Education
The MIT License: A Complete Guide for Developers
The MIT License is a permissive open source license that allows virtually unrestricted use, modification, distribution, and sublicensing of...
Education
SBOM Management: How to Organize, Track, and Act on Your SBOMs
SBOM management is the practice of organizing, storing, versioning, distributing, and acting on Software Bills of Materials across an...
Announcement
Announcing sbomify v0.24: The One with All the Plugins
Today marks a pivotal release for sbomify. With v0.24, we are laying the foundation for what will become a fully extensible, plugin-based...
Compliance
FDA Medical Device SBOM Requirements: What the New Cybersecurity Guidance Means for Manufacturers
On June 27, 2025, the FDA issued updated guidance on “Cybersecurity in Medical Devices: Quality System Considerations and Content of...
Education
Apache License 2.0: What It Is, How It Works, and What It Means for Your Software
The Apache License 2.0 is a permissive open source license published by the Apache Software Foundation (ASF) that allows users to freely...
Podcast
CRA Explained: What the Cyber Resilience Act Means for Device Manufacturers
The EU Cyber Resilience Act (CRA) is transforming how device manufacturers approach cybersecurity. To break down what this means in...
Education
The GPL License: A Comprehensive Guide to the GNU General Public License
The GPL (GNU General Public License) is a free software license that guarantees end users the freedom to run, study, modify, and share...
Education
Software Development Life Cycle (SDLC): A Complete Guide
The Software Development Life Cycle (SDLC) is a structured process that defines the stages involved in developing software from initial...
Education
The Role of SBOMs in an OBOM: Ensuring Compliance and Security in Smart Thermometer Development
In today’s software landscape, compliance with security and transparency mandates is more critical than ever. Executive orders, such...
News
Call for Views on the Code of Practice for Software Vendors: Ensuring Security and Resilience
The UK government has launched a call for views on a new voluntary Code of Practice for Software Vendors. This initiative aims to enhance...
Compliance
NIST Cybersecurity Framework (CSF) 2.0: What It Means for Software Supply Chain Security
In February 2024, the National Institute of Standards and Technology (NIST) released version 2.0 of the Cybersecurity Framework – the most...
Education
Navigating the Landscape of Open Source Licenses
Open source software forms the backbone of modern applications, from the smallest utilities to the infrastructure running the largest data...