ The term “FinOps” has been rich, data-driven visual analysis, noted, “This is trying to solve
Fidelity, JPMorgan Chase, AIA, and mentioned in 8,533 articles since putting us on track to deliver an the problem together. How can
HERE. Sept 2022 (see the keyword com- annual report to benchmark and we share knowledge, how can
parison chart below). snapshot the state of the grow- we be inclusive, and how can we
Notable accomplishments by ing community. rise the tides together?”—Aaron
⊲ In January, we launched a new
the FinOps Foundation and our Edell, Global Head of Customer
course and certification called ⊲ Our FinOps Certified
community in 2022 include the Cloud Intelligence & FinOps,
FinOps Certified Professional. Practitioner is on track to double
following: AWS.
This intensive hybrid course has the number of certifications
⊲ Monthly Summit (our main 40 to 50 hours of virtual instruc- completed this year compared ⊲ The FinOps Foundation team
community event) attendance tor-led and self-paced training with the previous year. grew from seven full-time equiv-
averages 1,200 to 1,500 attend- and a service and content contri- alents (FTEs) to 15 FTEs in 2022.
⊲ In June, we completed our first
ees who join to hear 10 to 15 bution requirement to support
in-person conference, FinOps X, ⊲ Innovation requires trying bold
speakers share best practices the community.
in Austin, Texas. This conference things, even with a cloud finance
and stories over the open, two-
⊲ We launched our second State sold every ticket and sponsor- operating model. The FinOps
hour Zoom event.
of FinOps Survey, including a ship slot. One of our attendees Foundation launched a commu-
nity board game this year that
will be shared with our 17 global
Keyword Mentions meetups from Ohio, Scotland,
“FinOps” “FinOps Foundation” “Cloud Financial Management” France, and Sydney.
“Cloud Cost Management”
20 Increasing investments
into our thriving
community
15
We’re incredibly proud of our
two new community-driven
10 programs, FinOps Ambassadors
and FinOpsPod (our podcast is

5 available on all major providers).

Our 24 global ambassadors
amplify our mission and influence
0
January 2021 July 2021 January 2022 July 2022

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 84
 COMMUNITIES BUILDING OPEN SOURCE BEST PRACTICES

this ecosystem of enterprises,

tooling, and hyperscalers.
Alongside their efforts, our new
podcast describes a day in the life
of our practitioners from many
walks of cloud life.

The FinOps Foundation continues

to be the source for best practices
around FinOps Adoption, FinOps
Framework, and FinOps Practice
Assessment. Our community
working groups have doubled the
project repository output with new
FinOps playbooks on sustainability,
variable forecasting, unit
economics, the public sector, and
more. The number of platform,
tooling, and service providers,
both commercial and open source, $93K has been awarded year Our team believes that innovation
requesting FinOps certification has to date. We launched a global requires an open mind and being
doubled since last year. mentorship program and received observant and responsive to what
54 applications. our community and industry need
Building upon our to continue to adapt and evolve.
innovative momentum We continue to encourage new We’ll be keeping this mindset
into 2023 and beyond voices in the community and going into next year, welcoming
strengthen diverse thought every new opportunity that comes
FinOps continues to be a
leadership via programs like our way.
supportive and inclusive place to
the Women in FinOps virtual
learn, collaborate, and grow. In
speaker series.
2022, we launched a new training
scholarship to ensure access for
underserved demographics, and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 85
Innovation in entertainment

Our communities are driving innovation in the

development of open source software for the
motion picture industry and for cutting-edge
3D games and simulations.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 86
 INNOVATION IN ENTERTAINMENT

Academy Software Foundation

Developed in partnership with ASWF also doubled the number of
the Academy of Motion Picture hosted projects in 2022 with the
Arts and Sciences and the Linux addition of the following six new
Foundation, the Academy Software projects:
Foundation (ASWF) provides a
⊲ rawtoaces: Contributed by
home for open source software
the Academy of Motion Picture
developers in the motion picture
Arts and Sciences, the RAW
and broader media industries to
to Academy Color Encoding
share resources and collaborate
Specification (ACES) Utility, or
on technologies for image
rawtoaces, is a software pack-
creation, visual effects, animation,
age that converts digital camera
and sound. RAW files to ACES container files
containing encoded image data,
An active, growing community Spider-Man: Far From Home; courtesy of Imageworks
according to the ACES.
supports ASWF. Total commits
grew by 68.09% over the previous ⊲ Rez: Developed by Allan Johns reduces the integration ⊲ Digital Production Example
three years, and over the as an in-house solution for Dr. D. effort and maintenance over- Library (DPEL): Developed
previous two years, a total of 80 Studios, Rez is an open source, head of content creation pipe- by the ASWF community, the
organizations participated in code cross-platform package manager lines. It is the first project to DPEL project was born from
commits, 43 of which were new. that creates standalone config- enter the Linux Foundation in the industry’s long-standing
ured environments for third-par- the sandbox stage. need for production-grade
ty and proprietary digital content sample content to thoroughly
⊲ OpenFX: Contributed by
creation software. test hardware and software in
the non-profit Open Effects
development and ensure that
⊲ OpenAssetIO: Developed by Association, OpenFX is a popular
it can scale to the demands of
Foundry, OpenAssetIO is an open source plugin standard that
the film and TV content creation
open source interoperability allows interoperability between
process. Assets hosted at DPEL
standard between tools and image-processing tools in the
include the American Society
asset management systems that VFX industry.
of Cinematographer’s StEM2,

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 87
 INNOVATION IN ENTERTAINMENT

Commits growth
The growth in terms of the aggregated count of
total number of unique commits during the There has been a growth of 6.09%
selected time period. in total commits during the last 3 years.
14000
12000

10000

8000

6000

4000

2000

0
Oct Jan Apr Jul Oct Jan Apr Jul Oct Jan Apr Jul
2019 2020 2020 2020 2020 2021 2021 2021 2021 2022 2022 2022

Image from Solo: A Star Wars Story. © and TM Lucasfilm Ltd. All Rights Reserved.

Animal Logic’s ALab Phase 2, Additional highlights include the the Summer Learning Program
Intel’s Volumetric Clouds Library, following: provided 19 BIPOC/Latinx
and the Noa character from participants with free access
⊲ Open Source in Entertainment:
Amazon Web Services (AWS). to an online learning platform
How the Academy Software
designed to teach them practical
⊲ Open Review Initiative: This is Foundation Creates Shared
skills to pursue technical careers
a new sandbox project resulting Value: The ASWF’s first research
in VFX/animation and matched
from the efforts of the ASWF paper explores the evolution of
them with a mentor from the
Review & Approval Working open source technology in the
ASWF community to further their
Group. The Open Review modern filmmaking era,
professional goals.
Initiative is building a unified starting with digital visual effects
open source toolset for playback, and CG animated films, such as ⊲ New Governing Board succes-
review, and approval of motion Toy Story, Terminator 2, and sion plan: To foster inclusive
picture and related profession- Jurassic Park. representation across gender
al media, led by contributions identity, race, and ethnicity, the
⊲ Summer Learning Program:
from the member companies ASWF adopted a new succession
Led by the Foundation’s Diversity
Autodesk, DNEG, and Sony plan to increase representation
& Inclusion Working Group,
Pictures Imageworks. at the highest levels.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 88
 INNOVATION IN ENTERTAINMENT

Open 3D Foundation and Open 3D Engine

for artists, content creators,
developers, and technology leaders
to congregate and collaborate,
share best practices, and shape the
future of open 3D development.
This thriving community is focused
on making it easier to use and
share 3D assets, and O3DE is the
first high-fidelity, full-featured,
As July 2022 marked the first- real-time, open source 3D engine
year milestone of the Open 3D available to every industry.
Foundation and its anchor project,
the Open 3D Engine (O3DE), the Boasting over 500+ active online

community celebrated significant participants and nearly 200 Hadean provides the infrastructure and computational power that allows you to
authors of code, the community build, run, and monetise the metaverse.
growth and momentum. We
welcomed Epic Games, LightSpeed has experienced rapid growth over The community has also welcomed AWS, Baidu, Bytedance, Google,
Studios (part of Tencent), the last year, with almost 8 million diverse participants, marked Microsoft, Netease, Tencent, and
Microsoft, OPPO, Heroic Labs, changes to lines of code and a by an 80% increase in unique Ubisoft have ranked among the
and Kutztown University. Over 70% increase in total commits. contributors and the election highest star followers.
25 member companies are now Entering the year with a $1.16 of Special Interest Group (SIG)
part of this fast-growing family, million surplus, the Foundation has leaders, including Huawei and O3DE software releases over

including Adobe, AWS, Huawei, raised $2.36 million in additional Red Hat. Aliens Group, AWS, the last year have focused on

Intel, Kythera AI, Hadean, and member commitments over the Brookhaven National Lab, Cro, performance, stability, and

Red Hat. last year and doubled the number Google, Rogue Rocket Games, usability enhancements, aiming
of stars, forks of the repository, Ubisoft, Warner Brothers, and to make it easier to build 3D
As today’s world races faster and Discord users. Warpzone Studios have been simulations for AAA games and
toward 3D technologies, the among the top 10 creators of a range of other applications.
Foundation provides a home issues and pull requests, while Significant improvements in the

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 89
 INNOVATION IN ENTERTAINMENT

22.05 release included motion upcoming digital future with the

matching, a data-driven animation metaverse. We wanted to be on
technique enabling the delivery board with that from the start and to
of photorealistic experiences help shape that future.”
alongside installer validation, —Matthew Jack, CEO, Kythera AI
user-defined property support for
the asset pipeline, and automated Interoperability and portability of

testing advancements. Release assets, visuals, and media scripting

22.10 brought new enhancements across development environments

to ease team onboarding and and engines is key to unleashing

collaboration, artist workflows, and the creativity of artists and content

multiplayer setup, alongside new creators around the globe. Epic

rendering features and increased Games’ engagement is a testament

Kythera AI provides a flexible, scalable framework that integrates the whole range
Terrain system performance. to the Open 3D Foundation’s
of AI features where other products offer just one or two.
significance.
The unique modularity of the
Open 3D Engine is essential “The metaverse will require

in enabling content creators companies to work together to

to transform their visions into advance open standards and

reality, especially as innovation in open source tools, and we believe

immersive experiences accelerates. the Open 3D Foundation will

Foundation members have been play an important role in this

instrumental in shaping the engine journey. With shared standards for

through their contributions. As a interoperability, we’re giving creators

key example, Kythera AI updated more freedom and flexibility to build

its binary AI gem, or plug-in, for the interactive 3D content using the tools

O3DE 22.05 release. they’re most comfortable with and

to bring those amazing experiences
DIGIBL Studio—Digital Basil Leaves is an innovative startup that aims to improve the “We believe that the vision of the to life in Unreal Engine and across
traditional learning methods. Open 3D Foundation will be a other 3D engines.”
huge enabler for the industry in —Marc Petit, VP of Unreal Engine
general and a huge enabler for our Ecosystem, Epic Games

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 90
 INNOVATION IN ENTERTAINMENT

Members are also collaborating on included a talk from the International

support for VR, AR, and MR through Game Developers Association (IGDA)
O3DE integration with OpenXR, and and a discussion with Amazon, IGDA,
advancing 3D graphics technology for NVIDIA, Python Software Foundation,
mobile devices through the Mobile and Rochester Institute of Technology
Device Working Group with strong panelists. The Foundation also hosted
support from some of the largest mobile a metaverse track at the conference
device suppliers. comprising over 10 specialized
topics spanning artificial intelligence;
The broader community has also been authentication; blockchain ledgering;
prolific in its contributions. As a prime cloud and infrastructure; currencies,
illustration, Matteo Grasso of DigiBL edge network; financial services; media,
Studios made it possible to containerize 3D assets, and objects; simulation; and
and push O3DE projects to the cloud voice and immersive interfaces. AWS for Games: Transforming game workloads with
through O3DTanks. purpose-built cloud services and solutions.

We look forward to an even more exciting

In addition to launching the Under the year ahead.
Hood Twitch series and Tales from
the 3rd Dimension podcast series to “It’s truly exciting to see how the industry
provide a stage for 3D developers, is responding to the real-time 3D needs
content creators, and tech leaders to of content creators around the globe,
share their insights, the Foundation providing them with best-of-breed tools. As
hosted its flagship conference, O3DCon, the Executive Director, I want to thank all of
sponsored by AWS, in October with over you for helping us grow this far!”
20 participating companies, including
—Royal O’Brien, General Manager
leaders from the C++ and Python
of Digital Media and Games, Linux
communities. Content spanned various
Foundation and Executive Director,
aspects of the Open 3D Engine and
Open 3D Foundation
open source, including the importance
Huawei Game Service helps you build basic game functions such as
of licenses, compliance, and their achievements, leaderboards, and saved games at low costs.
relation to 3D engines. Diversity activities

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 91
Making an impact on
people and the planet

The Linux Foundation has been working

to reimagine power systems across the
globe. We’re helping define emissions
standards for software, providing digital
infrastructure for food and agriculture,
reducing barriers to developing
treatments for rare genetic diseases,
creating better ways to share data within
and across borders, and developing
tools to inform risk management and
investment decisions to climate risk.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 92
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

LF Energy
The ongoing transition from alignment of assets, is developing
centralized fossil-fuel generation to a data and analytics platform
renewable and distributed energy to close the $1.2 trillion gap
resources is the most significant in financing and investment
reimagining of power systems in required to achieve the goals of
over 140 years. The data indicate the Paris Climate Accords. Many
that we can mitigate approximately other LF projects are playing a
75% of our planetary carbon substantial role in driving green
emissions through energy and initiatives: the Linux kernel in
transportation electrification. We power management, the Green
know that open source solutions Software Foundation in driving
will be crucial to those major sustainable software development,
shifts. By adopting an open source embedded Linux's work in edge
strategy that maximizes flexibility, interoperability, LF Networking in
agility, and interoperability to drive 5G, and the many efforts being
sustainability, we can develop carried out by LF AI & Data.
innovative solutions to reduce our
carbon footprint. LF Energy has seen strong growth
in 2022, adding dozens of new
The Linux Foundation has several members. We welcomed Shell
projects working on open source and Google at the Strategic level,
climate solutions. LF Energy bringing together the expertise
is accelerating the transition of two leading companies in
to distributed clean energy by technology and energy. LF Energy

IMAGE BY PIX ABAY: PEXELS

providing software tools to operate members Cleartrace, M-RETS, and
and manage energy systems. WattCarbon bring energy tracking
and trading expertise.
OS-Climate, which focuses on
finance and macro system

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 93
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

and choreograph infrastructure For the IRA, open source

resources using Software-Defined is essential to providing a
Networking (SDN) controllers transparent, consistent measure
that enable high-throughput data of performance that can animate
processing. This means more the home energy efficiency
developers producing more deployment market. However,
code, which requires buy-in from the value of open source for

IMAGE BY KINDEL MEDIA: PEXELS

industry, government, academia, energy extends well beyond home
and other stakeholders. energy efficiency performance.
Meeting global decarbonization
The growth experienced by LF goals will require a massive digital
Energy this year will accelerate transformation across all parts
as both the private and public of the energy industry. A single
sectors increase their investments organization cannot build the
Critical new projects also came These new initiatives are helping
in the energy transition toward necessary technologies by itself;
into the Foundation in 2022. These us solve climate change through
decarbonization.The recent an open source collaborative
new entrants include the Carbon open frameworks, reference
passage of the Inflation Reduction development model that shares
Data Specification Consortium architectures, and a support
Act (IRA) in the United States the burden is required for
(CDSC), a standard specification to ecosystem of complementary
provided crucial public sector transformation projects like this.
help define and track the carbon projects.
support for green energy Open source also ensures uniform
intensity of consumed energy and
investments. The IRA is a welcome measurement standards, which
the carbon emissions associated We will need to do more than
step toward realizing a more proprietary approaches often
with generated energy. Adding this to decarbonize. Mitigating
sustainable energy system, calling struggle to deliver.
standards projects like CDSC and climate collapse while ensuring
for a substantial increase in
Super Advanced Meter provides economic prosperity will require
funding and the pursuit of clean By adopting an open source
new direction and opportunity for us to network supply and demand
energy sources. Implementation strategy that maximizes flexibility,
LF Energy. through secure distributed
of the IRA and similar initiatives agility, and interoperability—both
hardware, data, and software.
worldwide will require a within the context of the IRA and
EVerest, an open source software
The future energy grid will be built reconception of the tech stack in terms of other decarbonization
stack designed to establish
on open infrastructure platforms. used by the power sector. efforts—the energy sector can
a common foundation for a
The LF Energy stack and open learn to innovate at the speed of
unified EV charging ecosystem,
networking projects can manage technology.
also joined the foundation.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 94
MAKING AN IMPACT ON PEOPLE AND THE PLANET

Markus Marco
Mirz Möller

LF Energy’s SOGNO project—which He helped bring SOGNO into LF One of the biggest obstacles to the volume rollout can be accomplished
means “dream” in Italian and stands Energy to ensure the project's mass adoption of electric vehicles much faster, using fewer resources
for “Service-based open source future development and connect (EVs) is a lack of compatibility and and minimizing stranded assets.
Grid automation platform for with the larger open source plug & play capabilities. The LF
Network Operation”—is intended to community. While the initial version Energy EVerest project aims to The project originated with Marco
accelerate the transition of energy of SOGNO was the outcome of a tackle this and other global EV Möller and his team at PIONIX. The
production from centralized fossil single research project, project charging challenges. By utilizing a idea of EVerest was sparked by one
fuel plants to more decentralized code is now used by various “code first” approach, the project of PIONIX’s previous consulting
energy sources and storage devices. contributors and end users in many aims to increase innovation tenfold projects, where they learned
These decentralized elements research projects. in the EV sector. how the complexities of the EV
will be integrated into power industry were making infrastructure
systems. SOGNO aims to provide “Other contributors and I have EVerest wants to become the build-outs more expensive and
a modular software solution for appreciated the opportunity being Android of electromobility time-consuming.
power system automation that part of the LF Energy community and bridge the compatibility
has provided in terms of enabling gap between the many vehicle “As commercial adoption continues
is easily extendable and matches
collaboration and exchange of manufacturers and charger to grow, many industry players
the speed at which new devices
ideas with other developers,” said producers. This would cut through are discovering significant overlap
are being connected to the power
Markus. “Another benefit of hosting incompatible standards and create between their commercial projects.
system. SOGNO uses cloud and
the project in LFE is the support global, open charging standards Eliminating overlaps is one of the
virtualization technologies to scale
with marketing and other activities that all manufacturers could use. benefits of working with an open
the number of connected devices.
that are outside of the comfort EVerest aims to impact all types source community,” said Marco.
Markus Mirz, Chief Engineer at zone of many developers, like legal of charging, including fast public “LF Energy has provided a huge
Fraunhofer Digital Energy and questions that you should address charging, smart charging such as benefit in supporting the EVerest
Technical Lead of the SOGNO when setting up a project.” using solar energy to charge at community with knowledge of
project, was part of the European home, DC charging, bidirectional open source best practices, legal
H2020 project at RWTH Aachen charging, and emergency energy and marketing support, and giving
This project laid the foundation backups for electric blackouts. the project access to many exciting
for SOGNO. Markus originally got industry networking opportunities.”
involved to give back to society. Additionally, using EVerest will
reduce CO2; development and

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 95
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

OS-Climate
Recognizing that these solutions
are too big for any organization
to build, OS-Climate’s Theory of
Change is based on fostering a
The Paris Agreement's goals of community of practice and action
keeping global temperature rise for open collaboration among
below 2°C and enabling countries financial institutions, corporations,
to adapt to climate change academic institutions, non-
require an estimated investment profits, and governmental
of $6.9T annually through 2030. entities. Since January 2022, the
Still, current investments of size of OS-Climate’s community
Chronic heat map
~$630B leave an immense gap. has increased by 103.5%, and
Investments are hampered by organizational memberships
(1) a need for more transparent, have increased by 15.8%. OS-C
climate-aligned analytical tools and members own, manage, or provide
(2) insufficient data. To accelerate custody services for more than $60
the transition to net-zero and trillion in assets globally.
improve resilience, OS-Climate OS-C received two large data
(OS-C) is creating a public data contributions from Riskthinking.
utility (i.e., Data Commons) that AI and S&P Global, including data
closes data availability, quality, and from more than 75,000 corporate
comparability gaps while building reports and thousands of climate
new analytical tools to inform economic transition scenarios.
risk management and investment The initial versions of three
decisions related to climate risk analytical tools were announced
Transition Analysis: Witness model
and opportunity across asset in July 2022: Physical Risk &
classes, sectors, and geographies. Resilience, Transition Analysis,
and Portfolio Analysis.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 96
MAKING AN IMPACT ON PEOPLE AND THE PLANET

The Physical Risk & Resilience based on changes to policy,

tool connects asset location macro-economic impacts (e.g.,
data to climate hazard models capital, labor, production, energy,
and vulnerability curves. Risk consumption, investment,
measurement includes not just welfare, and energy demand)
the hazard value (i.e., flood depth) alongside population, energy,
but also the associated asset materials, natural resources,
vulnerability that determines the and environmental variables.
damage and disruption risk that The tool will support companies
those assets will face due to the in their decisions on funding
hazard. OS-Climate gathers many transition projects to reduce
climate hazards and vulnerability global emissions. It will also enable
models in one place that can serve asset managers and banks to
risk measurement use cases. reallocate finance and investment
toward those companies and their
The Transition Analysis tooling projects.
(WITNESS and SOSTrades
systems) allows organizations to The Portfolio Alignment Implied
(1) perform multiple transition Temperature Rise (ITR) tool
scenario assessments, analyzing evaluates how investment
trade-offs / business cases, decisions can contribute to long-
(2) optimize investments vs. term climate goals—and whether
objectives (e.g., what investment the individual company and
in energy production is needed to portfolio behavior exceed net
maximize economic development zero budget expectations. The
while minimizing emissions cumulative emissions relative to
under resource constraints), (3) this budget at a global level inform
assess the value and impact of what temperature outcome the
energy production technologies world is likely to reach. As a result,
on resources, and (4) project the tool's mechanics are designed
the global economic evolution, to compare forward-looking

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 97
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

emissions trajectories against OS-Climate believes that our

IMAGE BY REDCHARLIE: UNSPLASH

benchmark climate scenarios science-based models and
and convert those cumulative methodologies, combined with our
emissions into a temperature open source code, will provide a
outcome. The Portfolio Alignment higher level of transparency and
Tool can support any sector- trust, helping address concerns like
specific benchmarks to compare green-washing. As the community
against financial institution makes further enhancements to
portfolios. So far, the One Earth the analytic tools and our public
Climate Model (OECM) and data utility grows, regulators
Transition Pathway Initiative can better manage systemic risk
(TPI) benchmarks have been related to climate. The broader
implemented. sustainable finance community
can also accelerate the “top of
OS-C’s community continues stack” development of innovative
to grow, and OS-C is gaining tools, investment strategies, and
ground in driving climate-aligned financial products.
investment decisions. Members
and the broader sustainable
finance community are using
our data and tools to evaluate
the physical risks of millions of
assets in their portfolios, the
carbon footprint of sovereign
debt portfolios, and the transition
strategies of real-economy
companies and sectors. Finally,
the Data Commons architecture
fosters transparency and trust by
managing climate and financial
data like software code.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 98
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

Green Software
AgStack
Foundation (GSF) The AgStack project aims to
provide digital infrastructure for
integrity is the focus of the data
infrastructure work at AgStack.
Now in its second year as a To bring the developer along on
food and agriculture as a “digital The asset-registry project is a
Traditional-mode Specification the carbon awareness journey, the
public good.” Just like the world key step in that direction.
program, the GSF has become GSF released its first Developer
of computing runs on Linux, the
a significant force in the Green Training programs. These AgStack’s “asset-registry” project
world of food will eventually run
Software ecosystem and is helping programs help developers put has been recognized (including
on AgStack.
define emissions standards for these green software principles through a grant by the German
software. The GSF achieved several into practice. The ultimate goal of AgStack government) by much of the
milestones in that short period, is to enable the world’s food agriculture ecosystem as a
adding 38 member organizations The GSF has created a coherent
production to become more “necessary innovation” for
and nearly 800 participating plan of engaging policymakers,
equitable, secure, sustainable, spatially indexing agricultural
members. industry verticals, and climate-
and profitable to producers and fields at the Earth scale. This
action committees to ensure
consumers alike. would be especially valuable
GSF has published its first Green Software is included in
for small-holder farmers in
production release of the Software the decarbonization agenda. Each day, more than 50% of developing nations. The project
Carbon Intensity (SCI) specification. This includes participation in our planet’s population is aims to leverage various open
This specification allows developers COP-27 and software hackathons engaged in making our food. source tools, cryptography, and
to calculate the rate of carbon to demonstrate Green coding The sequence of work from web service architectures to
emissions for a software system. principles. seed to sow to harvest to provide a public API for geo-
processing to transportation registration and validation of
to market is complex, fragile, agricultural fields. The use cases
and highly inefficient. Digitizing range from informing crop
this workflow and making it insurance claims to generating
more accessible, frictionless, satellite data with a single
and ubiquitous while ensuring address.
neutrality, security, and data

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 99
 MAKING AN IMPACT ON PEOPLE AND THE PLANET

OpenTreatments and RareCamp

In March 2021, the Linux The RareCamp open source project

Foundation announced that it provides open governance for the
would be hosting RareCamp and software and scientific community
the OpenTreatments Foundation. to collaborate and create software
RareCamp is developing software tools to aid in creating treatments
platforms that reduce barriers to for rare diseases. With funding
developing treatments for rare from the Chan Zuckerberg
genetic diseases, regardless of Initiative, OpenTreatments
rarity and geography. Foundation is using RareCamp's
open governance infrastructure to
400,000,000 patients worldwide collaborate and build a software
are affected by more than 7,000 product to count the number
rare diseases, but more than of patients diagnosed with rare
95% of rare diseases do not have diseases. The project is being
an approved treatment. New built in collaboration with
treatments are estimated to cost researchers from Macquarie
more than $1 billion to develop. University in Australia, software
developers based in the U.S.,
and biotech institutions. Once
released to the public, this
software platform will catalyze the

IMAGE BY LOUIS REED: UNSPLASH

development of treatments for
thousands of neglected rare and
genetic diseases.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 100

 MAKING AN IMPACT ON PEOPLE AND THE PLANET

Linux Foundation Public Health

arena of digital health public The Global COVID Certificate open source security, and the
goods and the applicability of open Network (GCCN) and standard healthcare sector has been no
source software for health, social developments undertaken through exception. LFPH, in conjunction
services, and life sciences. the COVID Credentials Initiative with OpenSSF, has been
(CCI) have transitioned to a developing tools and growing
Since its launch in 2020, over project with the UN Development participation with medical device
50 jurisdictions worldwide have Programme (UNDP). manufacturers and healthcare
trusted LFPH for unbiased, clear organizations to develop tools for
guidance on taking advantage of LFPH has grown our collaboration securing medical devices critical
open source technologies within with other Linux Foundation for life safety and improving
our program areas of exposure initiatives to promote open source in critical infrastructure protection
notification and COVID credentials. new areas of digital health, such as: in collaboration with the CISA, the
In 2022, we convened over 30 state FDA and industry groups.
⊲ Artificial Intelligence (AI) and
public health authorities monthly
Machine Learning (ML)
in our Disease Investigative While COVID-19 is not going
Technology Collaborative (DITC). ⊲ “Digital Twins” in healthcare anywhere, LFPH is charting a path
Linux Foundation Public Health
(LFPH) hosts, supports, and National and global institutions forward beyond the pandemic
⊲ Augmented Reality (AR)/
nurtures open source technology such as the WHO, the CDC, the UN, response. The pandemic has
Virtual Reality (VR) and Digital
to benefit digital health public and the E.U. have also invited LFPH highlighted the need to overhaul
Therapeutics
goods and public health initiatives. to present at meetings, contribute digital health, virtual care, and
to reports, and assist them in ⊲ International collaboration in the supporting public health
Founded two years ago during the understanding this technology. health information exchange infrastructure worldwide to create
global pandemic, the organization LFPH has presented at over a ⊲ “Cloud native” efforts for elec- better ways to share data within
has become a go-to resource dozen national and international tronic health records and across borders. Open source
for governments and industry health conferences in the U.S. and software will deliver better health
partners to get advice on the latest the E.U. As this Annual Report has equity, security, and population
technologies. Our collaborative highlighted, the Linux Foundation health challenges.
efforts have put the Linux Meanwhile, LFPH projects and has been at the forefront of
Foundation into the international initiatives continue to grow. leadership and contribution to

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 101

Hyperledger Foundatio MAKING AN IMPACT ON PEOPLE AND THE PLANET

Climate change initiatives

There is an active and growing movement across the Hyperledger community to leverage open
source, enterprise-grade blockchain technologies to fight climate change. Below are two great
examples, both tied to efforts to track and, eventually, reduce carbon emissions in the mining
and oil & gas industries:

⊲ The Energy and Mines Digital Trust (EMDT), established by ⊲ In August 2022, IBM announced that the Reduce
the government of British Columbia, has been testing and Methane Emissions with Supply Chain Tokens prototype
refining their technology and governance through multiple built by members of Hyperledger’s Climate Action and
pilot projects to demonstrate how sustainability reporting Accounting Special Interest Group (CA2SIG) was awarded
can be made more efficient and trustworthy. Two pilot first place in the 2022 IBM Call for Code Green Practices
projects explore reporting greenhouse gas emissions in Accelerator. Each year, the IBM Call for Code challenge
the mining and natural gas sectors. These pilots allow seeks the most creative and innovative solutions to help
participants to test sharing and receiving digital credentials address issues of sustainability.
that include verified GHG emissions data for a specific mine
site or natural gas facility.

Digital trust ecosystem: Greenhouse gas mining pilot

LEGEND
Digital credentials
Greenhouse gas
emissions report
verification credential
Digital wallet technology
Traction

Northern Block

ACA-Py integration

Because this is a pilot, the process depicted in this diagram does not satisfy or replace
existing regulatory reporting obligations.
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 102
Innovating with hardware,
embedded, dependable,
and IoT systems

The Linux Foundation fosters innovation by

building communities for open hardware and
real-time embedded systems and creating best
practices for safety and confidential computing.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 103

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

RISC-V International
RISC-V membership increased by itive architecture across the full
over 20% during 2021, with growth computing spectrum.
evenly distributed across North
⊲ New working groups:
America, the E.U., and APAC.
We formed groups to address
The contributions and commitments
topics like vector cryptography,
of the RISC-V community in 2022
ML/AI & graphics, automotive,
include historic technical progress,
and confidential computing.
industry innovation, and traction
of commercial solutions. ⊲ Draft specifications: We pub-
lished drafts for RISC-V profiles,
This year's engagement in RISC-V advanced interrupts, and an
work groups and committees has updated application binary
grown by 20% to roughly 10,000 interface to increase modular
individuals. RISC-V anticipates that, design opportunities and enable Krste Asanović, Board Chair, Chief Architect, SiFive.
in 2022 alone, there will be over 12 applications to migrate easily to
billion RISC-V cores on the market. RISC-V.

⊲ Developer board program: In

RISC-V program highlights this year
2022, we launched a developer
include the following:
board program that provides
⊲ New ratified extensions: RISC-V developers with the latest
After ratifying 16 extensions in RISC-V hardware to support their
December 2021, we are con- software development projects.
tinuing to ratify six more ex-
⊲ Media updates: Our media,
tensions in 2022. These exten-
social, web visits, and online
sions include Vector, Bitmanip,
presences continued to increase
Cryptographic, and Hypervisor,
due to sharing content, coor-
reflecting the accelerated trac-
dinating amplification efforts
tion of RISC-V as a highly compet-
2021 RISC-V Technical Awards.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 104

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

with the community, spreading Intel, Ministry of Electronics

Commits by new contributors
The count of the total number of commits by new contributors. New contributors are
ecosystem successes across & Information Technology,
defined as those who did their first code activity (commits/PRs/changesets) or submitted events and online content, and Qualcomm, Rivos, Seagate,
their first bug or resolved their first bug during the selected time period. focusing on the messaging and Synopsys, VMware, and a new

140
cadence of communications to RISC-V Alliance with the MIPI
An average 88 strengthen conversations. We Alliance.
120 commits were
pushed by saw a sustained uptick in page
100 new contributors ⊲ New in RISC-V learning:
during the visits to Specifications (up 10%)
80 last year. RISC-V Toolchain & Compiler
and Blog (up 17%). Very positive
60 Optimization Techniques
media coverage increased media
40 Commits by new (LFD113x) currently has over
contributors by 17%.
20 300 learners. We now have over
0 ⊲ New visibility programs: The 14,558 total learners across five
Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct
2021 2021 2022 2022 2022 2022 2022 2022 2022 2022 2022 2022 year 2022 saw the 2.0 launch of online courses for RISC-V. We are
RISC-V Exchange, hosting the also developing two new cours-
hardware, software, services, es and a certification program
and learning offerings in the in partnership with LF Training.
RISC-V community. RISC-V mentorships: A total of
15 mentorships took place in
⊲ New members & alliances: We
2022 on the LFX platform. This
added dozens of new members
year also saw the launch of the
from around the globe. Many
first annual RISC-V Virtual Career
members have upgraded to
Fair, providing general informa-
Premier level, including Beijing
tion about RISC-V, education for
Institute of Open Source Chip,
students looking for jobs, and an
Futurewei, Haihe Laboratory
opportunity for RISC-V members
of Information Technology
to showcase their company and
Application Innovation,
recruit students.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 105

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

OpenPower
In 2022, The OpenPOWER servers for remote management
Foundation continued to applications and run proprietary
execute its long-term strategy of software. The LibreBMC project
accelerating the development of delivers a fully open hardware
the most open, mature, and high- stack based on POWER running
performance CPU architectures by openBMC software installed
creating the necessary community on OCP’s open source DC-SCM

IMAGE BY COLIN BEHRENS: PIX ABAY

tooling and initiatives to build a module card.
vibrant open source hardware
ecosystem. The market opportunity of a fully
open, secure BMC did not go
The OpenPOWER Foundation unnoticed. One startup, Axiado,
welcomed new members became a new member and is
dedicated to expanding adoption commercializing the LibreBMC
of the POWER ISA, including Red solution as a new chip for
Semiconductor, a startup focusing hyperscalers, datacenters, and barrier to entry and a potential
on developing a new POWER CPU edge computing providers. avenue for dramatic increases
and associated IP for others to in the experimentation and
consume, and 21Unity, a cloud The foundation continued its push
collaboration of hardware projects.
software and hosting company into open chip manufacturing with

building new POWER-based its sixth manufacturing run of the OpenPOWER is expanding its
servers. POWER-based Microwatt CPU core community-supported HUB
using a fully open process design providers globally and offers free
The foundation’s LibreBMC SIG kit (PDK) on Skywater Foundry’s remote access to POWER-based
working group is continuing its 180 nm process nodes. This servers to enable developers
development of the first fully open program’s success means they are working on porting software to
baseboard management controller looking to open more advanced access the POWER platform.
(BMC). BMCs are typically stored in process nodes soon, creating a low

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 106

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

CHIPS Alliance
CHIPS Alliance continues to nurture hardware, process design kits, and design kits, and EDA are founda- ⊲ In conjunction with the
and grow a robust hardware EDA tooling. During the last three tional pillars. University of Michigan, the
community as companies and years, CHIPS experienced a 132% analog workgroup accomplished
⊲ We presented four seminars on
universities look for ways to increase in contributor strength three chip tape-outs using
CHIPS Alliance and how open
increase their participation in this (see table below). Michigan’s open source analog
hardware is accelerating innova-
new ecosystem. CHIPS currently design platform OpenFASoC and
tion and time to market.
has 40 international members. Key highlights of the past year the DARPA-funded open source
That number continues to grow include: ⊲ We led two technical seminars digital platform OpenROAD using
as companies look for new ways on CHIPS Alliance development the Skywater 130 open source
⊲ We participated in the keynote
to accelerate innovation and time activities. PDK. Below is a picture of the
and panel at the 2022 Design
to market by leveraging what has generated layout:
Automation Conference in San
already been done and is available Francisco, where open source
in the open source community. hardware was the event's
CHIPS is diligently working to cornerstone. Democratization of
become the trusted supplier hardware design is a key theme.
and champion of open source Open source hardware, process

Contributor strength
The growth in the aggregated count of unique contributors analyzed during the selected
time period. A contributor is anyone who is associated to the project by means of any
code activity (commits/PRs/changesets) or helping to find and resolve bugs.
2000
1800 The
contributor
1600 strength
1400 increased
1200 by 131%
during the
1000
last three
800 years.
600
400
200
0
Jan Apr Jul Oct Jan Apr Jul Oct Jan Apr Jul Oct
2020 2020 2020 2020 2021 2021 2021 2021 2022 2022 2022 2022

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 107

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

o We continued to evolve the aims to continuously test ⊲ There was evolution/broadening We look forward to another
CHISEL design language and various FPGA tools and gen- of the AIB chiplet protocol eco- year of growth, contribution,
compiler with several new erate reports presenting the system with UCIE. collaboration, and excitement
releases. results, including the run- as we move into 2023.
⊲ In 2022, CHIPS championed
time, quality of results, and
⊲ The F4PGA workgroup continues several design languages
resource usage. Recent work
to make tremendous progress, and introduced a universal
focuses on stabilizing the
expanding the synthesis, place- hardware data model (UHDM)
framework and parallelizing
ment, routing, and timing of as a central software framework
the tests.
designs using open source tools for different language schemas
across several vendor FPGA plat- o We enhanced the fpga_inter- enabling applications to
forms. Some highlights of their change format support access them via a common API.
activity include: for the Xilinx Series 7 and A high-level architectural repre-
UltraScale+ architecture sentation of the system is below:
o System Verilog support
FPGAs.
for the open source logic Design language framework
synthesis tool Yosys in the o We added initial support of
form of a plugin (repo: the fpga_interchange format
https://github.com/antmi- to the vtr-verilog-to-rout-
cro/yosys-systemverilog; ing (https://github.com/
https://antmicro.com/ verilog-to-routing/vtr-veril-
blog/2022/02/simplify- og-to-routing) project.
ing-open source-sv-synthe-
sis-with-the-yosys-uhdm- o An ongoing effort is to
plugin/). consolidate the scripts and
utilities that compose the
o We donated F4PGA F4PGA ecosystem. A Python
projects to the CHIPS package was created in
Alliance organization. chipsalliance/f4pga (https://
github.com/chipsalliance/
o We improved the F4PGA
f4pga) to facilitate installa-
tool perf project (https://
tion and version control of
github.com/chipsalliance/
the utilities.
fpga-tool-perf). The project

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 108

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

Open Programmable Infrastructure (OPI)

Announced in June 2022, OPI will foster a The project intends to:

IMAGE BY SLEJVEN DJURAKOVIC: UNSPLASH

community-driven, standards-based open
⊲ Define DPU and IPU
ecosystem for next-generation architectures
and frameworks based on data processing ⊲ Delineate vendor-agnostic frameworks
unit (DPU) and infrastructure processing and architectures for DPU- and IPU-based
unit (IPU) technologies. OPI is designed to software stacks applicable to any hardware
simplify network, storage, and security APIs solutions
within applications to enable more portable
⊲ Enable the creation of a rich open source
and performant applications in the cloud
application ecosystem
and datacenter across DevOps, SecOps, and
NetOps. ⊲ Integrate with existing open source projects
aligned to the same vision, such as the Linux
OPI will help establish and nurture an open and kernel
creative software ecosystem for DPU- and IPU-
⊲ Create new APIs for interaction among the
based infrastructures to support high-speed
elements of the DPU and IPU ecosystem,
network capabilities and packet processing
including hardware, hosted applications,
for applications such as 5G, AI/ML, Web3, and
host node, and the remote provisioning and
crypto. As various vendors offer more DPUs and In addition, NVIDIA DOCA, an open source
orchestration of software
IPUs, the OPI Project seeks to help define the software development framework for NVIDIA’s
architecture and frameworks for the DPU and With several active working groups, initial BlueField DPU, will be contributed to OPI to
IPU software stacks that can be applied to any technology contributions will come in the help developers create applications that can
vendor’s hardware offerings. Infrastructure Programmer Development be offloaded, accelerated, and isolated across
Kit (IPDK), an open source framework of DPUs, IPUs, and other hardware platforms.
drivers and APIs for infrastructure offload and
management that runs on a CPU, IPU, For more information, visit
DPU, or switch. https://opiproject.org; start contributing here:
https://github.com/opiproject/opi.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 109

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

Automotive Grade Linux

Automakers have become tech already integrated the AGL platform

companies with the advent of into their production plans.
connected and autonomous
vehicles, but lengthy production AGL Unified Code Base
cycles hinder them from Built from the ground up by the
innovating at the speed of the AGL community, the AGL Unified
tech industry. Many automakers Code Base (UCB) is an open
have started incorporating open source software platform that
source software and Automotive includes an operating system,
Grade Linux (AGL) to keep pace middleware, and an application
with new technology and emerging framework, providing 70% of the
trends to enable more rapid, agile starting point for a production
development. project. With major contributions
from automakers and suppliers, An open source project at the Linux Foundation, AGL unites the automotive
With over 150 members, including and tech industries around shared software for all in-vehicle applications,
the UCB can serve as the de
11 automakers, AGL unites the from infotainment to autonomous driving,
facto industry standard for
automotive and tech industries
infotainment, telematics, and
around a shared software platform The AGL community continuously Toyota’s embedded automotive
instrument cluster applications.
to reduce the fragmentation evaluates open source version of Flutter (initially developed
Sharing an open source platform
that has plagued the automotive technologies for automotive by Google) with cutting-edge UI
enables code reuse and a more
industry for decades. use cases to ensure that best- and app development framework
efficient development process, as
developers and suppliers can build in-class software is integrated for infotainment systems, which
AGL-based infotainment systems
their solution once and deploy into the platform. In 2022, AGL will allow manufacturers to cut
are available globally in Toyota,
that same solution for multiple began transitioning to newer the development time and cost of
Lexus, and Subaru vehicles. More
automakers. technologies, including VirtIO for deploying new applications in
should appear over the coming
cloud-native AGL applications and the vehicle.
years, as many AGL members have

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 110

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

AGL had the following two Expert Group: Led by AWS, this An open source project at
milestone platform releases in EG is developing an in-vehicle the Linux Foundation, AGL
2022: UCB 13 “Magic Marlin” container solution for AGL and unites the automotive and
and UCB 14 “Nifty Needlefish.” creating a service mesh and tech industries around shared
AGL UCB 14 is based on Yocto orchestration framework that’s software for all in-vehicle
Long Term Support (LTS) 4.0, and deployable as part of AGL. The applications, from infotainment
AGL UCB 13 is based on LTS 3.1. goal is to standardize the deploy- to autonomous driving.
These releases included several ment of software in the vehicle
updates to graphics, audio, speech and simplify deployments of up-
recognition, application and grades and continuous updates.
security frameworks, web apps,
⊲ Virtualization Expert Group:
and Chromium.
The consolidated cockpit is a
vision for the future under
Software Defined Vehicle development at AGL today.
As the lines between embedded Led by Panasonic, the
automotive software and IT/cloud Virtualization EG focuses on
continues to blur, AGL is paving cockpit software consolidation
the way for the Software Defined with VirtIO technology, enabling
Vehicle. AGL is the only neutral systems such as infotainment, “As the lines
organization planning to address instrument cluster, and heads-
between embedded
all in-vehicle software, including up displays to run on a single
infotainment, instrument cluster, processor. This also enables use automotive software
telematics, heads-up display, cases such as running Android
advanced driver assistance for infotainment and AGL for and IT/cloud
instrument clusters side by side
systems, and autonomous driving. continues to blur,
on a single virtualized CPU.
The following three AGL expert
⊲ Vehicle to cloud Expert Group:
AGL is paving the
groups (EGs) will address the
growing complexity of automotive
As high-speed connectivity way for the Software
becomes ubiquitous, this EG
software and the “cloudification” of
evaluates how to move more Defined Vehicle.”
the vehicle:
functionality to the cloud and
⊲ Container and service mesh extend automotive use cases.
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 111
 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

Trust over IP Foundation

The Trust over IP Foundation ⊲ We began a presentation series
(ToIP) Foundation aims to provide within the Ecosystem Foundry
a robust, common-standard, and working group that features
complete architecture for Internet- presenters discussing gover-
scale digital trust. nance in SSI ecosystems with
Trust Registries, ecosystem g
In 2022, we are expanding our overnance under development,
foundation by introducing a verifiable credentials and exploring
new working group for Data talent in the marketplace.
Modeling and Representation.
⊲ We launched a new website and
The scope of the Data Modeling
web series to feature community
& Representation Working
members and their work in the
Group (DMRWG) is to define the
field related to ToIP.
specifications, best practices,
and standards related to data
modeling, plus logical and concrete IMAGE BY JOSHUA SORTINO: UNSPLASH

representations regarding how to

store, process, and transmit data split into one or more task forces
across all aspects of the ToIP stack ⊲ We evolved design
and focus groups on escalating
and whether these standards are principles and deliverables
the development of specific
hosted at the Linux Foundation or to include Principles of SSI,
components.
externally. Design Principles for the ToIP

The 2022 ToIP Foundation Stack, Authentic Chained Data

Other activities will include Container Specifications, and
highlights include the following:
creating template requests for the ToIP Technology Architecture
proposals and additional guidance ⊲ We hosted the first ToIP Summit Specification.
for utility and service providers in Dublin during OSS Europe and

regarding implementations in that had over 200 registrants.

capacity. The working group will

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 112

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

The Confidential Computing with regulators to create Linux is a reliable and and the recently launched
focus on the Automotive
Consortium (CCC) brings regulations for confidential stable development Systems WG.
Working Group and a new
together hardware vendors, computing. In addition, they platform that advances Aerospace Working Group.
cloud providers, and are finalizing a confidential innovation for a wide The Systems WG will
Confidential Computing Consortium

software developers to computing terminology range of industries. As Adding Automotive create a reproducible
accelerate the adoption whitepaper and launching a Linux continues to be a Intelligence and Control reference system based
of trusted execution fresh new website. key component in safety- of China, Bosch, LOTUS on real-world architectures
environment technologies related applications, Cars, and ZTE strengthened and implement it fully
and standards. Veraison is the newest based on open source
Enabling Linux in Safety the global ecosystem for
project added to the technologies. The goal is
Applications (ELISA) automotive use cases. This
The CCC had a great year, consortium, building to enable safety use cases
will make it easier for includes one collaboration
adding new members and components that can be with open source software
companies to build, test, with Automotive Grade
bringing more awareness used for an Attestation or use mixed-criticality
and analyze these safety- Linux focused on the “safe
to confidential computing. Verification Service. system elements as a base
critical systems. displaying of warning signs
The CCC had a presence at for their product lines.
Join the Confidential on instrument cockpits,”
Black Hat and Defcon in Las Since its launch in 2019,
Computing Consortium also called the "Tell-tales
Vegas, NV, with over 30,000 ELISA has established The project’s momentum
and find out how Use Case.”
attendees; at the event, several working groups continued this year as
we educated attendees confidential computing is ELISA hosted five virtual
to further the cross- Boeing joined the project
about the consortium and relevant to you. and in-person workshops
industry project’s crucial to launch a new Aerospace
confidential computing. work toward advancing WG and enforce a standard and webinars that brought

open source safety-critical in an industry already together more than

The CCC created a 400 industry thought
systems. The activities using Linux in selected
new governance, risk, leaders and open source

ELISA
and goals of these groups applications. Boeing will lead
and compliance SIG to community members.
became evident this year the group and collaborate
focus on connecting
when six new members with other working groups,
development communities
joined the project to such as safety architecture

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 113

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS
Yocto Project

The Yocto project builds, Supporting this diverse user base, From eight members on its first Through membership fees and

seL4
customizes, and combines Linux the project has extended its first birthday in April 2021, the seL4 further financial contributions

and other operating systems as long-term stable (LTS) release, Foundation has grown to 20 full from government and industry

needed to meet the ever-changing which now covers four years. It members (including six premium) members, the seL4 Foundation is

needs of a connected world in a has successfully engaged with and five associate members in the funding work on extending seL4’s

maintainable and scalable way. the broader community through space of a year. This represents a unique mathematical correctness

It appears in cars, TVs, routers, physical and dedicated virtual dramatic boost to the open source proofs from 32-bit Arm, 64-bit

telecoms, aerospace, satellites, (summit) events, allowing access ecosystem around the world’s Intel, and RISC-V architectures to

server management, and more. to and collaboration with a new most-assured operating system the 64-bit Arm architecture, as
audience. kernel, seL4. The effectiveness well as exploratory work toward
Having anticipated the need for of the kernel’s security was proving correctness on multicore
supply chain audit and security, the demonstrated at Defcon 2021, processors. Moreover, community
project has world-leading Software where seL4's formally verified contributions to the code base
Bill of Material capabilities building security enforcement defeated the have increased sharply.
on standards, such as SPDX and assembled hacker elite trying to
the project's own powerful build attack the quadcopter developed
reproducibility technology. This in DARPA’s HACMS program.
is all integrated into the project's
tooling, supporting a wide variety
of public and private ecosystems,
including Automotive Grade
Linux (AGL), OpenBMC, Comcast's
Reference Design Kit, and Huawei's
OpenHarmony.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 114

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS
Zephyr

If you use a distance tracker, example, T-Mobile is leveraging ⊲ It has hosted its second Zephyr jobs, including a vendor offering
smartwatch, hearing aid, or new Zephyr to power its new Developer Developer Summit in person at support showcase that can be
Google Chromebook next year, Kit, which was launched in April the Computer History Museum filtered by tools, applications,
you may have interacted with and gives innovators fast and in Mountain View, California, and and training, and continued
the Zephyr Real-time Operating easy access to build on T-Mobile’s virtually for attendees around refinement of the product
System (RTOS). Zephyr has gained network. the globe. The event consisted creators' vulnerability registry.
momentum over the last few of more than 380 registrants,
This year, Zephyr welcomed ⊲ The Zephyr Project was list-
years. It is now deployed in various four tracks, two mini-confer-
Baumer, Qualcomm Innovation ed in the #22 top projects
embedded products, focused on ences, two tutorials, 54 sessions,
Center, Inc., and T-Mobile as in a Velocity report by prs
wearables, medical electronics, and 58 speakers who present-
Platinum members and Infineon and seventh out of the Linux
and industrial control equipment, ed engaging technical content,
Technologies, Percepio, and Foundation’s top projects.
as shown on the website. best practices, use cases, and
Silicon Labs as Silver members. more. Videos are available on
Zephyr RTOS unites companies, the Zephyr Project Youtube
developers, and end users In 2022, Zephyr’s technical
Channel.
worldwide to ensure balanced community achieved several
milestones, including the following: ⊲ In the year since Zephyr made
collaboration and feedback to
the switch from Slack to Discord,
evolve and meet the needs of ⊲ It has celebrated more than
the community grew to more
its community. This innovative 1,400 contributors and 75,000
than 3,700 members in the new
relationship among stakeholders commits to building ad-
discussion forum, with an esti-
advances the Zephyr Project’s vanced support for multiple
mated 8,000+ messages being
support of new hardware, architectures, including Arm®
sent each month.
developer tools, sensors, and Cortex®-M, Intel x86, ARC,
drivers while maximizing the NIOS II, Tensilica Xtensa, and ⊲ Zephyr highlighted member
functionality of devices that run RISC-V, and more than 400 solutions and opportunities
applications developed using the boards, which has doubled this year through a new career
Zephyr operating system. For since last year. resource highlighting technical

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 115

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

From consistency across Mainframe Software Division, to launch its Long-Term Support ⊲ The COBOL Working Group
architectures and distributed the mainframe will be available (LTS) V2 release this year, result-
Open Mainframe Project

conducted a survey last year

datacenters to tighter security, for all Open Mainframe Projects ing in the 2022 DevOps Dozen that confirmed an estimated
better resource utilization, and the open source community competition awarding Zowe the 250 billion lines of COBOL code
and reduced administration, in 2023. This provides a critical Best DevOps for Mainframe running the world economy,
the benefits of mainframe new resource to foster greater Award. suggesting there is a dire need
modernization can address today's collaboration and the development for programmers, among other
⊲ Aiming to build a vendor-neu-
IT challenges. Open Mainframe of new toolsets across the details. This year, the COBOL
tral ecosystem around Zowe,
Project is helping modern mainframe community. WG partnered with Linux
Open Mainframe Project’s
mainframes transform today’s Foundation Research and
Zowe Conformance Program
businesses through its many open Open Mainframe Project’s work Linux Foundation Training and
launched in 2020. The program
source projects and educational as an open innovation pipeline Certification on a new research
helps project members, includ-
programs. enables organizations to gain the study to explore a detailed
ing ASG Technologies, BMC,
most value from their mainframe. understanding of how organi-
Broadcom, IBM, Micro Focus,
Several technical communities Several projects and programs hit zations’ usage of COBOL has
Phoenix Software International,
test their open source code on major milestones, including the evolved and what strategies and
and Rocket Software, incorpo-
hardware, with over 20 projects following: attitudes are driving change in
rate Zowe with new and existing
and working groups under the the future. The program will
⊲ Zowe is an open source software products that enable the integra-
Open Mainframe Project umbrella. begin in January 2023, and the
framework for the mainframe tion of mainframe applications
In September, Open Mainframe results will be published at Open
that strengthens integration with and data across the enterprise.
announced the availability of a Mainframe Summit 2023.
modern enterprise applications To date, 75 products have im-
z15 mainframe system dedicated plemented extensions based on
and offers vendors and custom- On September 21–23, Philadelphia,
to training next-generation talent the Zowe framework and earned
ers product stability, security,
PA, became an open source
and developing new open software these members conformance
interoperability, easy installation,
and mainframe hub as more
technologies to strengthen the and upgraded features. The badges.
than 300 students, engineers,
mainframe and cloud integration Zowe community worked hard
and developers attended the
further. Donated by Broadcom

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 116

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS

Dronecode
Civil Infrastructure Platform

first-ever in-person and virtual The Open Mainframe project will all SLTS versions for 10 years after
Open Mainframe Summit. The continue evolving its mission as the the original release.
event included a streaming option primary foundation for community
so that global participants could engagement and scale it across In late June, the Dronecode

network with their colleagues, ask the ecosystem of vendors and Foundation, the vendor-neutral

questions, and learn more about academic partners and the next foundation for open source

all aspects of security, mainframes, generation of mainframe talent. drone projects, held its annual

and beyond, including cloud native PX4 Developer Summit in Austin,

services, automation, software The Civil Infrastructure Platform Texas, for the first time in person

supply chain management, and (CIP) is focused on hardening since 2019, gathering developers

more this year. Linux to enable its use in civil from 37 countries. June also saw
infrastructure (e.g., energy, the stable release of PX4 Autopilot
transportation, healthcare) and v1.13.0, which featured new
industry. CIP is addressing security, hardware and sensor support,
long-term kernel maintenance critical battery functions, and the
and core components, automated truly amazing Dynamic Control
testing, and remote updates to Allocation for complete 360-degree
enable adoption and broader use. flight control. This year, the
CIP now supports Debian 11-based advanced air mobility startup
reference images and is working Kittyhawk joined the Dronecode
on IEC 62443 security standard Foundation as a silver member.

IMAGE BY K AL VISUALS: UNSPLASH

compliance and reproducibility. In They will contribute to developing
2022, CIP expanded work on super distributed and modular sensor
long-term supported (SLTS) kernel systems that are utilized by electric
maintenance. Linux kernel 5.10 is vertical take-off and landing.
now supported, along with 4.4 and
4.19. CIP commits to maintaining

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 117

 INNOVATING WITH HARDWARE, EMBEDDED, DEPENDABLE, AND IOT SYSTEMS
Open Voice Network

The Open Voice Network (OVON) allow conversational assistants statements and whitepapers on
is a Linux Foundation open to find desired destinations and, these and other topics. Access
source association dedicated to in turn, allow others to find their these documents at https://
developing and advancing open addresses and content. www.openvoicenetwork.org/
standards for the emerging world white_papers.
⊲ Personal data protection
of voice assistance. unique to voice: Enables users
to manage the control, access,

IMAGE BY KETUT SUBIYANTO: PEXELS

Currently, its work is driven by
and use of voice-based data.
more than 200 monthly active
volunteers across 13 nations. ⊲ Data security unique to voice:
This is a critical issue in a
Voice is on track to be a primary world of digital synthesis,
digital interface in the years ahead. personal authentication,
We foresee the development and interoperability.
of a worldwide voice web, an
⊲ The ethical use of voice tech-
ecosystem measured in billions of At present, the OVON focuses on
nologies: Companies offering
voice-enabled digital destinations, the following areas of research and voice services in their products
ranging from the applications now development: now must ethically ensure the
on general-purpose platforms
⊲ Interoperability of conversa- processing of user data.
to voice-enabled websites to a In the first quarter of 2023, the
tional assistants: This enables ⊲ Voice-centric authentication:
metaverse that will increasingly Open Voice Network expects to
assistants of different platform This is not only for individuals
be explored and lived in through publish draft specifications of
parentage to fulfill user intents but also for destinations in a
user utterances. Voice assistance the interoperability messaging
by passing textual, acoustic, worldwide voice web.
is, at its heart, an application of protocols that will allow the
and contextual data from one
AI and ML; its leading specialties sharing of dialogs.
to another. Moreover, within an Through 2022, the Work Groups
are automatic speech recognition
approach to interoperability, des- of the Open Voice Network
and natural language processing,
tination and location services will have published directional
understanding, and generation.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 118

Innovation in open standards

While best known for its Open Source Software

projects, the Linux Foundation has always
understood that promoting Open Standards is
crucial to extending the power of open source
implementations. Today, the Linux Foundation
boasts over 200 projects engaged in standards
and specification development.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 119

 INNOVATION IN OPEN STANDARDS

Standards and specification development

with a fully formed corporate
identity, governance structure, and
process template strongly appeals
to our community,” said Jory
In 2019, the Linux Foundation Burson, VP of Standards for the
added the Joint Development Linux Foundation. “Traditionally,
Foundation (JDF) to its family of there are months of work to form a
project communities to build upon legal entity for simple collaboration
its current specification work. and a lot of administrative
The JDF brought a unique but overhead to keep it running. Our
straightforward process to allow members appreciate the ability
new projects to form quickly and to move quickly from an idea to
collaborate under a standardized a functioning project in weeks
set of governance principles that rather than months. The Linux
ensure the resulting specification Foundation has invested in Staff,
can be implemented with open Tools, and Process streamlining
source licenses. In addition, the to improve project formation and
JDF is a Publicly Available Standard execution continuously.”
submitter to JTC1/ISO/IEC, which
gives our Standards projects the A sampling of the active LF

ability to submit our specifications Standards projects follows.

to become ISO specifications.

IMAGE BY RUIYANG ZHANG: PEXELS

“In the past year, we have
seen new momentum from
our members wanting to start
Specification projects at the LF. The
idea that a project can start quickly

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 120

 LF Energy Super Advanced Meter
LF Energy Carbon Data Specification Consortium INNOVATION IN OPEN STANDARDS

The Super Advanced Meter standards and requirements pricing and greenhouse gas
specification, organized are intended to boost the emission data on-premises.
The Carbon Data Specification Consortium
under the JDF Community development of the meter A particular focus is put on
(CDSC), organized under the JDF Community
Specification, aims to create as a reliable virtual node in the gateway, which is the
Specification, is developing standards to
a worldwide meter and data the energy grid, enabling smart part; it provides the
enable access to energy data, including a
gateway specification that the energy transition and functionality to connect to
data dictionary for raw data and a standard
focuses on basic metering supporting new business the respective meters and
for data requirements. These standards will
functionality, country- models. The meter design enable communication
simplify access and use of data for measuring,
specific functionality, can measure electricity and toward LAN and WAN and
quantifying, and tracking carbon emissions
third-party functionality, may be further capable of translation between them
from energy producers and consumers. The
and integration capability interfacing with gas, water, via current and future
standards are intended to boost confidence
for system operation and heat meters while standards.
in energy data sources, improve the ease of
applications. These communicating dynamic
data utilization, promote scalability, enable
data aggregation for centralized platforms, and
support and inform decarbonization pathways
and decision-making for the energy grid.

IMAGE BY CHRIS JANDA: PEXELS

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 121
 Quantum Intermediate Representation
INNOVATION IN OPEN STANDARDS
Open19

The Linux Foundation and The year 2022 brought a refresh

The Quantum Intermediate
its community created open to the Open19 standard, with
Representation (QIR) Alliance
specifications for a brick cage that enhancements to the technical
is a joint effort organized
fits into standard 19″ datacenter capabilities while maintaining
under the JDF Community
racks, a variety of server brick the features of blind mate
Specification to develop a
format factors, unique “plug- connectivity for every aspect of
forward-looking quantum
and-play” power and network the installation: simplicity, ease of
intermediate representation
connectors, and a high-efficiency use, and scalability. Additionally,
Open19 8RU Brick Cage
to enable full interoperability
power shelf. the standards group launched
within the quantum ecosystem
four Sub-working Groups for
The Open19 framework enables and reduce the development
power, cooling, mechanical, and
datacenter hardware design that effort from all parties. The QIR
networking.
powers edge, 5G, and custom project collaborates closely
cloud deployments worldwide via In 2022, the Open19 v2 specification with the quantum community
hardware and software. reached the “Release Candidate” to design and implement the
Open19 2U-Open19-SKU MILAN2
stage of their specification, which necessary compiler technology to
The standard has been includes updated data connector accelerate advances in quantum
adopted by leading technology specifications, a new power shelf programming language design
suppliers, datacenter operators, that is 48V native “to the brick,” and and execution systems. The
and enterprise and service a pluggable liquid cooling connector project aims to develop a holistic
provider customers. In 2020, that we expect will massively solution that takes full advantage
the Open19 Foundation joined accelerate the adoption of this of unique and distinct capabilities
the Linux Foundation, bringing powerful technology. The teams are in the landscape of heterogeneous
its community of hardware and now moving into prototyping and quantum processors.
datacenter innovators to the hope to have early working samples
world’s largest open source of much of the specification in late
ecosystem. 2022 or early 2023.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 122

 The Coalition for Content Provenance and Authenticity
INNOVATION IN OPEN STANDARDS
Alliance for Open Media

One of the JDF’s longest-running projects,

The Coalition for Content infrastructure for hundreds of specification with the v1.1
the Alliance for Open Media (AOM), is
Provenance and Authenticity open standards efforts today. release.
developing specifications that offer open,
(C2PA) addresses the
royalty-free, and interoperable solutions
prevalence of misleading In early 2022, the C2PA The C2PA’s work results from
for the next generation of media delivery.
online information by released version 1.0 of its industry-wide collaborations
The Alliance's shared vision is to make
developing technical standards technical specification for focused on digital media
media technology more efficient and cost-
for certifying the source and digital provenance. This transparency that will
effective and of superior quality for all
history (or provenance) of specification is the first accelerate progress toward
users, on all devices, and on all platforms
media content. C2PA is a JDF of its kind. It empowers global adoption of content
using AOM standards and tools.
project formed through an content creators and editors provenance.

alliance between Adobe, Arm, worldwide to create tamper-

AOM has celebrated several
Intel, Microsoft, and Truepic. evident media, enabling
implementations of its AV1 codec from
C2PA unifies the efforts them to disclose who created
companies including Intel, Chip&Media,
of the Adobe-led Content or changed digital content
AWS, Samsung, Google, and Visionular.
Authenticity Initiative. We selectively. In September
The Alliance has also become a hub provide important support and 2022, the C2PA updated the
for innovation by hosting its annual
Research Symposia. Extensions of the

IMAGE BY SABRINA GELBART: PEXELS

AV1 specifications are being defined in
ongoing work in its AV2 specifications,
and the Alliance is also developing
specifications to accommodate
volumetric video.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 123

 INNOVATION IN OPEN STANDARDS

GraphQL
OpenAPI Specification

The Uptane project is an example of how an The OpenAPI Specification (OAS) defines GraphQL is a query language for APIs and a

industry consortium can benefit from the JDF a standard, language-agnostic interface runtime for fulfilling those queries with your

process at no cost. description for HTTP APIs, which allows humans existing data. GraphQL provides a complete and
and computers to discover and understand the understandable description of the data in your
Uptane is incorporated under the JDF capabilities of a service without requiring access API, gives clients the power to ask for exactly
governance structure but operates as a to source code, additional documentation, or what they need and nothing more, makes it
completely volunteer-led effort. Uptane is an inspection of network traffic. The latest version easier to evolve APIs over time, and enables
open and secure software update framework of OAS, version 3.1, added full support for powerful developer tools.
design that protects software delivered over the JSON Schema and the addition of webhooks. ⊲ GraphQL hosted its first-ever community
air to automobile electronic control units. The The webhooks feature allows incoming HTTP conference in June of this year and registered
framework protects against malicious actors requests to respond to external events or
Uptane

eight new memberships following the

who can compromise servers and networks to stimuli. The OpenAPI Initiative is listening conference in Austin.
sign and deliver updates. Hence, it is designed to user feedback to determine the direction
to be resilient even to the best efforts of ⊲ The foundation relaunched its meetup.com
of the next planned release, 4.0, to meet the
nation-state attackers. Uptane is integrated events globally with the support and sponsor-
needs of businesses and organizations better.
into Automotive Grade Linux, an open source ship of member companies and community
We are also investigating ways to broaden
system currently used by many large OEMs, leaders.
our community reach and provide member
and has also been adopted by several U.S. companies with more avenues to connect. ⊲ The foundation is working to drive engage-
and international manufacturers. There are ment by featuring member organizations
multiple free open source and closed source within the community and amplifying the
implementations available. work they're doing across the community.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 124

 INNOVATION IN OPEN STANDARDS
R Consortium

The R Consortium is a group The following are some highlights ⊲ Successfully hosted anoth-
organized under an open source from the 2022 R Consortium: er conference—R Medicine
governance and foundation Conference—with record atten-
⊲ Changed bylaws to expand addi-
model to support the worldwide dance and received sponsorship
tional ISC Board seats to our Silver
community of R software users, to offset overall costs.
members with this bylaw amend-
maintainers, and developers. ment (Silver-level members will ⊲ R Diversity and Inclusion
Its members include leading now elect as members of the ISC team has virtually launched a
institutions and companies as Silver-level directors are serving Francophone SatRdays series to
dedicated to R's use, development, on the Board). help connect the R Community in
and growth. French.
⊲ Held elections to vote on three
The R language is an open source additional seats to the ISC Board ⊲ R Certification is finalizing
environment for statistical of Directors. questions and identifying a
computing and graphics. The R viable host option for the plat-
⊲ Launched a new grant manage-
community has grown significantly, form. They are optimistic that
ment system to manage our
with more than 2 million users the beta will launch before the
grant program.
worldwide. Many organizations end of the year.

have adopted the R language as ⊲ Established two sessions for

⊲ The R Validation Hub submitted
a data science platform, including technical infrastructure grants
a paper to the ASA BIOP journal.
the biotech, finance, research, and and open enrollment for our

IMAGE BY CLAY BANKS: UNSPLASH

social infrastructure grants. ⊲ Social media presence has
high-technology industries. The R
increased with grant recipient
language is often integrated into ⊲ Introduced the idea of initiat-
interviews and promotion for
third-party analysis, visualization, ing a certification program in
grant-sponsored events.
and reporting applications and conjunction with the LF Training
runs on various computing team and aim to vote on this
platforms. formally in Q4.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 125

Unified Patents Open
Source Zone

Defending against patent trolls, protecting Linux

and open source.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 126

UNIFIED PATENTS OPEN SOURCE ZONE

Three years ago, the Linux Unified uses this support to Some of the OSS packages and
Foundation partnered with detect, disrupt, and deter patent tools defended include Android,
Open Invention Network, IBM, trolls from patents covered by the Apache Ambari, Apache Cassandra,
and Microsoft to announce an Zone. Fighting patent trolls takes Apache Cocoon, Apache Hadoop,
ambitious plan to fund an Open years, but, since launch, Unified Apache modules mod_evasive
Source Zone within Unified has already done a lot to change and fail2ban, Apache Traffic
Patents to deter non-practicing the game. Control, Apache Zookeeper,
entities with invalid patents Automotive Grade Linux, Ceph,
So far, it has challenged 50
(“patent trolls”) from asserting ClamAV, DigiKam, Linux kernel
patents with an almost perfect
against OSS packages such as “ip” command, Linux kernel NFS
success rate.
Linux. These trolls often threaten module, iptables, KVM, Magento,
or sue open source implementors ⊲ 34 were invalidated. Nagios, OAuth, OpenACH,
as a way to extract settlements OpenSwan, frredesktop.org’s
⊲ Seven have been initially
given the high cost and uncertainty OpenWFD, QEMU, Quagga, Redis,
determined to be flawed.
of litigation, even though their Rygel, sedutil, Signal, Varnish
patents are almost always ⊲ Three more are awaiting review. Cache, and WebM.
invalidated if challenged. Since its
In addition to the directly
initial funding, Meta, Mercedes-
challenging patents, Unified runs
Benz, and others have provided
PATROLL, the world’s only crowd-
additional support, allowing
sourced prior art contest. Anyone
Unified’s activities and deterrence
can submit prior art against trolls
to increase. In addition, any small
demonstrating their patents
company can join Unified for
are invalid. Even better, winning
free and help support this activity
submitters win thousands of
as well. To get involved, visit
dollars in prize money—over 40
www.unifiedpatents.com/join.
contests have resulted in over 200
submissions and tens of thousands
of dollars awarded. For more
information and to participate, go
to www.patroll.art.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 127

Innovating with artificial
intelligence, machine
learning, data, blockchain,
and financial services

The Linux Foundation continues to foster

leadership and innovation using leading-
edge open technologies and best practices
for financial services and insurance verticals,
as well as developing best-of-breed
artificial intelligence, big data, blockchain,
and distributed ledger tools for the entire
technology industry.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 128

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

Creating communities with

the LF AI & Data Foundation
The LF AI & Data Foundation is growing and supporting
an open community along with an expanding ecosystem.
This umbrella foundation includes open source AI, data,
and analytics projects. We focus on accelerating project
development and innovation by enabling collaboration and
creating new opportunities for all community members.

The Foundation provides a neutral, trusted hub for

developers to code, manage, and scale open source AI and
data technology projects. Our community is growing quickly.
On average, we’re adding one new project per month. At the
time of writing this report, LF AI & Data has 48 members and
hosts 41 technical projects. The projects cover open source
and open standards everyone in the world relies on for AI
and data analytics systems. In addition to hosting technical
projects, LF AI & Data hosts several committees focused on
fostering collaboration among its members on specific topics
such as BI & AI, Trusted and Responsible AI, MLOps, and
DataOps.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 129

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

LF AI & Data by the numbers

Delta Lake
We encourage open source projects to join the
growing roster of LF AI & Data hosted projects
and take advantage of our resources and
Delta Lake is the world's most widely used metadata, and more. With compute engines
emerging community.
lakehouse format. In 2022, Delta Lake monthly including Flink, Hive, Kafka, Presto, Spark, Trino,
downloads skyrocketed skyrocket from and APIs for Scala, Java, Rust, Ruby, and Python,
685K to over 7M. Due to this activity and the Delta Lake enables the building of lakehouse
growth in unique contributions, the Delta Lake architectures on any platform or environment.
project logged an astounding 633% increase in Delta Lake has over 190 contributors across
contributor strength over the last three years. 70 organizations, including Microsoft, Amazon,
Disney, Apple, eBay, Adobe, and SambaTV.
10.5M Lines of Code 68,000+ Delta Lake provides an open source storage
managed across all Pull Requests The project is growing quickly, adding new
hosted projects contributed during framework that offers key features, including
contributors and members weekly.
the past three years time travel, ACID transactions, scalable

17,200+ developers
contributing code to
our hosted projects

41 Projects 550+ organizations

hosted in LF AI & Data participated in code
commits during the
past three years

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 130

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

In June 2022, Delta Lake more connectors. Engineers from

announced Delta Lake 2.0. This various industries and companies
milestone version enabled the have contributed connectors to
community to benefit from the Delta Lake ecosystem. Delta
all Delta Lake innovations, Lake’s commitment to supporting
with all Delta Lake APIs being connectors makes it easy to
open sourced. The wider Delta build ETL pipelines with various
community collaborated to technologies. Building connectors
add features to this version for the most popular compute
like OPTIMIZE ZORDER, data engines and technologies increases
skipping using column stats, S3 the appeal and utility of Delta Lake.
multi-cluster writes, Change This, in turn, will drive community
Data Feed, and more. These new growth and accelerate adoption.
features dramatically improve
performance and manageability Florian Valeye is a Data

compared with previous versions Engineering Manager at Back

and with other storage formats. Market and a contributor to

Completing the work to open Delta-rs, a native Rust library for

source all of Delta Lake while tens Delta Lake:

of thousands of organizations
were running in production was “Contributing to open source
no small feat. Kudos to the Delta is key to learning how to solve
Lake community and its many problems within worldwide,
contributors for making this benevolent communities of people."
possible. – Florian Valeye

The Delta Lake project also has a

vibrant ecosystem of direct open
source connectors. This year,
Delta Lake added connectors
for Presto, Flink, and Trino. The
project is continuously adding

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 131

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

Hyperledger Foundation
OpenHPC

While 2022 has been a of speculative, headline- a once-in-a-generation

year of ups and downs grabbing cryptocurrencies upgrade to the foundational
worldwide, Hyperledger and the actual value of layer for finance, banking,
OpenHPC's mission is to provide a
Foundation marched enterprise-grade blockchain healthcare, supply chains,
reference of open source HPC software
steadily forward, scaling technologies and the manufacturing, technology,
components and best practices,
its ecosystem and team to applications they power. and beyond. Hyperledger
substantially lowering the barrier to
support a growing global technologies are powering
deploying a modern supercomputer. Over the last seven
community and a maturing new payment solutions,
OpenHPC accelerates innovation by years, the Hyperledger
blockchain market. The including central bank
broadening access to open source community has been
volatility of the crypto digital currencies (CBDCs),
HPC tools in a consistent environment developing and refining
market sharpened the line tackling climate change,
supported by a collaborative, worldwide the core technologies for
between the perceived value and enabling new, more
community of HPC users, developers,
administrators, and vendors.

Since the release of OpenHPC 2.x in

2020, which included much-anticipated
support for Red Hat 8 and SuSE Leap
15, the project has grown from 10,000
downloads per month to well over
100,000 a month this year. Future
versions of OpenHPC will include support
for building cloud supercomputers and a
new focus on DevOps.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 132

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

openIDL
secure ways of proving identities four Hyperledger projects were wave of complex networks.
and credentials for individuals, sunsetted, demonstrating that the
community is actively managing Likewise, Hyperledger projects are
companies, and even devices.
projects through their lifecycle. increasingly serving as the core for
openIDL, an open source, distributed
Hyperledger’s success is built on its a new generation of digital trust
ledger platform, infuses efficiency,
strong and diverse community. Over The evolving Hyperledger tools that leverage decentralized
transparency and security into
the last five years, there have been ecosystem signals a few key things technologies such as distributed
regulatory reporting: With openIDL,
more than 40K contributors and over where this market is headed. ledgers and verifiable credentials.
insurers fulfill requirements while
1.2M contributions to Hyperledger The diversity of Hyperledger
While there are committed retaining the privacy of their data.
projects. There are more than 80K distributed ledger platforms, all of
communities driving the Regulators have the transparency
worldwide community members and which are graduated, production-
development of every Hyperledger and insights they need when they
hundreds of member companies and grade projects with growing user
project, there is an important and need them.
government institutions supporting bases, reflect the coming multi-
chain world with a continuum growing level of collaboration
the work of the Hyperledger A primary business case for openIDL
of permissioned, public, public across the ecosystem. This cross-
Foundation. That includes regional is the compelling opportunity
permissioned, and other hybrid project collaboration is critical
chapters in Brazil, Latin America, to greatly reduce the cost and
networks. The intertwining of to delivering mature, enterprise-
Africa, Japan, and India as a host complexity of timely regulatory
public and permissioned is most grade technologies and to building
of Special Interest Groups covering reporting to state regulators on
apparent with Hyperledger Besu, out the complex, decentralized
Climate Action and Accounting, the part of insurance carriers.
which is one of the top three infrastructure that will serve as
Telecom, Media and Entertainment, Furthermore, since openIDL is a
most popular Ethereum execution the trusted foundation for trade,
and more. non-profit, open source, and anti-
clients according to Ethernode. healthcare, banking, commerce,
trust industry collaboration, low-level
In the last 12 months, Hyperledger and more. This collective effort
aggregated and anonymized data
has added three new projects, However, Hyperledger is more is what we call “building better
provided by carriers in different
Hyperledger FireFly, Hyperledger than just a DLT community. together.”
regions and lines of business can be
Bevel, and, most recently, Much of the recent innovation
consolidated and made available to
Hyperledger Solang. They all is occurring on the tools and
both carriers and regulators. This
started as Hyperledger Labs, a library front. New projects tackling
creates a "win/win" for both sides that
space for innovation and testing cross-chain interoperability, smart
is unique in the industry.
of ideas that are helping advance contract portability and even multi-
this market and the Hyperledger chain deployments of apps are all It has been an exciting year for
ecosystem. As importantly, laying the groundwork for the next openIDL. We have added staff,

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 133

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

engaged with new infrastructure

partners, and made great strides
in getting member consensus on
business requirements and technical
FINOS

FINOS (Fintech Open Source

architecture. We are establishing
Foundation) is focused on
an operational test net platform
powering the next wave of financial
needed to support the onboarding
technology innovation based on
of members, development testing,
open (source, standards, and
and the eventual support of the
data) collaborative efforts among
production network.
all financial services industry and
openIDL leverages and involves the technology constituents. After
significant contributions of other years of building awareness
Linux Foundation projects. Notably, and best practices that enabled
openIDL is an opportunity for which financial institutions to be first-
Hyperledger Fabric is ideally suited to class citizens in the open source
provide an excellent platform solution community through the FINOS
and the cross-utilization of motivated open source readiness program,
resources from within the Linux thanks to our community’s support
Foundation and participating open and energy, the industry is on
financial institutions rolling out to the public on December 8
source community members. the cusp of a major evolution
OSPOs just in the last 12 months, at the sixth Open Source in
as regulated entities are
openIDL is one of the few Linux to the largest financial institutions Finance Forum in NYC) are simply
embracing open innovation at an
Foundation projects in which the actively contributing to upstream staggering:
unprecedented pace.
Linux Foundation will operate and and OSS sustainability efforts like
manage a consortium based on With historical cultural barriers OpenSSF, to investors recognizing ⊲ Globally, GitHub commits from

Hyperledger Fabric and other open coming down and regulators the disruptive potential of financial services institutions

increasing focus on Open Source an open fintech commercial were up 113% YoY.
source contributions. As such, it
establishes the foundation of a sustainability, 2022 has seen ecosystem. Some of the year-on- ⊲ 48% of surveyed firms now
decentralized network approach to the industry accelerating its year early from FINOS second openly encourage consumption,
realizing significant benefits to public/ investments in open source like “State of Open Source in Financial almost doubling in 2021.
private efficiencies in other industries. never before: From dozens of Services” report (to be released

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 134

 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

⊲ 28% of respondents reported an the ultimate metric of value, are

increase in the time their growing even faster, with YoY
organizations allocated for downloads up 330% on Maven
OS contributions. Central for Legend and 278% for
FDC3 and 65% for Perspective on
⊲ Notable decrease in contribution
NPM. Other important testaments
not being permitted, down to
of the maturity of this community
just 6% from 20% in 2021.
were having a +217% YoY

Consequentially, FINOS, now attendance for our flagship event,

a household name across the Open Source in Finance Forum,

industry, is experiencing significant and creating a Technical Steering

growth in contributions and Committee with a majority of

membership and has onboarded financial institutions.

several high-impact, industry-wide

Community-driven open standards Hilary Carter launching the FINOS 2022 State of Open Source in Financial Services survey
projects with a distinct acceleration in London at Open Source in Finance Forum.
are a key enabler for industry
in regulatory-focused projects
interoperability and innovation mentation and poised to launch and promote its adoption in
under the Open RegTech initiative.
in a highly locked-in industry. its conformance program in the industry. This is a massive
In 2022, we welcomed 15 new Thus, standards development December, FDC3 is well on the recognition of FINOS's role in the

members (a 30% increase), with within financial services at all way to becoming the “FIX for the industry, as the CDM establishes

the notable additions of the buy- stack levels remained a major Desktop” and driving seamless a single, common digital repre-
focus in 2022. Three key projects workflows across the financial sentation of trade events and
side’s Wellington Management to
perfectly exemplify how FINOS is services industry. actions across the lifecycle of
the Governing Board, and Google,
driving interoperability across the financial products. This proj-
Societe Generale, and American
⊲ Data level: On the heels of the ect will be live under FINOS in
Express to our Gold Members. ecosystem:
Legend contribution by Goldman January 2023.
⊲ Application level: FDC3, our very Sachs, in July 2022, three major
Contribution growth and project
mature interoperability standard, trade associations (ISDA, ICMA, ⊲ Compliance and rules level: The
download statistics testify
released its version 2.0 and is and ISLA) together selected Open RegTech initiative, started
to our vibrant and growing in late 2020 to create mutualized
now becoming ubiquitous across FINOS to host the Common
community. Not only did our open source implementation of
investment banks and buy Domain Model (CDM) and utilize
contributor strength continue to financial regulations and “shift
sides. With a fully open source our community network to
grow steadily at a 30% YoY but, left” regulators’ involvement in
Electron-based reference imple- continue to extend the model
most importantly, downloads,
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 135
 INNOVATION WITH AI, MACHINE LEARNING, DATA, BLOCKCHAIN, FIN SVCS

open collaboration, fostered the

Maintainer highlights
open sourcing of projects like an
LCR implementation (Liquidity Maintainers are the heartbeat of

Coverage Ratio) by Morgan Stanley our community, and we are very

and the acceleration of Compliant thankful to those who lead the

Financial Infrastructure as an way as examples of open source
best practices within the Financial Legend: Ffion Acland co-leads the Morphir: Stephen Goldbaum is a
industry-wide effort to build finan-
Services industry. Global Data Models and Governance Distinguished Engineer at Morgan
cial cloud compliant infrastructure
team at Goldman Sachs. She Stanley and lead maintainer of the
as code.
co-leads the Financial Object Special Morphir project, which has gained
As the Financial Services community Interests Group at FINOS, which much larger adoption and
is learning about the multiplicative sponsors the collaborative contribution under his leadership.
power of open source, we development of standard financial Stephen led the contribution of the
see greater intersection and data models and will engage with first truly open source regulatory
interoperability across our project FDC3: Kris West—Kris West is the the community on CDM-focused implementation of the LCR (Liquidity
landscape, with projects such as Principal Engineer at Cosaic and is efforts. Ffion's leadership has been Coverage Ratio) regulation and tech
CDM, FDC3, and Legend leveraging the lead maintainer for FDC3. This instrumental in driving collaborative sprints to foster a developer-driven
each other’s capabilities to bring year, Kris dedicated his time to data modeling efforts within FINOS. collaborative approach to regulatory
vital solutions to the ecosystem. stewarding the completion of the When Goldman Sachs open sourced compliance. Stephen is a leading
FDC3 2.0. Releasing this major Legend, Ffion led the FINOS Legend voice in the newly formed FINOS
In conclusion, we see a significant version required balanced and Studio Pilot modeling work around technical steering committee and is
opportunity for early/late-stage considerate leadership and FX Options and Commodities and a frequent speaker at the Open
technology and open source strong technical expertise, always demonstrated successful Source in Finance Forum.
companies entering the ecosystem displayed when Kris led work community collaboration using the
at this time, with a first-mover streams and discussions with the Legend Studio shared hosted
advantage to shape the next community. During our Open instance. Ffion generously adds to
generation of financial applications Source in Finance Forum conference the DEI efforts in her local
through open collaboration with in London, Kris introduced the 2.0 community; most recently, she
financial institutions. version to the community and participated in the FINOS Tech
presented its newest features. For Gateway, showcasing Tech and
his active engagement in FDC3, Kris Finance opportunities to
was awarded the Most Active underrepresented communities
Individual award. in London.
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 136
Financial transparency

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 137

 FINANCIAL TRANSPARENCY

Revenue Expenditures

Membership & Donations 44.5% Project Support 59.2%

Project Support 25.7% Community Infrastructure 9.8%

Event Sponsorships & Corporate Operations 7.4%

Registrations 18.4%
Community Training 7.3%
Training & Certification 11.3%
Community Events 3.1%
Other 0.1%
Community Tooling 5.4%

Linux Kernel Support 3.2%

International Operations 1.5%

The Linux Foundation’s revenue is derived from four main sources, Memberships and Donations, Project Support, Training and Certifications, and Event Registration and Sponsorship.
In 2022 we are forecasting revenues of $243.57M.
In 2022 the Linux Foundation is forecasting to spend over $254.96M supporting our mission.

The LF and our directed fund projects operate on calendar year zero-based budgets, and any net surpluses are reserved for use by those projects in subsequent years. Annual aggregated expenses across the LF
and our Projects may exceed annual revenue during a period, but the deficit is made up with reserve funds from the respective projects. Aggregate revenue across our organization reflects actuals, and project
expenses reflect conservative forecasts. Please see the Foundation’s most recent 990 for details on overall reserves.
LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 138
FINANCIAL TRANSPARENCY

Profile of the Linux Foundation

Linux Foundation Female workforce Executive leadership:

Employees representation1 women2
1.0%
51.8%
Nonbinary

52% 32.9% 11%

Women

Linux Large
31.8% Large
Linux
Foundation Technology Foundation Technology
Companies Companies

47.2%
Men

Board seats held

by women2, 3
%

28% 14.3%
Linux Large
Linux Foundation around the world Foundation Technology
Companies

United States 85%

Canada 5.2%

Europe 4.2%

Asia 3.9%

South America 0.3%

1
Susanne Hupfer and Jaime Austin, Women in technology statistics, Deloitte, 1 December 2021, https://www2.deloitte.com/us/
en/insights/industry/technology/technology-media-and-telecom-predictions/2022/statistics-show-women-in-technology-
are-facing-new-headwinds.html. Accessed 5 December 2022.
Nikolina Cveticanin, Women in Tech Statistics: Girls Get Tech, DataProt, 14 March 2022, https://dataprot.net/statistics/women-
2. 3 

in-tech-statistics/. Accessed 5 December 2022.

LI N U X FO U N DATIO N A N N UA L R E P O R T 2022 139

About The Linux Foundation

The Linux Foundation is the world’s leading home for collaboration on open source
software, hardware, standards, and data. Linux Foundation projects are critical to
the world’s infrastructure including Linux, Kubernetes, Node.js, ONAP, Hyperledger
Foundation, PyTorch, RISC-V, and more. Linux Foundation focuses on leveraging best
practices and addressing the needs of contributors, users, and solution providers to
create sustainable models for open collaboration. For more information, please visit
us at www.linuxfoundation.org.

Connect with us
twitter.com/linuxfoundation

facebook.com/TheLinuxFoundation

linkedin.com/company/the-linux-foundation

youtube.com/user/TheLinuxFoundation

github.com/LF-Engineering

548 Market St
PMB 57274
San Francisco, California 94104-5401 US

[email protected]
www.linuxfoundation.org