<story><title>EU Cyber Resilience Act: What does it mean for open source?</title><url>https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/</url></story><parent_chain></parent_chain><comment><author>jbk</author><text>The new version of the CRA is quite an improvement, and most of discussions around the open source communities were about older versions that were quite concerning. There were a lot of scary discussions on the foundations mailing list and on various board of open source non-profit.&lt;p&gt;This article is a good step to explain what has changed.&lt;p&gt;&lt;i&gt;(I was quite concerned as President of VideoLAN and involved in VLC and FFmpeg, since both projects would have been threatened by previous drafts)&lt;/i&gt;</text></comment>
<story><title>EU Cyber Resilience Act: What does it mean for open source?</title><url>https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/</url></story><parent_chain></parent_chain><comment><author>jahav</author><text>&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;eur-lex.europa.eu&amp;#x2F;legal-content&amp;#x2F;EN&amp;#x2F;TXT&amp;#x2F;PDF&amp;#x2F;?uri=CONSIL:ST_17000_2023_INIT&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;eur-lex.europa.eu&amp;#x2F;legal-content&amp;#x2F;EN&amp;#x2F;TXT&amp;#x2F;PDF&amp;#x2F;?uri=CONS...&lt;/a&gt;&lt;p&gt;Important bits (10c and around):&lt;p&gt;* Libraries&amp;#x2F;non-end products are fine, unless monetized.&lt;p&gt;* Employee contributions seem to be fine.&lt;p&gt;* Foundations seem to be fine.&lt;p&gt;* Non-core developers are fine&lt;p&gt;Seems like significantly better version.</text></comment>