EU’s Cyber Resilience Act isn’t fully in effect yet, but #OSS maintainers are already bracing for compliance requests. cURL creator @bagder is among the first to receive one (from a Fortune 500 company using a 2 year old version.)

What happens when companies treat volunteers like vendors?

socket.dev/blog/oss-maintainer…

Open Source Maintainers Feeling the Weight of the EU’s Cyber...

The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.

^Socket