Maintain a Project at LFDT¶
Welcome
Maintainers steward projects at LFDT. You set direction, grow contributors, ship secure releases, and uphold open governance.
This section gives you playbooks, templates, and requirements so you can focus on building great software.
If you're new, start with New Maintainer Onboarding — a 10–30 minute primer to get you ready.
-
New to maintaining a project at LFDT? Start here for essential roles, expectations, and setup steps.
-
Learn how to run inclusive meetings, triage issues, review PRs effectively, and grow contributors.
-
Understand MAINTAINERS.md, decision-making, elections, subprojects, and inactivity & succession policies.
-
Follow security best practices: SECURITY.md, vulnerability response, SLSA, release signing & provenance.
-
Repository structure, CI/CD checks, release taxonomy, and how to complete project updates & annual reviews.
-
Ready-to-use templates: CONTRIBUTING.md, MAINTAINERS.md, governance docs, election processes, issue/PR templates.
Required LFDT Policies & Processes¶
These are LFDT requirements that every project must follow. Each topic is linked from the subpages above:
- Project updates (periodic) and Annual Review to TAC
- Inactivity policy & succession
- Common repository structure (
docs/
,security/
,governance/
) - SECURITY.md (contact & embargo)
- Release taxonomy (SemVer), release signing, provenance/SBOM
Reference Guidelines¶
- Project Best Practices
- Automated Pipelines Best Practices
- Maintainer Diversity Best Practices
- SLSA Guidelines
Maintainer Governance¶
Project Requirements¶
- Project Annual Review Process
- Project Updates Process
- Common Repository Structure
- MAINTAINERS.md File Contents
- Security Policy
- Release Taxonomy
- Release Signing
Pages in this section¶
- Community · Governance · Security · Operations · Templates · Onboarding