# ASF reaches 10,225 committers across 302 projects in FY2026 annual report

> **Key takeaway:** The Apache Software Foundation's FY2026 annual report documents crossing 10,000 committers, launching a Responsible AI Initiative, and graduating 11 projects to Top-Level Project status.

**Published:** 2026-11-11T10:43:18+00:00 
**Source:** Apache Software Foundation News & Sponsorships 
**Category:** policy-community 
**Canonical URL:** https://fosswire.org/news/asf-reaches-10225-committers-across-302-projects-in-fy2026-a.html 

## Summary
The Apache Software Foundation published its FY2026 annual report alongside its September 2026 newsletter, revealing the open-source umbrella organization now encompasses 10,225 committers across 302 projects after welcoming its 10,000th committer during the fiscal year. The report highlights several foundation-level initiatives including the launch of the Responsible AI Initiative, continued development of Apache Trusted Releases for software supply chain integrity, and contributions to international supply chain standards. Separately, the ASF's Security and Tooling teams disclosed a scaled security scanning effort covering 230 ASF repositories with support from Anthropic's Project Glasswing, incorporating threat modeling, automated scanning, and project-level review.

The newsletter also features an interview with Sam Thursfield on Apache BuildStream, a Linux operating system build orchestration tool that has evolved from an R&D project into the build engine behind GNOME OS and the Freedesktop SDK Flatpak runtime. BuildStream joined the ASF as a Top-Level Project and is positioned as an alternative to Bazel, Nix, and traditional distribution package managers for building complete systems from source. The foundation also announced keynote speakers for Community Over Code Glasgow, scheduled for October 11-14, 2026, and noted 19 Top-Level Project anniversaries ranging from 0-5 years to 15-20 years.

## ASF growth metrics and initiative details
- **Committers and projects:** The ASF reached 10,225 committers across 302 projects during FY2026, crossing the 10,000 committer milestone during that period.
- **Responsible AI Initiative:** The foundation launched a new Responsible AI Initiative during FY2026, though specific technical mechanisms or governance frameworks were not detailed in the source.
- **Apache Trusted Releases:** Continued work on this supply chain integrity project proceeded alongside contributions to international software supply chain standards.
- **BuildStream architecture:** Apache BuildStream orchestrates building complete Linux operating systems from source, serving as the build engine for GNOME OS and the Freedesktop SDK Flatpak runtime, distinguishing itself from Bazel, Nix, and traditional distro package managers.

## Why it matters
The 10,000-plus committer milestone and 302-project scale confirm the ASF's continued centrality in open-source infrastructure, particularly for enterprise Java, big data, and now AI governance through the Responsible AI Initiative. For Linux distribution builders and Flatpak ecosystem participants, BuildStream's maturation at the ASF provides a vendor-neutral, source-based alternative to Nix and Bazel for constructing complete operating system images. The Anthropic-backed security scanning effort, if sustained and expanded, could establish a reusable model for automated vulnerability detection across large multi-project foundations beyond the ASF itself.