[{"data":1,"prerenderedAt":402},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Ffosdem-2026":188,"sections:\u002Fblog\u002Ffosdem-2026":393,"feed:\u002Fblog\u002Ffosdem-2026":396,"breadcrumbs:\u002Fblog\u002Ffosdem-2026":397},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":386,"description":191,"extension":387,"featuredFooter":191,"keywords":191,"meta":388,"navigation":92,"path":389,"redirectUrl":191,"seo":390,"seoTitle":191,"socialImage":191,"stem":391,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":392},"blog\u002Fblog\u002Ffosdem-2026.md","FOSDEM and EU Open Source Week 2026: Key Events for the ORC Community",null,"Juan Rico",{"type":194,"value":195,"toc":373},"minimark",[196,214,222,227,232,246,249,262,265,269,282,285,289,302,305,308,312,323,327,339,343,370],[197,198,199,200,207,208,213],"p",{},"Late January in Brussels has become an important moment for anyone working at the intersection of open source and European regulation. In 2026, ",[201,202,206],"a",{"href":203,"rel":204},"https:\u002F\u002Ffosdem.org\u002F2026\u002F#",[205],"nofollow","FOSDEM"," and ",[201,209,212],{"href":210,"rel":211},"https:\u002F\u002Fopensourceweek.eu\u002F",[205],"EU Open Source Week"," again bring together developers, maintainers, policymakers, and organisations that are actively shaping how open source is developed, distributed, and used in Europe.",[197,215,216,217,221],{},"For the ORC community, this week is particularly relevant. The ",[218,219,220],"strong",{},"Cyber Resilience Act (CRA)"," is moving from interpretation to implementation, and many of the conversations happening during this week focus on what that means in practice.",[223,224,226],"h2",{"id":225},"key-events-for-the-orc-community","Key Events for the ORC Community",[228,229,231],"h3",{"id":230},"code-compliance","Code & Compliance",[197,233,234,235,241,242,245],{},"As part of EU Open Source Week, ",[201,236,239],{"href":237,"rel":238},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002Fcode-compliance-2026\u002Fsummary",[205],[218,240,231],{}," takes place on ",[218,243,244],{},"Thursday, 29 January"," in Brussels. It is a focused, in-person event that brings together open source communities, industry, and policy experts to discuss compliance challenges in a concrete, technical way.",[197,247,248],{},"Discussions focus on topics such as:",[250,251,252,256,259],"ul",{},[253,254,255],"li",{},"How open source projects and downstream users can align on security and compliance expectations",[253,257,258],{},"The roles and responsibilities of different actors in the open source supply chain",[253,260,261],{},"How collaboration between communities, industry, and regulators can reduce friction while improving software security",[197,263,264],{},"For the ORC community, this event provides a focused starting point for discussions grounded in real project experience.",[228,266,268],{"id":267},"fosdem-cra-in-practice","FOSDEM: CRA in Practice",[197,270,271,272,277,278,281],{},"At FOSDEM itself, the “",[201,273,276],{"href":274,"rel":275},"https:\u002F\u002Ffosdem.org\u002F2026\u002Fschedule\u002Ftrack\u002Fcra-in-practice\u002F",[205],"CRA in practice","” devroom on ",[218,279,280],{},"Saturday, 31 January"," is one of the most relevant spaces for our community.",[197,283,284],{},"This devroom focuses on how the CRA is affecting open source projects today — not in theory, but in code, processes, and governance. Talks and discussions focus on maintainers and contributors who are actively adapting their projects to new regulatory expectations.",[228,286,288],{"id":287},"fosdem-open-source-eu-policy","FOSDEM: Open Source & EU Policy",[197,290,291,292,295,296,301],{},"On ",[218,293,294],{},"Sunday, 1 February",", the ",[201,297,300],{"href":298,"rel":299},"https:\u002F\u002Ffosdem.org\u002F2026\u002Fschedule\u002Ftrack\u002Fopen-source-eu-policy\u002F",[205],"Open Source & EU Policy devroom"," provides a broader policy context.",[197,303,304],{},"This devroom brings developers and policymakers into the same conversation. It covers the CRA, but also situates it alongside other EU initiatives that affect open source, such as standardisation, software liability, and digital sovereignty.",[197,306,307],{},"This devroom helps clarify why certain policy choices are being made and how community voices can influence outcomes.",[228,309,311],{"id":310},"global-vulnerability-intelligence-platform-gvip-summit","Global Vulnerability Intelligence Platform (GVIP) Summit",[197,313,314,315,241,319,322],{},"The ",[201,316,311],{"href":317,"rel":318},"https:\u002F\u002Fwww.gvip-project.org\u002F",[205],[218,320,321],{},"Wednesday, 28 January"," in Brussels. The Summit focuses on the rapidly changing landscape of vulnerability information and the challenges facing long-standing systems around funding, scalability, trust, and governance. GVIP brings together a global, multi-stakeholder community to discuss how vulnerability intelligence can remain openly available, reliable, and sustainable over the long term. The ORC Working Group is sponsoring the event, reflecting its interest in strengthening shared approaches to security, governance, and compliance across the open source ecosystem.",[228,324,326],{"id":325},"foss-license-and-security-compliance-tools-workshop","FOSS license and security compliance tools workshop",[197,328,329,330,333,334,338],{},"A one-day workshop on open source licenses and security compliance will take place on ",[218,331,332],{},"Friday, 30 January",". The ",[201,335,326],{"href":336,"rel":337},"https:\u002F\u002Fworkshop.aboutcode.org\u002F",[205]," brings together developers, users, and contributors of open source compliance tools to exchange requirements, share plans, and identify collaboration opportunities. It will focus on tools and practices supporting software provenance, vulnerability management, license detection, SBOM creation and consumption, dependency and container analysis, code scanning, and regulatory compliance, including the Cyber Resilience Act.",[228,340,342],{"id":341},"other-events-during-eu-open-source-week","Other Events During EU Open Source Week",[197,344,345,346,351,352,354,355,360,361,363,364,369],{},"The week also includes broader policy-focused events such as the ",[201,347,350],{"href":348,"rel":349},"https:\u002F\u002Fsummit.openforumeurope.org\u002F",[205],"EU Open Source Policy Summit"," on ",[218,353,332],{}," and the ",[201,356,359],{"href":357,"rel":358},"https:\u002F\u002Fawards.europeanopensource.academy\u002F",[205],"European Open Source Awards"," on the evening of ",[218,362,244],{},". While not core ORC events, they provide useful context for the wider discussions taking place and recognise the contributions and achievements of the open source community over the past year. A full overview of additional activities throughout the week is available at ",[201,365,368],{"href":366,"rel":367},"http:\u002F\u002Fopensourceweek.eu",[205],"opensourceweek.eu",".",[197,371,372],{},"If you are involved in ORC or the broader open source community, this week offers a concentrated view of where open source and regulation are heading and how we can shape that direction together. We hope to see you there!",{"title":374,"searchDepth":375,"depth":375,"links":376},"",2,[377],{"id":225,"depth":375,"text":226,"children":378},[379,381,382,383,384,385],{"id":230,"depth":380,"text":231},3,{"id":267,"depth":380,"text":268},{"id":287,"depth":380,"text":288},{"id":310,"depth":380,"text":311},{"id":325,"depth":380,"text":326},{"id":341,"depth":380,"text":342},"2026-01-12","md",{},"\u002Fblog\u002Ffosdem-2026",{"title":190},"blog\u002Ffosdem-2026","VreJS8BkCqqzktsDCOihQRy--oojruHey8j_oZWo7pU",[394],{"path":395,"visibility":191},"\u002Fblog",false,[398,401],{"path":399,"text":400},"\u002F","ORC",{"path":395,"text":109},1792684542236]