This summer the SPDX Cryptography Group agreed on how to describe algorithm parameters, tightened its contribution and release processes, and opened the discussion on post-quantum cryptography. Where this report comes from This is an update of the work we do at the SPDX Cryptography Group. SPDX stands for Software Package Data Exchange. Our group is … Continue reading SPDX Cryptographic Algorithm List: summer 2026 update
Evaluating the EU Open Source Strategy: Strengths and Weaknesses
A summary of my three-part analysis of the EU Open Source Strategy on Tagoross. Real strengths, real design flaws. The sovereignty definition does not fit open source. The legislation, CADA and Chips Act 2.0, encourages or stays silent rather than requires.
Lessons Learnt from Our BI Journey: From Open Source to SDV Products Development
Luis Cañas Díaz and I shared lessons from our BI journey at the Eclipse Foundation SDV webinar — from open source to automotive. Methodology, real use cases, and hard-won lessons on data, metrics, and insights.
SPDX Cryptographic Algorithm List: Spring 2026 Update
The SPDX Cryptographic Algorithm List keeps growing. New cryptoClass values, a structured docs folder, PQC as a new property, and SCANOSS as our first user-contributor. Here is what happened in the past months.
Regresa La Palma Tech Tagoror
La Palma Tech Tagoror vuelve. Los meetups en la isla canaria de La Palma se relanzan este 23 de abril, en La Real Sociedad Aridane, Los Llanos de Aridane. La entrada es gratuita previo registro. Únete al evento o apúntate al grupo de Meetup para estar informado de futuras actividades.
La Palma Tech Tagoror Is Back
La Palma Tech Tagoror is back. After a year without events, the meetup series relaunches on April 23rd at Real Sociedad (Casino) Aridane, Los Llanos de Aridane, La Palma. Free entry, short talks, good conversations. Join us — or sign up to the Meetup group to stay informed.
SWHID in Practice: SBOM Verification, CRA Compliance, and Traceability Use Cases
Explore how SWHID is applied in real-world scenarios to improve SBOMs, support Cyber Resilience Act compliance, and enable software traceability. Discover practical use cases across telecom and automotive industries, based on insights from recent industry talks.
SWHID and pURL
pURL and SWHID are both software identifiers with similarities, but they are fundamentally different. pURL is assigned by a registry. SWHID is derived from the code itself. They are not competitors — they complement each other.
SWHID is an open standard, governed under open governance
SWHID is an open ISO standard with transparent governance and free access to its specification. It includes a reference implementation and several tools that developers can use or extend. The community is open, and anyone can join the discussion to help shape the next version of the standard. Read more in this new blog post
Embedded World 2026: Open Source Everywhere, and Two New Topics Dominating the Conversation
Embedded World 2026 in Nuremberg showcased the growing dominance of open source technologies and ecosystems. Various stacks, tools, and frameworks saw increased adoption in embedded systems. Discussions heavily focused on two emerging topics: cybersecurity regulations and artificial intelligence, pointing to major future investments despite some hype.
toscalix 