How to Participate in or Join the SPDX Project

Updated

You can participate in SPDX through the project's Engage section on spdx.dev, which lists several entry points: Participate, Technical Team, Legal Team, Outreach Team, and Join. The right path depends on whether you want to contribute to the specification itself, work on licensing and legal topics, help with community outreach, or simply join the broader project. SPDX is an open standard maintained as a Linux Foundation project, so participation is organized around these teams rather than a single sign-up.

Start with the Engage Section

The Engage menu on spdx.dev is the main hub for getting involved. It groups participation into:

  • Participate – general involvement with the project
  • Technical Team – work related to the specification and technical development
  • Legal Team – work related to licensing and legal aspects of SPDX
  • Outreach Team – community, communication, and promotion efforts
  • Join – the entry point for joining the project

If you are unsure where you fit, Participate and Join are the broadest starting points before choosing a specific team.

Choose a Team Based on Your Interest

SPDX is organized around areas of interest or profiles focused on specific user needs, and its teams reflect different kinds of contribution.

Team Likely focus Best for
Technical Team Specification and technical work Developers, tool builders, spec contributors
Legal Team Licensing and legal topics Legal professionals, license compliance specialists
Outreach Team Community and communication Writers, advocates, community organizers
Participate / Join General involvement Anyone new to the project

The site also notes that the Learn section explains "how to participate," so it is worth reading alongside the Engage pages if you want context on SPDX's structure before committing to a team.

Understand What You Would Be Joining

SPDX — the System Package Data Exchange — is an open standard capable of representing systems with software components as SBOMs (Software Bill of Materials) and other AI, data, and security references, supporting a range of risk management use cases. The specification is a freely available international open standard (ISO/IEC 5962:2021).

Because it spans software supply chain, licensing, security, AI, hardware, and other areas of interest, there is room for many kinds of contributors. Knowing which area matches your background helps you pick the right team faster.

Practical Steps

  1. Go to spdx.dev.
  2. Open the Engage menu.
  3. Review Participate, Technical Team, Legal Team, Outreach Team, and Join.
  4. Pick the entry that matches your interest — technical, legal, or outreach.
  5. Use Join to formally get started, or Participate if you want a general on-ramp.
  6. Cross-check the Learn section, which also covers how to participate.

Common Questions

Do I need to be a lawyer or developer to join? No. The Outreach Team and general Participate/Join paths exist for non-technical contributors as well.

Where do I find the specification and tools? The site's Use section covers Overview, Examples, Specifications, License List, and Tools — useful if you want to understand SPDX before joining a team.

Is there a single "join" button? The Engage section lists Join as its own entry, but participation is organized by team, so you may want to explore the teams before using it.