5.6 KiB
Artifact Hub Incubation Proposal
Introduction
Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for cloud native projects that are part of an open source non-profit.
Discovering artifacts to use with cloud native projects can be difficult. If every cloud native project that needs to share artifacts creates its own Hub this creates a fair amount of repeat work for each project and a fractured experience for those trying to find the artifacts to consume. The Artifact Hub attempts to solve that by providing a single experience for consumers that any CNCF project can leverage.
At the moment, the following artifacts kinds are supported (with plans to support more projects to follow):
- CoreDNS plugins
- Falco configurations
- Helm charts
- Helm plugins
- KEDA scalers
- Keptn integrations
- Kubectl plugins (Krew)
- OLM operators
- Open Policy Agent (OPA) policies
- Tekton tasks and pipelines
- Tinkerbell actions
Artifact Hub allows users to:
- Discover, install and publish packages and configurations
- Explore content like Helm charts schemas and templates in an interactive way
- Subscribe to packages' new releases and security alerts notifications, via email or webhooks
- Visualize packages' security reports
- Inspect packages' changelog
Incubation stage requirements
Document that it is being used successfully in production by at least three independent end users
As of today, more than 800 registered organizations are publishing their content on artifacthub.io. 1.2K repositories containing artifacts of 12 different kinds have been listed so far, which accounts for a total of 6K packages and 95K+ releases. The site has more than 8K registered users and 300K unique users have used it during the last year. These numbers keep growing by the day. For more details and some graphs please see the Artifact Hub stats page.
Some examples of organizations listing their content on Artifact Hub:
It's also worth mentioning that the Helm Hub was moved to Artifact Hub on October 2020.
In addition to this, we know of some organizations that are also considering to use Artifact Hub (the software) internally, but we don't have yet a proper list of adopters.
Have a healthy number of committers
The project currently has 3 maintainers from 2 different organizations:
- Sergio Castaño Arteaga (Linux Foundation)
- Cintia Sánchez García (Linux Foundation)
- Matt Farina (SUSE)
Demonstrate a substantial ongoing flow of commits and merged contributions
The project's changelog lists all versions released so far, including when they were released and the changes introduced on each of them.
Some interesting DevStats links:
Please see Artifact Hub DevStats for more details.
A clear versioning scheme
Artifact Hub follows semantic versioning.
The project maintains a detailed changelog that lists the changes introduced by each version.
Clearly documented security processes explaining how to report security issues to the project
The process to report a security problem in Artifact Hub is described in the SECURITY.md document.