This summer the SPDX Cryptography Group agreed on how to describe algorithm parameters, tightened its contribution and release processes, and opened the discussion on post-quantum cryptography. Where this report comes from This is an update of the work we do at the SPDX Cryptography Group. SPDX stands for Software Package Data Exchange. Our group is … Continue reading SPDX Cryptographic Algorithm List: summer 2026 update

Luis Cañas Díaz and I shared lessons from our BI journey at the Eclipse Foundation SDV webinar — from open source to automotive. Methodology, real use cases, and hard-won lessons on data, metrics, and insights.

The SPDX Cryptographic Algorithm List keeps growing. New cryptoClass values, a structured docs folder, PQC as a new property, and SCANOSS as our first user-contributor. Here is what happened in the past months.

La Palma Tech Tagoror vuelve. Los meetups en la isla canaria de La Palma se relanzan este 23 de abril, en La Real Sociedad Aridane, Los Llanos de Aridane. La entrada es gratuita previo registro. Únete al evento o apúntate al grupo de Meetup para estar informado de futuras actividades.

pURL and SWHID are both software identifiers with similarities, but they are fundamentally different. pURL is assigned by a registry. SWHID is derived from the code itself. They are not competitors — they complement each other.

This article explains the syntax of SWHIDs, describing how the core identifier and optional qualifiers are structured. It shows how SWHIDs can reference software artifacts such as files, directories, revisions, and releases, and how their design enables precise comparison of software

Measuring activity is not about producing more metrics. It is about supporting better decisions and enabling continuous improvement. We restricted our analysis to main/master to observe validated flow and kept visualizations simple to promote adoption across the community.

Automotive companies spend too much on commodity software. Co-creating multiplies their investment through community collaboration. This frees resources for true differentiation. Read about, the concepts and ideas to master, that support this strategic journey.

This is the forth article of the series describing the open source value flow model. We'll focus on the value types: Reputation and Influence. We'll cover how to measure and report on them.

Your toolbox defines your craft. The freedom to choose, evolve, and master your tools is not just a productivity choice—it’s a long-term strategic decision that will put you in control of your craft, for life. Yet another reason to choose open source tools.

When direct contribution brings too much friction within your company, you might need a temporary intermediate layer as an interface. See how this evolution helps organizations maximize value flow and ROI when contributing to open source. 1. Introduction: Evolving the Model In the inaugural post of this series, “The Virtuous Open Source Cycle: Model Description“, … Continue reading Part 3: Evolving the Model by adding a company-driven open source project

The SPDX community is now creating a new list — similar to the SPDX License List — but focused on cryptographic algorithms. This post shares how this effort started, its current status, the next steps, and a final call for participation.

Open source communities are outstanding learning environments. By contributing, you learn actively, get real feedback, and grow faster than in most companies. If you want to take control of your career, start with open source.

Business Intelligence (BI) is essential to understand and improve the production of software-defined products, yet its application is still immature. By building trust, involving engineers in defining metrics, and starting with small end-to-end use cases, companies can turn BI into a powerful driver of decision-making and continuous improvement.

Learn how to apply the virtuous open source cycle model in practice. Learn to design contribution and return paths, measure value, reduce friction, and sustain open source investment successfully. 1. Introduction This is the second article in a series about the virtuous open source cycle model. The first article explained the basic model, showing how … Continue reading From Theory to Practice: Leveraging the Virtuous Open Source Cycle for Long-Term Success

This article introduces a simple, repeatable model to track how companies can contribute to open source projects and realize benefits in return