We are searching for additional .NET-maintainer!

CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

https://cyclonedx.org/

Apache License 2.0

313 stars 62 forks source link

We are searching for additional .NET-maintainer! #362

Open jasonparallel opened 7 months ago

jasonparallel commented 7 months ago

@coderpatros Is the project still active and accepting PRs? (I'm not sure based on the current PRs) There is some additional functionality I would like to put together.

Add file command
- Specify file version in command
- Specify regex to pull file version from file name
- Specify that file should be a dependency of the main component
Merge Command
- Be able to merge 2 sboms that are really about the same application from 2 different tools without having fake intermediary components

jkowalleck commented 6 months ago

All CycloneDX tools are a community effort, and if nobody steps up championing them, nothing is going to move forward.

This repo has no active maintainer, at the moment.

If you are interested in the role, you know somebody, or your company has human resources who are interested, please ping here, or via Slack - so that we can onboard you

slack invite: https://cyclonedx.org/slack/invite
slack channel: https://cyclonedx.slack.com/archives/C01DRP0543Y

CC @stevespringett

PS: as a maintainer, you'd become a CycloneDX team member. Please read more about the idea behind it here: https://cyclonedx.org/about/governance/#cyclonedx-team

mtsfoni commented 6 months ago

@jasonparallel Eventually, I will start working on this project, but currently, I am fully occupied with the DotNet CycloneDX generator and the core library. I would greatly appreciate any reinforcement in maintaining this or other DotNet projects.

Your pull requests might take some time to be reviewed, but they will be addressed eventually. If you decide to submit them, please keep them simple and in smaller, well-tested pieces. This will make it easier for me to review them, even though I am not deeply involved in this project.

MacOS commented 1 month ago

I would be happy to take on one maintainer role, however, I have no experience with C#.

mtsfoni commented 1 month ago

Hi MacOS,

I've nominated you to the Core Working Group, and the next step is for them to discuss and vote on the nomination. Once that's done, they might look into finding a mentor who can help guide you through the onboarding process and offer support as you settle into the role. We'll make sure to help you get up to speed so that you feel comfortable with the project and the programming-language/framework.

I'm looking forward to working with you, and I’ll keep you updated as things progress!

MacOS commented 1 month ago

Thank you for the fast reply @mtsfoni!

mtsfoni commented 1 week ago

@MacOS did anybody contact you in the meantime?

MacOS commented 1 week ago

@mtsfoni No, not that I'm aware of.