Potential Impacts of Cyber Resilience Act on Open Source Projects

0
210
System Programming for App Developers

Dit bericht verscheen eerder bij FOSSlife

After reviewing the proposed Cyber Resilience Act (CRA) and Product Liability Act, the Python Software Foundation (PSF) has found “issues that put the mission of our organization and the health of the open-source software community at risk,” says Deb Nicholson, Executive Director of the PSF.

Specifically, Nicholson states:

We’re concerned that some of the current proposed policy language doesn’t make things clear enough for an ecosystem like Python’s. Under the current language, the PSF could potentially be financially liable for any product that includes Python code, while never having received any monetary gain from any of these products. The risk of huge potential costs would make it impossible in practice for us to continue to provide Python and PyPI to the European public. 

The Eclipse Foundation and NLnet Labs have also issued statements warning of the adverse effects that the CRA could have on global open source projects. Maarten Aertsen of NLnet Labs urges developers to educate themselves and spread the word about the proposed policy: “Help your fellow developers. Talk to people around you with legal and policy skills. Let them know how the CRA proposal affects them, their organization or society at large.”

Additionally, “PSF members and Python users in Europe may wish to write to their MEP voicing their concerns about the proposed CRA law before April 26th, while amendments that will protect public open source repositories are still being considered,” Nicholson says.

Read more at Python Software Foundation.

Contact FOSSlife to learn about partnership and sponsorship opportunities.

 

 

Subscribe now to FOSSlife Weekly and get news and features delivered to your inbox.

Dit bericht verscheen eerder bij FOSSlife

Vorig artikelStorage incident vrijdag 14 april, gepubliceerd op www.bit.org
Volgend artikelWhy IAM systems are crucial for securing multicloud architecture