Curling World Champions 2018 – Sweden!

curl up 2018The persons present

Code of conduct

Videos and recordings

Security and safety

Restrooms

Food and drinks

What to do and talk about these days

Persons present

Code of conductAs contributors and maintainers of this project, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities.

We are committed to making participation in this project a harassment-free experience for everyone, regardless of level of experience, gender, gender identity and expression, sexual orientation, disability, personal appearance, body size, race, ethnicity, age, or religion.

Examples of unacceptable behavior by participants include the use of sexual language or imagery, derogatory comments or personal attacks, trolling, public or private harassment, insults, or other unprofessional conduct.

Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct. Project maintainers who do not follow the Code of Conduct may be removed from the project team.

This code of conduct applies both within project spaces and in public spaces when an individual is representing the project or its community.

Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by opening an issue or contacting one or more of the project maintainers.

https://curl.haxx.se/docs/code-of-conduct.html

Videos and recordingsLast year: https://curl.haxx.se/video/curlup-2017/

Security and safety this weekend

Daniel Stenberg Phone: +46 70 5443177 Email: daniel@haxx.se DM: @bagder

Restrooms are useful

Food and drinks

Coffee

Lunch wraps + drinks

Afternoon break

Dinners

Agenda

Saturday 09:00 – 18:00

Coffee, lunch, “fka”, ...

Dinner at Bishops Arms Gamla Stan 19:30 – menu something something

Sunday 09:00 – 18:00

Coffee, lunch, “fka”, ...

Dinner at Wagamama 19:00 (not reserved, but hey...)

https://github.com/curl/curl/wiki/curl-up-2018-agenda

The curl project 2018

Number of lines of “product code”

2010

-01-

01

2010

-04-

01

2010

-07-

01

2010

-10-

02

2011

-01-

01

2011

-04-

01

2011

-07-

01

2011

-10-

02

2012

-01-

01

2012

-04-

01

2012

-07-

02

2012

-10-

01

2013

-01-

02

2013

-04-

01

2013

-07-

02

2013

-10-

01

2014

-01-

01

2014

-04-

01

2014

-07-

02

2014

-10-

02

2015

-01-

01

2015

-04-

01

2015

-07-

01

2015

-10-

01

2016

-01-

06

2016

-04-

01

2016

-07-

13

2016

-10-

03

2017

-01-

03

2017

-04-

01

2017

-07-

03

2017

-10-

02

2018

-01-

02

2018

-04-

020

20000

40000

60000

80000

100000

120000

140000

160000

Web site traffc 2018

Fastly makes our lives easier

1.8 million requests/day

180GB/day (5.5 terrabytes/month)

Fast web site, close to most users

Less detailed stats now because CDN...

Top authors by number of commits

Commits per release since 2010

Hours between commits since 2010

Commits per year

2010 2011 2012 2013 2014 2015 2016 2017 20180

200

400

600

800

1000

1200

1400

1600

1800

2000

Commit authors since 2010

2010 2011 2012 2013 2014 2015 2016 2017 20180

20

40

60

80

100

120

140

First time authors Unique authors One or two commits

Top-10 commit authors since...Since 2017

Daniel Stenberg (794)Marcel Raad (125)Jay Satiro (98)Dan Fandrich (86)Patrick Monnerat (76)Johannes Schindelin (40)Michael Kaufmann (39)Max Dymond (26)Viktor Szakats (25)Kamil Dudka (22)

Since 2015

Daniel Stenberg (2028)Steve Holme (332)Jay Satiro (306)Dan Fandrich (154)Marcel Raad (139)Patrick Monnerat (114)Kamil Dudka (73)Viktor Szakats (64)Michael Kaufmann (59)Alessandro Ghedini (47)

Since 2010

Daniel Stenberg (4157)Steve Holme (1796)Yang Tse (908)Dan Fandrich (423)Jay Satiro (313)Guenter Knauf (253)Marc Hoersken (238)Kamil Dudka (218)Patrick Monnerat (174)Marcel Raad (146)

Since dawn of time

Daniel Stenberg (13213)Yang Tse (2587)Steve Holme (1796)Dan Fandrich (1080)Guenter Knauf (662)Gisle Vanem (466)Jay Satiro (313)Marc Hoersken (238)Kamil Dudka (228)Patrick Monnerat (216)

Who’s merging? (since 2016)Daniel Stenberg – 67%Jay Satiro – 10.4%Marcel Raad – 4.8%Steve Holme – 3.8%Dan Fandrich – 3.7%Patrick Monnerat – 3.3%Kamil Dudka - 1.6%Michael Kaufmann – 1.5%Viktor Szakats Peter Wu GitHub Marc Hoersken Alessandro Ghedini Nick Zitzmann Jakub Zakrzewski Nikos Mavrogiannopoulos Sergei Nikulov Michael Osipov

Days per release since 2010

Average: 50 Median: 56

Bugfies per release since 2010

Vulnerability reports since 2010

2010 2011 2012 2013 2014 2015 2016 2017 20180

5

10

15

20

25

Mails to the curl-library mailing list since 2010

2010

-01

2010

-03

2010

-05

2010

-07

2010

-09

2010

-11

2011

-01

2011

-03

2011

-05

2011

-07

2011

-09

2011

-11

2012

-01

2012

-03

2012

-05

2012

-07

2012

-09

2012

-11

2013

-01

2013

-03

2013

-05

2013

-07

2013

-09

2013

-11

2014

-01

2014

-03

2014

-05

2014

-07

2014

-09

2014

-11

2015

-01

2015

-03

2015

-05

2015

-07

2015

-09

2015

-11

2016

-01

2016

-03

2016

-05

2016

-07

2016

-09

2016

-11

2017

-01

2017

-03

2017

-05

2017

-07

2017

-09

2017

-11

2018

-01

2018

-03

0

100

200

300

400

500

600

Started acceptingpull-requests on github

Mails to the curl-users mailing list since 2010

2010

-01

2010

-03

2010

-05

2010

-07

2010

-09

2010

-11

2011

-01

2011

-03

2011

-05

2011

-07

2011

-09

2011

-11

2012

-01

2012

-03

2012

-05

2012

-07

2012

-09

2012

-11

2013

-01

2013

-03

2013

-05

2013

-07

2013

-09

2013

-11

2014

-01

2014

-03

2014

-05

2014

-07

2014

-09

2014

-11

2015

-01

2015

-03

2015

-05

2015

-07

2015

-09

2015

-11

2016

-01

2016

-03

2016

-05

2016

-07

2016

-09

2016

-11

2017

-01

2017

-03

2017

-05

2017

-07

2017

-09

2017

-11

2018

-01

2018

-03

0

20

40

60

80

100

120

140

Stackoverfow (‘curl’ is tagged 31K times)

Everyone uses curl 2018Apps: Youtube, Instagram, Skype, Spotify, ...

OS: iOS, macOS, Windows, Linux, ChromeOS, AOSP, ...

Cars: Mercedes, BMW, Toyota, Nissan, Volkswagen, …

Game consoles: PS4, Nintendo Switch, ...

Who doesn’t use curl?

Done since previous curl up741 bug fxes, 28 changes, 12 reported vulnerabilities

Massively improved CI builds + fuzzing

max TLS versionrelease date in --version--request-targetprevent binary spewmultisslSSLKEYLOGFILEmime API

SSH compressionbrotliconnection sharing with share APIRFC 7616 Digestlibssh backendCUROPT_RESOLVE with multiple IPfaster cookies

Less goodVulnerabilities are still reported frequently

Early patch releases deemed necessary

Regressions

Users respond several years after the fact: ssl-init, callback protection, timers include redirects, …

Lots of decisions done without a lot of feedback

Could use more people who stick around

FutureFuture

Something about planning the future

I can’t tell what “we” will do

I have some vague ideas about what I want to do next

I never plan very far ahead

Things change all time time

libcurl work to consider

Keep up with browsersQUICRecent cookie draftsORIGIN and more certifcates for HTTP/2

DNS-over-HTTPSHSTSAlt-Svc… ?

curl tool work to consider

Parallel transfers

Support for HTTP/2 Push

Master/slave mode

Make --retry resume

Finally