“Identifying software”
https://guix.gnu.org/en/blog/2024/identifying-software/#Guix developer perspective on what it means to identify software, in particular from an
#infosec perspective.
It was initially written as a response to a CISA request for comments but contains insight useful in broader contexts.