"the EU assumes all open-source developers are commercial programmers and that your Fortune 500 company will take care of all the CRA's paperwork. Sure, some of us do work for IBM, Meta, or Google. Others still work on open source in their spare time or for Joe's FixIt Software Shoppe."
Mastodon Glitch EditionKarsten Schmidt (@toxi@mastodon.thi.ng)The current state of the EU's Cyber Resilience Act (CRA) will have devastating negative consequences for #OpenSource communities and esp. indy devs. Help us #FixTheCRA by making your voice heard (that also includes anyone outside the EU and anyone actively using/benefiting from OSS/FOSS/FLOSS software/services — do take action & make some noise in your own future self-interest!)
https://linuxfoundation.eu/cyber-resilience-act
https://www.linuxfoundation.org/blog/open-source-and-the-cra-will-not-work
https://www.theregister.com/2023/10/13/can_open_source_be_saved/
@villaresMastodon Glitch EditionKarsten Schmidt (@toxi@mastodon.thi.ng)@plexus@toot.cat Good point, I thought there was an "Act Now" button somewhere too... Just quoting from their email now:
Form your opinion
Open Source Foundations have provided several opinions on why the CRA is problematic. Here's a sample list:
- https://blog.opensource.org/the-ultimate-list-of-reactions-to-the-cyber-resilience-act/
- https://pyfound.blogspot.com/2023/04/the-eus-proposed-cra-law-may-have.html
- https://www.linuxfoundation.org/blog/linux-foundation-newsletter-april-2023
- https://eclipse-foundation.blog/2023/01/15/european-cyber-resiliency-act-potential-impact-on-the-eclipse-foundation/
- https://fsfe.org/news/2023/news-20230323-01.en.html
Voice your concerns
You can propose the aforementioned amendments emailing directly your MEPs (the Rapporteur for the CRA is Nicola Danti):
https://www.europarl.europa.eu/meps/en/home
https://www.europarl.europa.eu/meps/en/124821/NICOLA_DANTI/home
...or to your national European Council representative, either individually or your company public affairs department, is the most impactful thing you can do now.
https://www.consilium.europa.eu/en/european-council/
Get your organization involved
If your organization is already engaging with legislators either in your country in the EU or in Brussels, or you would like to get your organization engaged, you can also reach out at info@linuxfoundation.eu and we can discuss further joint next steps.
Time is of the essence here, as the legislation is progressing quickly!
#FixTheCRA #OpenSource