mastodon - Link to source

The "good" people at Emerson for some reason couldn't think for themselves when I responded to them on behalf of #curl and instead continue and send the same questions to the #libssh2 project with the same "demands".

"This is a gentle reminder regarding our earlier request for your input on the cybersecurity risk assessment of the software component “libssh2” version 1.11.0, as part of our compliance efforts with the EU Cyber Resilience Act (CRA)."

#curl #libssh2
in reply to daniel:// stenberg://

mastodon - Link to source

synlogic

I admire anyone whose worked on FOSS as long as you have, sir, because the few times I've dipped my toe in the water I've found little reward and mostly pain. My dabbling with LatLearn (my Golang latency instrumentation lib) has been the closest to a net win for me so far. I suspect mainly because I've minimized my upkeep burden and have few users anyway loltears. But if randos emailed me out of the blue demanding I do unpaid work for them it would grow old fast!
in reply to daniel:// stenberg://

mastodon - Link to source

Thomas Svensson 🖖

@varx

It is likely that the compliance staff is quite clueless when it comes to open source licenses. Plus they are an ocean away from those who chose and implemented the use. Who could select open source as there are no contract and financial transactions involved.

I really hope EU is serious about enforcing this new regulation, so these freeloaders will have to make good to continue using open source.

@Varx
⇧