SPDX Cryptographic Algorithm List: summer 2026 update

This summer the SPDX Cryptography Group agreed on how to describe algorithm parameters, tightened its contribution and release processes, and opened the discussion on post-quantum cryptography. Where this report comes from This is an update of the work we do at the SPDX Cryptography Group. SPDX stands for Software Package Data Exchange. Our group is … Continue reading SPDX Cryptographic Algorithm List: summer 2026 update

toscalix.com

Lessons Learnt from Our BI Journey: From Open Source to SDV Products Development

Luis Cañas Díaz and I shared lessons from our BI journey at the Eclipse Foundation SDV webinar — from open source to automotive. Methodology, real use cases, and hard-won lessons on data, metrics, and insights.

toscalix.com

SPDX Cryptographic Algorithm List: Spring 2026 Update

The SPDX Cryptographic Algorithm List keeps growing. New cryptoClass values, a structured docs folder, PQC as a new property, and SCANOSS as our first user-contributor. Here is what happened in the past months.

toscalix.com

Regresa La Palma Tech Tagoror

La Palma Tech Tagoror vuelve. Los meetups en la isla canaria de La Palma se relanzan este 23 de abril, en La Real Sociedad Aridane, Los Llanos de Aridane. La entrada es gratuita previo registro. Únete al evento o apúntate al grupo de Meetup para estar informado de futuras actividades.

toscalix.com

SWHID and pURL

pURL and SWHID are both software identifiers with similarities, but they are fundamentally different. pURL is assigned by a registry. SWHID is derived from the code itself. They are not competitors — they complement each other.

toscalix.com

Description of SWHID: syntax

This article explains the syntax of SWHIDs, describing how the core identifier and optional qualifiers are structured. It shows how SWHIDs can reference software artifacts such as files, directories, revisions, and releases, and how their design enables precise comparison of software

toscalix.com

AGL’s Business Intelligence Journey – Understanding Activity

Measuring activity is not about producing more metrics. It is about supporting better decisions and enabling continuous improvement. We restricted our analysis to main/master to observe validated flow and kept visualizations simple to promote adoption across the community.

toscalix.com

From Commodity Trap to Sustainable Innovation: Convincing Automotive Executives to Embrace Open Source

Automotive companies spend too much on commodity software. Co-creating multiplies their investment through community collaboration. This frees resources for true differentiation. Read about, the concepts and ideas to master, that support this strategic journey.

toscalix.com

Value Types: Reputation and Influence

This is the forth article of the series describing the open source value flow model. We'll focus on the value types: Reputation and Influence. We'll cover how to measure and report on them.

toscalix.com

Why choosing open source tools; yet another argument

Your toolbox defines your craft. The freedom to choose, evolve, and master your tools is not just a productivity choice—it’s a long-term strategic decision that will put you in control of your craft, for life. Yet another reason to choose open source tools.

toscalix.com

Part 3: Evolving the Model by adding a company-driven open source project

When direct contribution brings too much friction within your company, you might need a temporary intermediate layer as an interface. See how this evolution helps organizations maximize value flow and ROI when contributing to open source. 1. Introduction: Evolving the Model In the inaugural post of this series, “The Virtuous Open Source Cycle: Model Description“, … Continue reading Part 3: Evolving the Model by adding a company-driven open source project

toscalix.com

Introducing the SPDX Cryptographic Algorithm List: a Personal View

The SPDX community is now creating a new list — similar to the SPDX License List — but focused on cryptographic algorithms. This post shares how this effort started, its current status, the next steps, and a final call for participation.

toscalix.com

Open Source Communities Are Outstanding Learning Environments

Open source communities are outstanding learning environments. By contributing, you learn actively, get real feedback, and grow faster than in most companies. If you want to take control of your career, start with open source.

toscalix.com

Why Business Intelligence is Key to Software Production

Business Intelligence (BI) is essential to understand and improve the production of software-defined products, yet its application is still immature. By building trust, involving engineers in defining metrics, and starting with small end-to-end use cases, companies can turn BI into a powerful driver of decision-making and continuous improvement.

toscalix.com

From Theory to Practice: Leveraging the Virtuous Open Source Cycle for Long-Term Success

Learn how to apply the virtuous open source cycle model in practice. Learn to design contribution and return paths, measure value, reduce friction, and sustain open source investment successfully. 1. Introduction This is the second article in a series about the virtuous open source cycle model. The first article explained the basic model, showing how … Continue reading From Theory to Practice: Leveraging the Virtuous Open Source Cycle for Long-Term Success

toscalix.com

The virtuous open source cycle: model description

This article introduces a simple, repeatable model to track how companies can contribute to open source projects and realize benefits in return

toscalix.com