Concerned about the CRA and how it impacts open source?
summary
Examines how CRA implementation changes open source compliance, with regulators, maintainers and users mapping policy interpretation onto everyday workflows and identifying concrete gaps in license scanning, SBOM generation, and contributor provenance. Shares a proposed checklist for repositories, a timetable tied to 2026 enforcement milestones, and plans for interoperability tests between common compliance tools. Meets in Brussels on 22–23 October 2025 for focused working sessions and negotiations about enforcement scope and tooling responsibilities.
AI-written summary · about
related talks
44mPanel Discussion: Prepare for the CRA: Open Source Governance in the Age of Cyber Resilience
42mMaking EU CRA (Cyber Resilience Act) simplified and non-scary for OSS contributors
42mPanel Discussion: The Impact of the CRA on the Open Source Ecosystem
54mThe CRA, Where Are We Six Months After Its Approval
42mMaking EU CRA (Cyber Resilience Act) Simplified and Non-scary for OSS Contributors
14mThe CRA: an Open Source Sustainability law?
53mHow To Stay Compliant With and Take Benefits From the EU CRA (Cyber Resilience Act)
32mHow to stay compliant with and take benefits from the EU CRA (Cyber Resilience Act)