discussion: Donation of reqsign

[Xuanwo]

Hello, everyone. I'm starting this thread about donating reqsign to the OpenDAL project, and reqsign will be governed by the OpenDAL PMC.

Context

reqsign is the rust lib that signing API requests without effort. It's one of the core dependencies of OpenDAL that helps build signatures for object storage services like S3, AzBlob, GCS, OSS, COS, and more. It is very important and crucial that any changes or bugs in reqsign will immediately affect OpenDAL. It could completely break OpenDAL if there is a lack of development.

reqsign is currently maintained by @Xuanwo, one of the OpenDAL PMC Member. Nearly all reqsign contributors are also OpenDAL contributors.

Motivation

By accepting reqsign, we can grow the community under the governance of the OpenDAL PMC and attract more contributors to join the development. This also eliminates the risk of reqsign becoming inactive after @Xuanwo leaves.

Plan

My current plan is to transfer reqsign to opendal-reqsign. After this change, reqsign will become the first sub-project of opendal. It will retain its existing versions, but with a clear statement that they are not ASF releases. reqsign will have its own release cycle.

The OpenDAL PMC will become an umbrella for reqsign, and I expect reqsign will graduate as a TLP once it's mature enough.

History

We used to discuss this at [DISCUSS] Donation of reqsign to opendal

[tisonkun]

Sounds like a good idea!

[c-thiel]

Sounds great to me. Thanks @Xuanwo for pushing this!! Reqsign is an important component of Opendal, and having as a subproject in Apache would certainly help adoption :)