# EU CRA: What does it mean for open source?

DevFeed: [EU CRA: What does it mean for open source?](<https://devfeed.tech/articles/eu-cra-what-does-it-mean-for-open-source-36392.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/>)

Published: 2023-12-30T09:56:56Z

Content type: opinion

Language: en

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [cyber resilience act](<https://devfeed.tech/topics/cyber-resilience-act.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [Computing](<https://devfeed.tech/topics/computing.md>)

Tags: [compliance](<https://devfeed.tech/tags/compliance.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [eclipse-foundation](<https://devfeed.tech/tags/eclipse-foundation.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [legal](<https://devfeed.tech/tags/legal.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [regulatory](<https://devfeed.tech/tags/regulatory.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [rules](<https://devfeed.tech/tags/rules.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>), [standards](<https://devfeed.tech/tags/standards.md>)

## AI overview

This opinion examines the final compromise text of the EU Cyber Resilience Act and its implications for open-source software. It discusses community concerns about applying the act's development, testing, auditing, and support requirements to open-source projects, while arguing that some criticism of the final text is unfounded.

## Source excerpt

The final compromise text of the EU Cyber Resilience Act is now officially available, and various open source voices are currently opining on it. This is a complex act and other parts of the open source world (like the Eclipse Foundation and NLNet Labs) have been hard at work to advocate with the EU and member states to get a CRA that is good for open source. I've also been highly critical.