SPDX is always welcoming new contributors! The discussions are happening on the spdx-tech mailing list and during our weekly meetings. All the details are in: https://spdx.dev/participate/tech/
SPDX recently released the first release candidate for the SPDX 3.0 model.
We expect more release candidates prior to general availability and would welcome review and feedback.
This repository consists of markdown files describing the model classes, properties, and vocabularies which will be used to automatically create documentation, ontologies, and validation artifacts. These are organized by profile.
Please submit a pull request or issue for any suggested changes or issues you find.
There are multiple profiles being developed in parallel for the SPDX 3.0 Model. During this initial phase of development, each profile working group will contribute changes to its own branch in this repository. For example, any changes to the Build Profile should be submitted as a change request to the build-profile branch. There will be at least one maintainer per profile in charge of merging any profile development changes to the profile-specific branch. Once the first "complete" version of a profile is ready, the profile maintainer will alert the general SPDX tech group that the profile model is ready for review.
Once alerted, the SPDX tech group will review and provide feedback. Once profile proposals have been reviewed and approved, the profile-specific branch will be merged to a general development branch along with the other reviewed profile models. Once the development branch containing all the profile models is stable and ready for release, the code from the development branch will be merged to main. At this point the SPDX tech team will re-evaluate the best way to continue updating individual profiles.
This method of development was agreed upon by the SPDX Tech team on 2023-01-17.
In accordance with the development model described above, each profile has at least one maintainer in charge of merging profile-specific changes to the profile working branch. To contribute to a specific profile, please open a PR to the profile-specific branch or reach out to the maintainer of the profile (noted below). Each profile in active development phase also has their own weekly meeting time which can be found here.
| Profile | Maintainer(s) |
|---|---|
| AI | Karen Bennet and Gopi Krishnan Rajbahadur |
| Dataset | Karen Bennet and Gopi Krishnan Rajbahadur |
| Core | William Bartholomew, Gary O'Neall, and Kate Stewart |
| Build | Brandon Lum and Nisha Kumar |
| Licensing | Steve Winslow and Alexios Zavras |
| Security | Thomas Steenbergen, Adolfo García Veytia, and Rose Judge |
| Software | Alexios Zavras and Gary O'Neall |