open source governance

Cloudsmith Launches AI Agent Skills Registry at KubeCon 2026

Cloudsmith Launches AI Agent Skills Registry at KubeCon 2026

Application Development, DevSecOps, Events, KubeCon + CloudNativeCon NA 2026, Platform Engineering /

Cloudsmith announced its AI Agent Skills Registry at KubeCon 2026, extending enterprise artifact governance to the AI coding agent skills that autonomous agents execute during software development. The move addresses a growing software supply chain gap as agentic workflows expand beyond traditional developer populations. Platform engineering teams gain version control, policy enforcement, and audit observability for AI skills alongside existing artifact types.

Cloudsmith Launches AI Agent Skills Registry at KubeCon 2026 Read More »

Europe's Open Source Governance Gap Is a Competitive Risk

Europe’s Open Source Governance Gap Is a Competitive Risk

Application Development, Cyber Security, Digital Sovereignty, Events, Open Source Summit Europe 2026, Technology /

The Linux Foundation’s 2026 State of Open Source in Europe and 35 Years of Linux reports document a compounding governance gap that costs organizations real returns on open source investment. ECI Research analysis examines what the findings mean for procurement strategy, AI adoption, and developer operations across public and private sector organizations.

Europe’s Open Source Governance Gap Is a Competitive Risk Read More »

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Application Development, Compliance, Open Source, Security /

The Eclipse Foundation and OWASP have signed an MOU to strengthen open source security and support EU Cyber Resilience Act compliance. With mandatory reporting obligations taking effect September 11, 2026, the partnership targets SBOM adoption, supply chain security, and maintainer readiness. ECI Research data shows supply chain security is a top-12-month investment priority for nearly half of enterprise respondents.

Eclipse Foundation & OWASP Unite for CRA Open Source Security Read More »

Google's Open Source Strategy in the AI Era | ECI Research

Google’s Open Source Strategy in the AI Era | ECI Research

Application Development, Cloud, DevOps, Infrastructure /

Google’s OSPO presented its open source strategy to an external developer council, framing open source as a deliberate competitive lever rather than altruism. ECI Research analyzes the A2A protocol bet, supply chain sustainability risks, and what enterprise ITDMs and developers should take away. The governance frameworks being written today will shape open source contribution norms for the next decade.

Google’s Open Source Strategy in the AI Era | ECI Research Read More »

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

Application Development, Compliance, Cyber Security, DevSecOps, Open Source /

IBM and Red Hat have announced Project Lightwell, a $5 billion initiative pairing 20,000 engineers with AI to secure enterprise open source software at scale. The clearinghouse model targets supply chain vulnerabilities across independent libraries, AI frameworks, and data streaming platforms. ECI Research examines what this means for ITDMs and developers navigating an increasingly fragmented open source security landscape.

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale Read More »

Open Source AI Governance: Strands, ROS MCP & Foundation Strategy

Open Source AI Governance: Strands, ROS MCP & Foundation Strategy

AI, Application Development, Cloud-Native, Kubernetes, Observability, Open Source, Open Source Summit 2026, Software Development /

AWS’s Strands agent SDK and Contour Robotics’ ROS MCP bridge both landed in open source foundations at Linux Foundation’s Open Source Summit, signaling that foundation governance is becoming a prerequisite for enterprise AI infrastructure adoption. ECI Research analyzes the implications for ITDMs evaluating agentic tooling and developers building production agent systems.

Open Source AI Governance: Strands, ROS MCP & Foundation Strategy Read More »