Mirko Boehm on Project Maintenance Obligations
summary
Explains that the EU Cyber Resilience Act imposes concrete required support periods for commercial software, so anyone shipping a product must plan long-term security updates; manufacturers bear manufacturers' due diligence to ensure integrated open source can be maintained, not just to evaluate it initially. Notes there is no legal leverage to force maintainers, so companies must proactively maintain upstream projects or fund replacements, and describes what counts as acceptable engagement.
AI-written summary · about
related talks
53mThe EU CRA Readiness for Contributors and Maintainers : A Survival Toolkit
01h 03mHow EU regulations affect OSPOs work and why you should care
33mImplementing the EU Cyber Resilience Act (CRA)
39mAll your code belongs to Policy Makers, Politicians and the Law
29mSustaining Open Source Software: Tools for Change
38mBalancing the Supply Chain Act
42mCopyleft and the EU CRA
45mWhy EU Policy Making matters to everyone in the Open Source Ecosystem