Conversation
|
For preview, see https://shiro.staged.apache.org/blog/2026/04/community-effort.html |
jbonofre
left a comment
There was a problem hiding this comment.
I understand the purpose of this blog. But I'm not sure I understand the goal.
We have two cases:
- A vendor can sponsor the foundation, with target sponsoring (https://www.apache.org/foundation/sponsorship.html#targeted-sponsorship)
- A vendor is paying individuals to contribute on project. That's fine, but no need to have a blog or anything in the project itself (it's up to the vendor).
Can you clarify what is the problem statement and the purpose of this blog post ?
| Let’s make sure Shiro continues to be a project worth relying on. | ||
|
|
||
| == What you can do right now | ||
| * Consider link:/commercial-support.html[sponsoring] the project to ensure its sustainability |
There was a problem hiding this comment.
This is fine and acceptable, but for "commercial support" purposes.
|
|
||
| For years, Shiro has quietly powered authentication, authorization, cryptography, and session management for countless applications around the world. Its simplicity and flexibility made it a favorite among developers who needed security without unnecessary complexity. | ||
|
|
||
| Today, with the conclusion of past corporate sponsorships, the project is maintained entirely by dedicated volunteers who believe in its mission and its value to the ecosystem. |
There was a problem hiding this comment.
I would remove "with the conclusion of past corporate sponsorships". Shiro is fully community driven, by individuals.
Even if kind of true, I would remove this part of the sentence ti "invite" everyone to contribute and join (individuals, not vendor affiliated).
|
|
||
| Today, with the conclusion of past corporate sponsorships, the project is maintained entirely by dedicated volunteers who believe in its mission and its value to the ecosystem. | ||
|
|
||
| Open source has always thrived on community ownership. Some of the most resilient and innovative projects exist because individuals and organizations stepped up when it mattered most. Shiro is now at that moment. |
There was a problem hiding this comment.
Same here, that's not fully true for Apache projects (again community driven).
| == What’s Needed Now | ||
|
|
||
| * Contributors to help with development, testing, and documentation | ||
| * Organizations willing to link:/commercial-support.html[financially sponsor] ongoing work |
There was a problem hiding this comment.
This is fine, but I would emphasize on "commercial support", to not give the feeling that the contributions are driven by vendors.
| * Organizations willing to link:/commercial-support.html[financially sponsor] ongoing work | ||
| * Advocates who believe in sustainable open source | ||
|
|
||
| If your company relies on Shiro—even indirectly—this is the time to invest in its future. Sponsorship isn’t just support; it’s a way to ensure the tools you depend on remain secure, modern, and well-maintained. |
There was a problem hiding this comment.
-1 for that.
I agree we should encourage contributions. But at the ASF, we are all contributing as individuals (affiliation doesn't matter). Vendors don't decide of the governance and contributions, the individuals do.
|
This also should be discussed between the PMC (and approved). |
|
JB, thank you for your valuable comments
Yes, this is what I am trying to do :) |
|
Well, primary goal is to encourage financial support for organizations contributing to Shiro, from organizations who are using Shiro. |
|
Hopefully looks better for you @jbonofre - thank you! |
jbonofre
left a comment
There was a problem hiding this comment.
Thanks for the update on the phrasing. It looks better to me.
Add blog about community-maintained and sponsorship that's needed