
GrammaTech Adds SBOM Analysis Capability to CodeSentry
GrammaTech today updated its CodeSentry code inspection platform to include the ability to create a software bill of materials (SBOM) by analyzing application binaries. Walter Capitani, director of technical product management for GrammaTech, said version 3.0 of CodeSentry leverages the algorithms the company uses for binary software composition analysis to enable organizations to better address […]

EEEWW—Green iMessage Bubbles | ‘Great Resignation’ Redux | Faster Firefox 96
In this week’s The Long View: iMessage lock-in lessons, attrition-rate fixes, and more on Mozilla.

Continuous Delivery Challenge Looms Large in 2022
As 2022 kicks off, it’s becoming apparent that the major DevOps challenge organizations will face is mastering best practices that enable continuous delivery. A global survey of more than 19,000 software development professionals conducted by the Continuous Delivery (CD) Foundation found 44% of respondents use either continuous integration or deployment. However, less than one in […]

NPMs Sabotaged as OSS Sustainability Crisis Continues
A long-simmering debate over the sustainability of smaller open source projects moved beyond the theoretical when two widely used open source node packaged modules (npm) were deliberately sabotaged this week, allegedly by a primary contributor. Colors.js is an npm that has been downloaded more than 3.3 billion times, with more than 19,000 projects depending on […]

CNCF Takes LitmusChaos Platform to the Incubation Level
The technical oversight committee (TOC) for the Cloud Native Computing Foundation (CNCF) announced today it is elevating the open source LitmusChaos application testing platform to the incubation level. LitmusChaos is a chaos engineering platform donated to the CNCF by ChaosNative in 2020. Since then, it has seen adoption within production environments by more than 25 […]

GitLab Revamps Observability Strategy After Acquiring Opstrace
GitLab plans to make observability a more integrated element of its continuous integration/continuous delivery (CI/CD) platform after acquiring Opstrace. Opstrace’s open source project exposes a horizontally scalable application programming interface (API) created by Cortex for Prometheus, an open source monitoring platform being advanced under the auspices of the Cloud Native Computing Foundation (CNCF). It then […]

Intel Expands Scope of OneAPI Toolkit Initiative
Intel has made available a 2022 edition of its oneAPI toolkit through which it makes processor extensions accessible to DevOps teams. James Reinders, chief evangelist for Intel software products, said the goal is to make it simpler for DevOps teams to expose extensions to any company’s processors in the runtimes developers use. At its core, […]

Theranos’s Holmes VC Reverb | 5G C-Band Marches On | Mozilla Jumps Shark
In this week’s The Long View: The conviction of Theranos CEO Elizabeth Holmes leads to greater scrutiny of startups, higher-frequency 5G NR is creeping towards reality, and Mozilla gets criticized for promoting climate-harming scams.

New Relic: Observability Tops 2022 DevOps Agenda
If 2021 was the year when IT organizations became aware of the need for observability, then the coming year should see observability aspirations realized. A report published by observability platform provider New Relic postulates that there are no less than 11 factors converging in a way that will make observability an absolute requirement for organizations. […]

Rails 7 FTW | WFH is SOP | 586M Passwords Dumped
In this week’s The Long View: Ruby on Rails 7.0 is go, working from home is still de rigueur, and HIBP gets far, far bigger.

Quali Adds Free Tier to DevOps Automation Platform
Quali has added a free tier of service to its Torque platform for automating infrastructure provisioning and application workload deployments. In addition, the company has updated the software-as-a-service (SaaS) platform to provide blueprints through which it provides tighter integration with Terraform, an open source infrastructure-as-code (IaC) tool, along with support for custom tags to make […]

Red Hat Adds Service to Customize RHEL Images
Red Hat this week announced a public beta of an Image Builder service that streamlines the process of building customized instances of the Red Hat Enterprise Linux (RHEL) operating system. Scott Herold, director of product management for RHEL at Red Hat, said the Image Builder service enables an IT team to define a “gold” template […]

Hasura Adds Engine to Transform REST APIs to GraphQL
Hasura today unveiled a Data Hub repository for integrating application programming interfaces (APIs). The repository includes a connector that makes it easier for IT organizations to convert REST APIs into ones based on the GraphQL specification. Tanmai Gopal, Hasura CEO, said the connector eliminates the need to write custom code to connect existing REST endpoints […]

Speedscale Makes Free API Observability Tool Available
Speedscale today announced it is making a free edition of its observability tool for application programming interfaces (APIs) available to developers. Ken Ahrens, Speedscale CEO, said the goal is to expose more developers to the company’s API testing tool that can be accessed on their local machine via a command line interface (CLI). Dubbed Speedscale […]

The Graph Donates $48M to Advance GraphQL Platforms
The Graph, a provider of indexing and query tools based on the GraphQL language designed for blockchain platforms, today announced it has given $48 million to The Guild, a group of developers advancing an open source application programming interface (API) platform to further development of GraphQL-based technologies. Administered via The Graph Foundation, a nonprofit consortium […]

Log4j Puts Effective IT Operations at Center Stage
News of the Apache Log4j vulnerability exploit is striking fear into the hearts of both software makers and users. Log4j is the most popular Java logging service used today, with over 400,000 GitHub downloads and has been embedded in most internet services and products from companies all over the world, including Apple, Amazon, Cloudflare, Steam, […]

U.S. Govt. CX EO | Mozilla Revenue | Log4j Latest
In this week’s The Long View: Improving U.S. government CX, how much money Mozilla makes, and the latest on the Log4j/Log4Shell débâcle.

AWS Outage and App Resiliency: Did a Roomba Replace the Canary?
Canaries were once sent into coal mines as an early warning sign against danger—for me, it was my Roomba failing to automatically search out dog hair and clean the floor under my sons’ dining room chairs. Cloud-enabled apps also were acting “weird”. Some were down, while others were just slow—although, in my view, slow may […]

NetApp Survey Shows Hybrid Cloud is Maturing
A small survey of 79 midsized to large enterprises conducted by NetApp suggests enterprise IT organizations might finally be embracing hybrid cloud computing beyond use cases involving backup and recovery. The survey finds 20% of respondents are currently employing both on-premises and cloud resources to support the same workload in a production environment, with another […]

Red Hat Brings Ansible Automation to Microsoft Azure Cloud
Red Hat this week announced that a private preview of the Red Hat Ansible Automation Platform is now available on the Microsoft Azure Cloud. Tom Anderson, vice president of Red Hat Ansible automation, said making the Red Hat instance of the open source automation framework available on Azure is the first step toward making it […]

Stacklet Embeds Collaboration in Compliance-as-Code Platform
Stacklet has added collaboration capabilities to its security and compliance platform that automatically groups related notifications, routes them to the right stakeholders and integrates with existing workflows and collaboration tools. The Stacklet platform is based on Cloud Custodian, an open source project that provides access to a domain-specific language that enables an IT team to […]

Sentry Acquires Specto to Add Analytics Tool for Observability
Sentry this week announced it has acquired Specto, a provider of a set of tools for analyzing the performance of mobile applications. As the number of mobile applications being deployed continues to expand, developers are being asked to manage them as part of a general shift left that requires them to take on more accountability […]

Vercel Acquires Turborepo to Gain Build System
Vercel today announced it has acquired Turborepo, a provider of a build system for JavaScript and TypeScript applications that provides developers with access to an easy-to-use monorepository for their code. In the wake of that acquisition, the command line interface (CLI) for accessing Turborepo will now be available under an open source license. Jared Palmer, […]