[{"data":1,"prerenderedAt":509},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-april2025":188,"sections:\u002Fblog\u002Forc-monthly-april2025":500,"feed:\u002Fblog\u002Forc-monthly-april2025":503,"breadcrumbs:\u002Fblog\u002Forc-monthly-april2025":504},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":493,"description":191,"extension":494,"featuredFooter":191,"keywords":191,"meta":495,"navigation":92,"path":496,"redirectUrl":191,"seo":497,"seoTitle":191,"socialImage":191,"stem":498,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":499},"blog\u002Fblog\u002Forc-monthly-april2025.md","ORC Monthly: CRA Monday launched, feedback submitted, and deliverables plan expanded",null,"Juan Rico",{"type":194,"value":195,"toc":482},"minimark",[196,211,214,225,230,316,320,343,347,358,362,397,401,426,430,433,456,460],[197,198,199,200,210],"p",{},"We’re pleased to share that, following active community discussions and collaboration, we have submitted feedback to the European Commission on the ",[201,202,206],"a",{"href":203,"rel":204},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Fblob\u002Fmain\u002Fproduct-definitions\u002Finput-to-draft-regulation.md",[205],"nofollow",[207,208,209],"em",{},"Definition of Important and Critical Product Categories",". This contribution reflects our collective understanding of how the CRA definitions intersect with open source development and distribution.",[197,212,213],{},"Thank you to everyone who contributed time, insight, and expertise to this effort.",[197,215,216,219,222],{},[207,217,218],{},"Timo Perala and Dirk-Willem van Gulik",[220,221],"br",{},[207,223,224],{},"ORC co-chairs",[226,227,229],"h2",{"id":228},"whats-new","What’s New",[231,232,233,244,270,279,282,293,302],"ul",{},[234,235,236,237,243],"li",{},"Feedback on the ",[201,238,241],{"href":239,"rel":240},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Ftree\u002Fmain\u002Fproduct-definitions",[205],[207,242,209],{}," was submitted.",[234,245,246,247,251,252,257,258,263,264,269],{},"The first ",[248,249,250],"strong",{},"CRA Monday"," session featured Sebastien Heurtematte providing an ",[201,253,256],{"href":254,"rel":255},"https:\u002F\u002Fyoutu.be\u002F1CWy55AhEnc",[205],"overview of the OCCTET project",". These sessions will take place bi-weekly (details in the ",[201,259,262],{"href":260,"rel":261},"https:\u002F\u002Fcalendar.google.com\u002Fcalendar\u002Fu\u002F0\u002Fembed?src=c_7db8e3f13c4fac984103918a97c704bb1d619da0fdb66d33f1747849b6020aea@group.calendar.google.com",[205],"community calendar",") and ",[201,265,268],{"href":266,"rel":267},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fissues?q=is%3Aissue+state%3Aopen+label%3Acra-mondays",[205],"proposals for future sessions"," can be submitted through GitHub - all suggestions are welcome.",[234,271,272,273,278],{},"The Cyber Resilience SIG continues to refine and expand the ",[201,274,277],{"href":275,"rel":276},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Ftree\u002Fmain\u002Fcyber-resilience-sig#deliverables",[205],"deliverables plan",", which outlines the expected outputs related to CRA engagement. New content includes additional detail on timelines, responsibilities, and links to in-progress work.",[234,280,281],{},"Members of the ORC Working Group participated in the joint CEN\u002FCENELEC–ETSI workshop in Brussels, supporting coordination between European Standardization Organizations (ESOs) on CRA-related work.",[234,283,284,289,290,292],{},[201,285,288],{"href":286,"rel":287},"https:\u002F\u002Fec.europa.eu\u002Ftransparency\u002Fexpert-groups-register\u002Fscreen\u002Fmeetings\u002Fconsult?lang=en&meetingId=48259&fromExpertGroups=true",[205],"Minutes from the first meeting of the CRA Expert Group"," are now available. ",[220,291],{},"\nMore recently, a working group of the CRA Expert Group focused on open source brought together a strong group of participants, including companies and foundations from across the ecosystem. Feedback on the meeting was generally positive, with the European Commission demonstrating openness to suggestions and a clear shift toward collaborative problem-solving, particularly on definition-related topics.",[234,294,295,296,301],{},"Work on SBOMs continues to gain traction across a range of ecosystems. From OWASP initiatives to ",[201,297,300],{"href":298,"rel":299},"https:\u002F\u002Fgithub.com\u002Fanthonyharrison\u002Fdistro2SBOM\u002Fpull\u002F26",[205],"distro2SBOM",", we’re seeing meaningful contributions emerge in broader and increasingly diverse communities.",[234,303,304,305,310,311,315],{},"At ",[201,306,309],{"href":307,"rel":308},"https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Ffoss-north\u002F",[205],"foss-north"," Olle E. Johansson and Salve J. Nielsen organised a CRA FAQ booth to gather input from attendees. Their contributions will help inform updates to the community-driven ",[201,312,90],{"href":313,"rel":314},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Fblob\u002Fmain\u002Ffaq.md",[205],".",[226,317,319],{"id":318},"top-conversations","Top Conversations",[231,321,322,329,336],{},[234,323,324],{},[201,325,328],{"href":326,"rel":327},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Fissues\u002F90",[205],"Multiple CRA Verticals cover my Product",[234,330,331],{},[201,332,335],{"href":333,"rel":334},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Fissues\u002F133",[205],"I’m worried about the CRA and am considering shuttering my projects, what should I know?",[234,337,338],{},[201,339,342],{"href":340,"rel":341},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub\u002Fissues\u002F77",[205],"What implications does “indirect” usage (i.e., as a dependency of a regulated project) create for me?",[226,344,346],{"id":345},"overheard","Overheard",[197,348,349],{},[201,350,353],{"href":351,"rel":352},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Follejohansson_orcwg-cra-eucra-activity-7317915673605644292-nkl8?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAYPUqEBp0WKWGph_vgaFZs7BihQcqkB-_o",[205],[354,355],"img",{"alt":356,"src":357},"Olle E Johansson's LinkedIn post: Had a great foss-north conference in Gothenburg! Met a lot of old and new friends. Salve and I set up a CRA FAQ booth to gather issues for the hashtag#ORCWG working group- and got a lot of really good questions, that we tried to capture on video.","\u002Fblog\u002Forc-monthly-april2025\u002Fimages\u002Fmay-overheard.png",[226,359,361],{"id":360},"upcoming-events","Upcoming Events",[231,363,364,372,380],{},[234,365,366,371],{},[201,367,370],{"href":368,"rel":369},"https:\u002F\u002Fwww.automotive-oss.org\u002Fevent\u002Fd8cae729-ea4c-4a9a-8bb4-a42ab995e055\u002Fsummary",[205],"Automotive Open Source Summit"," | May 13, 2025 | Starnberg, Germany",[234,373,374,379],{},[201,375,378],{"href":376,"rel":377},"https:\u002F\u002Fwww.des-show.com\u002F",[205],"Digital Enterprise Show"," | 10-12 June 2025",[234,381,382,387,388,390,391,396],{},[201,383,386],{"href":384,"rel":385},"https:\u002F\u002Flu.ma\u002Fgc25",[205],"Global Collaboration on Wallets and Credentials"," | 1-2 July 2025 | Geneva ",[220,389],{},"\nORC will be partnering with the ",[201,392,395],{"href":393,"rel":394},"https:\u002F\u002Fdataspace.eclipse.org\u002F",[205],"Eclipse Dataspace Working Group"," to plan a breakout session “Sovereignty by Design”. Additional event details will be posted in the coming weeks.",[226,398,400],{"id":399},"recent-talks","Recent Talks",[231,402,403,411,418],{},[234,404,405,410],{},[201,406,409],{"href":407,"rel":408},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Ftobielangel_the-cra-is-here-lets-build-bridges-activity-7315085681586819073-U2RX\u002F",[205],"The CRA is here. Let’s build bridges!"," - Tobie Langel presented at the Swedish OSPO Network workshop on “Managing implications of the CRA and PLD on Open Source”",[234,412,413,417],{},[201,414,416],{"href":254,"rel":415},[205],"CRA Monday - OCCTET Overview with Sebastien Heurtematte"," - In this first edition of the CRA Mondays series, Sebastien Heurtematte, OCCTET Project Coordinator, provides an overview of OCCTET—an EU-funded initiative that supports SMEs in meeting cybersecurity compliance requirements under the Cyber Resilience Act (CRA).",[234,419,420,425],{},[201,421,424],{"href":422,"rel":423},"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=Gz6T9Ycxo7I",[205],"Unpacking the CRA: How the Open Source Community is Collaborating on Open Regulatory Compliance"," - Tobie Langel stepped in to provide the broader open source community an update on the work ORC is doing in relation to the Cyber Resilience Act (CRA).",[226,427,429],{"id":428},"welcome-orc-members","Welcome ORC Members",[197,431,432],{},"The following members have joined in since our last edition:",[231,434,435,442,449],{},[234,436,437],{},[201,438,441],{"href":439,"rel":440},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002Fshow-member\u002F?member_id=1745",[205],"Apell ASBL",[234,443,444],{},[201,445,448],{"href":446,"rel":447},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002Fshow-member\u002F?member_id=1474",[205],"Apex.AI Inc",[234,450,451],{},[201,452,455],{"href":453,"rel":454},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002Fshow-member\u002F?member_id=1504",[205],"IMEC",[226,457,459],{"id":458},"how-to-participate","How to Participate",[231,461,462,468,475],{},[234,463,464],{},[201,465,467],{"href":98,"rel":466},[205],"Learn",[234,469,470],{},[201,471,474],{"href":472,"rel":473},"https:\u002F\u002Fgithub.com\u002Forcwg",[205],"Contribute",[234,476,477],{},[201,478,481],{"href":479,"rel":480},"https:\u002F\u002Forcwg.org\u002Fmembership\u002F",[205],"Join the Working Group",{"title":483,"searchDepth":484,"depth":484,"links":485},"",2,[486,487,488,489,490,491,492],{"id":228,"depth":484,"text":229},{"id":318,"depth":484,"text":319},{"id":345,"depth":484,"text":346},{"id":360,"depth":484,"text":361},{"id":399,"depth":484,"text":400},{"id":428,"depth":484,"text":429},{"id":458,"depth":484,"text":459},"2025-04-30","md",{},"\u002Fblog\u002Forc-monthly-april2025",{"title":190},"blog\u002Forc-monthly-april2025","Co41Rj2W-gD4f7Ua_XRdWJJPDIrh0xV29WgZw47wt6Q",[501],{"path":502,"visibility":191},"\u002Fblog",false,[505,508],{"path":506,"text":507},"\u002F","ORC",{"path":502,"text":109},1792684544348]