OpenChain CRA Checklist

03.08.2026

Dr. Andreas Kotulla

Startseite (Kacheln unten)

OpenChain CRA Requirement & Checklist: Turning Cyber Resilience Act Compliance into Action The European Cyber Resilience Act (CRA) is transforming the way manufacturers and software providers approach cybersecurity. While the regulation defines what organizations must achieve, many companies are still asking the same question: How do we actually implement these requirements in practice? This is exactly where the OpenChain CRA

Read more

SPDX 3.1 Is Coming – and Curator Pro Is Ready

16.07.2026

Dr. Andreas Kotulla

Startseite (Kacheln unten)

How the new SBOM standard is transforming software supply chain management and why it is critical for your CRA compliance Bitsea GmbH · July 2026 · Reading time: approx. 8 minutes Introduction: A Standard in Transition The Software Bill of Materials (SBOM) has evolved from a niche topic into a regulatory requirement over the past few years. With the EU

Read more

Shai-Hulud, npm, and modern software supply chains

27.01.2026

Dr. Andreas Kotulla

Startseite (Kacheln unten)

In September 2025, the npm ecosystem experienced one of the most consequential software supply-chain compromises to date. A self-propagating worm, now commonly referred to as Shai-Hulud, compromised hundreds of npm packages, harvested developer and CI/CD credentials, and used those credentials to spread laterally across the ecosystem by publishing further malicious updates under the identities of legitimate maintainers. Within weeks, a

Read more

Understanding the different Creative Commons licenses and how they impact software sharing, compliance, and collaboration.

13.01.2026

Dr. Andreas Kotulla

Startseite (Kacheln unten)

An Overview of the Creative Commons License Suite Creative Commons (CC) designed its license suite to make sharing creative work easier while allowing creators to retain some control over how others use their work. Founded in 2001 by Lawrence Lessig, Hal Abelson, and Eric Eldred, the Creative Commons Foundation built a flexible legal framework that encourages collaboration and the open

Read more

Open Source Monitor 2025

23.09.2025

Dr. Andreas Kotulla

Startseite (Kacheln unten)

– The importance of open source for business and administration Open source is no longer a niche topic—in 2025, it is clearer than ever how indispensable open software has become for our digital world. Without open source solutions, large parts of data traffic, many platforms, and even smartphones would come to a standstill. At the same time, the open source

Read more