Ecma TC54 Explained: The Committee Behind CycloneDX, purl, TEA and CLE
Ecma TC54 is the Ecma International committee that standardises CycloneDX, Package URL, CLE and TEA. How it works, what it published and how to join.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Ecma TC54 is the Ecma International committee that standardises CycloneDX, Package URL, CLE and TEA. How it works, what it published and how to join.
ISO/IEC 18974:2023 sets the minimum process for handling known vulnerabilities in open source you ship: a policy, roles, an SBOM and a public contact.
Snell's law, n1 sin θ1 = n2 sin θ2, sets how light bends. Past the critical angle light reflects totally, which is how fibre traps it. Worked examples.
Bernoulli's equation trades pressure for speed and height along a streamline. Assumptions, pipe, tank and Pitot tube examples, and what it says about lift.
Monitor a homelab with Prometheus, exporters, Alertmanager and Grafana: what to watch, how to alert without noise, and what to keep off the internet.
Run Forgejo at home behind a TLS proxy, keep CI runners on separate isolated hosts, close registration, require 2FA, and test restores from forgejo dump.
Trusted Firmware-A is Arm's open reference for secure boot and the EL3 monitor. Learn BL1 to BL33, the chain of trust, PSCI, OP-TEE and measured boot.
PXE boots a machine with DHCP and TFTP; UEFI HTTP Boot fetches a URI over HTTP or HTTPS. How both work, where iPXE fits and how to secure network boot.
Raspberry Pi OS follows Debian, from Raspbian wheezy to Trixie. Every base with dates, how Pi 4 and Pi 5 EEPROM updates work, and how to upgrade safely.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.