According to @euractiv_global a final #CyberResilienceAct text will be ready already next week. There are good news and bad news. Legislators seem to recognise the nature of #OpenSource as a novel industrial process. However, projects under the umbrella of supporting organisations (e.g. foundations) are still required to comply with parts of the #CRA. To see if the dangerous upstream certification requirement remains.
