Projects We Support¶

The YAML Company maintains and provides professional support for the core YAML libraries that power modern technology stacks.

Projects We Maintain¶

These are the foundational YAML libraries and tools that The YAML Company directly maintains:

Why These Projects Matter¶

Ubiquitous Infrastructure¶

These YAML libraries are invisible but essential infrastructure:

• Kubernetes uses go-yaml to parse cluster configurations
• Ansible uses pyyaml to process playbooks
• CI/CD pipelines across GitHub Actions, GitLab CI, CircleCI use YAML
• Cloud platforms use YAML for infrastructure-as-code
• Package managers use YAML for dependency management

Critical Dependencies¶

Millions of applications depend on these projects:

• go-yaml: Downloaded 100M+ times per month via Go modules
• pyyaml: Downloaded 300M+ times per month via PyPI
• libyaml: Embedded in countless applications and languages
• Used by every major cloud provider and DevOps tool

Volunteer Burnout Risk¶

Like many critical open source projects, these libraries have historically relied on volunteer maintenance. This creates risk:

• Security vulnerabilities may not be addressed quickly
• Feature development depends on volunteer availability
• No guaranteed support or response times
• Sustainability concerns as maintainers burn out

How The YAML Company Changes This¶

The YES Program provides sustainable funding for:

Professional Maintenance¶

• Dedicated time for code maintenance and improvements
• Timely security patches and vulnerability fixes
• Regular releases and updates
• Professional testing and QA

Security First¶

• Proactive security audits
• 48-hour early security notifications to YES members
• Clear fix timelines and communication
• Responsible disclosure process

Accelerated Development¶

• Resources to implement new features
• Development of YAMLScript
• Performance improvements
• Better documentation and tooling

Community Health¶

• Responsive to issues and pull requests
• Clear roadmap and priorities
• Transparent governance
• Active community engagement

Ecosystem Partners¶

The YAML Company takes care of the entire YAML ecosystem—not just projects we own, but by collaborating directly with maintainers of tools that depend on our libraries.

How We Support Ecosystem Partners¶

We maintain the foundation: Many YAML tools are built on go-yaml, pyyaml, or libyaml. When we fix bugs and add features to these core libraries, we're supporting the entire ecosystem.

We contribute directly: We work with project authors to submit pull requests, fix issues, and coordinate on security disclosures.

We build relationships: We maintain close personal relationships with maintainers across the YAML ecosystem to ensure healthy collaboration.

Current Partners¶

The YAML Specification¶

The YAML Company also has authority over the YAML specification itself:

• Maintains yaml.org and the official specification
• Coordinates specification updates and improvements
• Ensures compatibility across implementations
• Provides clarity for implementers

The latest version is YAML 1.2.2 (October 2021), with ongoing work toward future improvements.

Support YAML Infrastructure¶

Join leading organizations in ensuring YAML's future:

Learn About the YES Program →

Statistics¶