Modern software is assembled from hundreds of components that organizations often did not write and do not fully control. Identifying those components reliably is becoming a legal requirement. This article introduces SWHID, an open standard for identifying software artifacts.
Category: software libre
SPDX Cryptographic Algorithm List: February 2026 Update
The SPDX Cryptographic Algorithm List now includes 120+ algorithms and 7 properties. The community is growing, the roadmap is clear, and the list is moving toward the SPDX website. Here is the February 2026 update.
AGL’s Business Intelligence Journey – Understanding Activity
Measuring activity is not about producing more metrics. It is about supporting better decisions and enabling continuous improvement. We restricted our analysis to main/master to observe validated flow and kept visualizations simple to promote adoption across the community.
Returning Home and Evolving As Consultant in 2026
In 2026, Agustin relocates to La Palma while evolving his independent consulting practice. He aims to specialize services, explore freelancer collaborations, and adapt to AI, while remaining active in the thriving global open-source community.
Choosing AnyType: A Platform for Scalable, Secure Governance
STF needed a scalable, secure, and asynchronous collaboration system for representatives across multiple time zones. This article explains why AnyType was selected, how it is used today, and which features and challenges matter most as the Software Transparency Foundation.
Introducing the SPDX Cryptographic Algorithm List: a Personal View
The SPDX community is now creating a new list — similar to the SPDX License List — but focused on cryptographic algorithms. This post shares how this effort started, its current status, the next steps, and a final call for participation.
Open Source Communities Are Outstanding Learning Environments
Open source communities are outstanding learning environments. By contributing, you learn actively, get real feedback, and grow faster than in most companies. If you want to take control of your career, start with open source.
From Theory to Practice: Leveraging the Virtuous Open Source Cycle for Long-Term Success
Learn how to apply the virtuous open source cycle model in practice. Learn to design contribution and return paths, measure value, reduce friction, and sustain open source investment successfully. 1. Introduction This is the second article in a series about the virtuous open source cycle model. The first article explained the basic model, showing how … Continue reading From Theory to Practice: Leveraging the Virtuous Open Source Cycle for Long-Term Success
The virtuous open source cycle: model description
This article introduces a simple, repeatable model to track how companies can contribute to open source projects and realize benefits in return
A frenetic week, from Software Heritage Symposium to FOSDEM 2025
The last few days of January and the first days of February were intense. I participated in several events leading up to FOSDEM 2025.