Writing on web infrastructure, open-source ecosystems, and the craft of reliable software.https://toderash.net/en-cahttps://toderash.net/blog/open-source-is-not-enough/https://toderash.net/blog/open-source-is-not-enough/In response to Joost de Valk's post saying that open source is the right start but not enough, I suggest some conditions needed for healthy open source projects. Without proper governance and a model that ensures sustainability, a briefcase full of funding could kill a project as easily as stimulating it. Mon, 25 May 2026 00:00:00 GMThttps://toderash.net/blog/security-trust-oss-supply-chain/https://toderash.net/blog/security-trust-oss-supply-chain/Supply chain security ensures you get what you asked for, but not whether what you asked for is safe. Establishing trust in software requires verifiable provenance with cryptographically attributable identity for the publisher. Fri, 22 May 2026 23:00:00 GMThttps://toderash.net/blog/kairos-being-in-the-room/https://toderash.net/blog/kairos-being-in-the-room/A modest May 2026 gathering in Atlanta felt like a seminal moment for the open source enterprise CMS market in North America, which is currently facing uncertainty and upheaval. TYPO3 is stepping in boldly. Fri, 22 May 2026 00:00:00 GMT