Thank you for your interest in cdx2spdx. The project is open-source software, and bug reports, suggestions, and most especially patches are welcome.
cdx2spdx has a project page on GitHub where you can create an issue to report a bug, make a suggestion, or propose a substantial change or improvement that you might like to make.
The source code for cdx2spdx is hosted on github.com/spdx/cdx2spdx. Please review open pull requests and active branches before committing time to a substantial revision. Work along similar lines may already be in progress.
To submit a pull request via GitHub, fork the repository, create a topic branch from main for your work, and send a pull request when ready. If you would prefer to send a patch or grant access to pull from your own Git repository, please contact the project's contributors by e-mail.
However you choose to contribute, please sign-off in each of your commits that you license your contributions under the terms of the Developer Certificate of Origin. Git has utilities for signing off on commits: git commit -s signs a current commit, and git rebase --signoff <revision-range> retroactively signs a range of past commits.