Yes, Kubernetes is everywhere. And a new Project Journey report from the Cloud Native Computing Foundation (CNCF) includes some big numbers showing just how everywhere Kubernetes is in the market.

The report, which is the first of its kind from CNCF on Kubernetes, found that the container orchestration platform has 315 companies contributing to the project today with “several thousand having committed over the life of the project.” That is a significant increase from the 15 that were contributing prior to CNCF adopting the project in early 2016.

Including individual contributors, Kubernetes has counted about 24,000 total contributors since being adopted by CNCF, seen 148,000 code commits, 83,000 pull requests, and 1.1 million total contributions.

“It is the second- or third-highest velocity open source project depending on how you count it — up there with Linux and React,” explained CNCF Executive Director Dan Kohn in an interview.

Google and Red Hat remain the two largest individual sources of code for the project, but CNCF Director Dan Kohn explained that their commitment share has dropped from 83% of the code committed before CNCF adopted the project in 2016, to 35% today. “This is an important metric for us to show,” Kohn explained. “We have a lot of insight like that, which shows a healthy development ecosystem.”

Google’s commitment base is obvious as the project itself spun out of the search giant. And Red Hat has been an active member in using the platform to power many of its open source offerings, which was one of the reasons IBM spent $34 billion to acquire Red Hat.

However, the Project Journey numbers showed that VMware has seen a recent spike in commits to the Kubernetes project, which has been bolstered by its recent acquisitions of a number of Kubernetes-focused startups. This week it also converted much of its infrastructure to work on top of Kubernetes.

Kohn said that while the consolidation across the space will likely have an impact on where commits originate, he “does not yet see any signs of concern. There is still a lot of competitive across the big cloud players and the big vendors.”

He cited a number of those that have re-platformed their own systems to run on Kubernetes, including the VMware move, and previous ones from vendors like Mesosphere – which is now D2iQ – and Docker Inc. “The fact they are all incorporating Kubernetes we see as a positive and don’t yet see any warning signs,” Kohn added.

The Project Journey Report follows up on an exhaustive Kubernetes security audit released by CNCF earlier this month. That report, which Kohn said cost in the neighborhood of $250,000 to conduct, found dozens of internal vulnerabilities in the container orchestration platform. However, those vulnerabilities were all corrected prior to the audit being released.

Kohn noted that the success of CNCF’s events, most notably its KubeCon + CloudNativeCon events, has allowed the open source group to fund these projects.

Kohn also explained that CNCF would release similar Project Journey reports for its other graduated projects. Those currently include the Containerd container runtime, CoreDNS domain name system server, Envoy service proxy, Fluentd logging platform, and the Prometheus monitoring system.