Blog Posts

    Jfokus 2026

    by Ivar Grimstad

    This year’s Jfokus was probably the busiest I have had. My schedule filled up even though I didn’t have a talk at this year’s conference. This year, I joined the group of volunteer stage hosts, so I had the pleasure of introducing speakers in one of the rooms on Wednesday...

    Read More

    FOSDEM’26

    by Ivar Grimstad

    FOSDEM is a very special kind of event, and the 2006 edition was no exception. It is organised at a university campus, it is free for attendees, and there is a massive amount of exhibitors that are involved in open source in one way or the other. It is the...

    Read More

    From tested to "trustable": Rethinking software assurance at OCX 2026

    by Daniela Nastase

    In the past year, several high-profile outages disrupted airports, cloud platforms, and critical digital services worldwide. In each case, the software involved had been tested, certified, and deployed in accordance with accepted practices. Yet, when assumptions broke, the impact travelled fast across organisations, supply chains, and international borders. These recent...

    Read More

    Beyond compliance: what the Cyber Resilience Act means for software trust

    by Daniela Nastase

    As the Cyber Resilience Act (CRA) moves closer to enforcement, engineering teams across Europe are being asked to demonstrate secure development practices, software supply chain transparency, and improved vulnerability management. For many organisations, the focus has shifted to compliance: what needs to be shown, documented, and certified. However, compliance alone...

    Read More

    Hashtag Jakarta EE #318

    by Ivar Grimstad

    Welcome to issue number three hundred and eighteen of Hashtag Jakarta EE! As I write this, I am in Brussels for FOSDEM’26. Stay tuned for an update from this conference in a separate post shortly. Fun fact is that I am sitting in exactly the same place in the lobby...

    Read More

    Strengthening supply-chain security in Open VSX

    by Christopher Guindon

    The Open VSX Registry is core infrastructure in the developer supply chain, delivering extensions developers download, install, and rely on every day. As the ecosystem grows, maintaining that trust matters more than ever. A quick note on terminology: Eclipse Open VSX is an open source project, and the Open VSX...

    Read More

    Building Transparency Together: Eclipse Kura's Story on SBOM Adoption

    by Ioana Iliescu

    In the first blog post of this SBOM series, Driving Software Supply Chain Security: Practical Support for Open Source Projects in SBOM Implementation , we introduced our initiative and outlined how we are offering hands-on implementation support to early adopters projects. The second blog post, Project-Led SBOM Implementation: Our Journey...

    Read More

    Hashtag Jakarta EE #317

    by Ivar Grimstad

    Welcome to issue number three hundred and seventeen of Hashtag Jakarta EE! My first Jakarta EE presentation of 2026 was at Valencia JUG this week. This was the second time the JUG met after the restart after the pandemic. I wasn’t the only one presenting, as I was there with...

    Read More

    Valencia JUG 2026

    by Ivar Grimstad

    On Tuesday this week I presented The Past, Present, and Future of Enterprise Java at the Valencia JUG. In addition to my talk, we also had a short presentation from Tanja about how to contribute to Jakarta EE as well as a panel of Eclipse Foundation colleagues presenting what we...

    Read More

    Hashtag Jakarta EE #316

    by Ivar Grimstad

    Welcome to issue number three hundred and sixteen of Hashtag Jakarta EE! The conference speaking season is starting up again. My first talk of the year will be at Valencia JUG where I will present The Past, Present, and Future of Enterprise Java. After that, I will be attending FOSDEM...

    Read More