2026
CISA 2026 SBOM Minimum Elements: What to Prepare and Which Tools Fill the Gaps
Sunday, August 09, 2026 in 2026
An analysis of the revised SBOM minimum elements published on July 29, 2026 by CISA and 17 other agencies. The data fields grew from 7 to 17, and licensing entered the minimum baseline for the first time. Covers what an OSPO must decide before …
What the US AI Executive Order (2026-06-02) Means for Enterprise Open Source Managers
Wednesday, June 10, 2026 in 2026
An analysis of the US AI executive order signed on June 2, 2026, based on primary sources. Covers what the AI Cybersecurity Clearinghouse and the voluntary frontier model framework mean for enterprise open source managers, how they contrast with the …
The EU Open Source Strategy: Institutionalizing Open Source for Tech Sovereignty
Tuesday, June 09, 2026 in 2026
An analysis of the EU Open Source Strategy (COM(2026) 503), published by the European Commission on June 3, 2026, based on primary sources. Covers the four objectives, the seven-year EUR 2 billion mobilization, the governance structure, civil-society …
AI-Generated Code: How Far Should Open-Source Scanning Go?
Monday, June 08, 2026 in 2026
Whether AI-generated code needs snippet-level open-source license scanning — the decision factors, grounded in public sources, and how this differs from security-vulnerability scanning.
EU Cyber Resilience Act (CRA) Vulnerability Reporting Obligations — A Research Report for the 2026-09-11 Compliance Date
Monday, May 18, 2026 in 2026
The EU Cyber Resilience Act (CRA) brings its Article 14 reporting obligations into force on September 11, 2026. This article draws primarily on primary sources to lay out how Korean companies should prepare for the 24-hour, 72-hour, and 14-day …
Rockchip and FFmpeg: A License Dispute Case Study
Friday, February 20, 2026 in 2026
This article was written using Claude Code, and the key facts cited were cross-verified against primary sources. Notice This article reflects the author’s personal analysis and summary, and does not constitute legal advice. The facts cited …