[{"data":1,"prerenderedAt":515},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-dec2025":188,"sections:\u002Fblog\u002Forc-monthly-dec2025":506,"feed:\u002Fblog\u002Forc-monthly-dec2025":509,"breadcrumbs:\u002Fblog\u002Forc-monthly-dec2025":510},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":499,"description":191,"extension":500,"featuredFooter":191,"keywords":191,"meta":501,"navigation":92,"path":502,"redirectUrl":191,"seo":503,"seoTitle":191,"socialImage":191,"stem":504,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":505},"blog\u002Fblog\u002Forc-monthly-dec2025.md","ORC Monthly: Celebrating a successful 2025!",null,"Juan Rico",{"type":194,"value":195,"toc":488},"minimark",[196,200,203,216,221,324,328,339,343,381,385,419,423,439,443,446,462,466],[197,198,199],"p",{},"As we wrap up 2025, it’s remarkable to look back at how far the ORC community has come since January. What started as a year shaped by uncertainty transformed into one defined by collaboration, expertise-sharing, and a rapidly growing ecosystem (we now have more than 60 members!). From engaging sessions at Code & Compliance to our community’s growing influence in EU policy discussions, 2025 has proven just how essential an open, collaborative approach to regulatory readiness truly is.",[197,201,202],{},"We close out the year with deep gratitude and strong momentum heading into 2026.",[197,204,205,209,210,213],{},[206,207,208],"em",{},"Timo Perala and Dirk-Willem van Gulik"," ",[211,212],"br",{},[206,214,215],{},"ORC co-chairs",[217,218,220],"h2",{"id":219},"whats-new","What’s New",[222,223,224,261,282],"ul",{},[225,226,227,239,240,254,256],"li",{},[228,229,230,231,238],"strong",{},"Registration is open for ",[232,233,237],"a",{"href":234,"rel":235},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002Fcode-compliance-2026\u002Fsummary",[236],"nofollow","Code & Compliance FOSDEM edition",":"," Join us in Brussels 29 January 2026 ahead of FOSDEM. The program is coming together nicely and will feature 4 key blocks:",[222,241,242,245,248,251],{},[225,243,244],{},"ORC’s Compliance Materials: How the open source community is cooperating to build compliance",[225,246,247],{},"Compliance for Manufacturers",[225,249,250],{},"Simplifying Due Diligence: Attestations, Open Source, and Your Path to Faster, Safer Compliance",[225,252,253],{},"CRA & the AI Act for Manufacturers",[211,255],{},[232,257,260],{"href":258,"rel":259},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002Fcode-compliance-2026\u002FregProcessStep1",[236],"Register to join us!",[225,262,263,264],{},"If you’ll be at FOSDEM, make sure to catch these two devrooms closely aligned with ORC’s work:",[222,265,266,274],{},[225,267,268,269],{},"Saturday 31 January 2026: ",[232,270,273],{"href":271,"rel":272},"https:\u002F\u002Ffosdem.org\u002F2026\u002Fschedule\u002Ftrack\u002Fcra-in-practice\u002F",[236],"CRA in practice",[225,275,276,277],{},"Sunday 1 February 2026: ",[232,278,281],{"href":279,"rel":280},"https:\u002F\u002Ffosdem.org\u002F2026\u002Fschedule\u002Ftrack\u002Fopen-source-eu-policy\u002F",[236],"Open Source & EU Policy",[225,283,284,287,288,291,292,297,298,301,302,316,318,323],{},[228,285,286],{},"Register for OCX 2026:"," OCX, the Eclipse Foundation’s annual flagship conference, is coming to Brussels ",[228,289,290],{},"21–23 April 2026",". This year includes ",[232,293,296],{"href":294,"rel":295},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F403bffe2-15d8-49ac-af52-e2781b7296b3\u002Fopen-community-for-compliance",[236],"Open Community for Compliance",", developed ",[206,299,300],{},"by and for"," the ORC community, featuring talks on:",[222,303,304,307,310,313],{},[225,305,306],{},"collaborative approaches to regulatory readiness",[225,308,309],{},"secure development practices",[225,311,312],{},"lessons from early CRA implementation",[225,314,315],{},"community-driven tooling and best practices",[211,317],{},[232,319,322],{"href":320,"rel":321},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F403bffe2-15d8-49ac-af52-e2781b7296b3\u002Fregistration",[236],"Registration is open",". We hope to see you there.",[217,325,327],{"id":326},"overheard","Overheard",[197,329,330],{},[232,331,334],{"href":332,"rel":333},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fdigital-resilience-forum_digitalresilienceforum-drf2025-panel-activity-7389429779692744704-uBtb?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAYPUqEBp0WKWGph_vgaFZs7BihQcqkB-_o",[236],[335,336],"img",{"alt":337,"src":338},"Digital Resilience Forum's LinkedIn post about their Securing the Digital Supply Chain panel","\u002Fblog\u002Forc-monthly-dec2025\u002Fimages\u002Fdec-overheard.png",[217,340,342],{"id":341},"blogs-you-might-have-missed","Blogs you might have missed",[222,344,345,357,369],{},[225,346,347,209,354,356],{},[232,348,351],{"href":349,"rel":350},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fmanufacturer-cra-adrian-osullivan\u002F",[236],[228,352,353],{},"The CRA’s Global Impact: Why Manufacturers Hold the Key",[211,355],{},"\nHuawei becomes the first of our strategic members to share their perspective in this ORC blog. Adrian O’Sullivan explores how manufacturers are preparing for CRA obligations and why open collaboration is key.",[225,358,359,209,366,368],{},[232,360,363],{"href":361,"rel":362},"https:\u002F\u002Forcwg.org\u002Fblog\u002Ftime-to-speak-simon-phipps\u002F",[236],[228,364,365],{},"Time to speak: Contributing to the CRA Standards feedback process",[211,367],{},"\nSimon Phipps urges the open source community to more actively shape regulatory outcomes, advocating for unified engagement on policy that affects developers and open source sustainability.",[225,370,371,209,378,380],{},[232,372,375],{"href":373,"rel":374},"https:\u002F\u002Forcwg.org\u002Fblog\u002Ftechnical-description-milestone\u002F",[236],[228,376,377],{},"Moving Forward with Clear Technical Definitions Under the CRA",[211,379],{},"\nThe European Commission has just published the Implementing Regulation defining the technical description of “important” and “critical” products with digital elements under the Cyber Resilience Act (CRA). In this new blog, Juan Rico breaks down why this matters for open source and ORC’s role moving forward.",[217,382,384],{"id":383},"upcoming-events","Upcoming Events",[222,386,387,395,403,411],{},[225,388,389,394],{},[232,390,393],{"href":391,"rel":392},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002Fcode-compliance-2026",[236],"Code & Compliance"," | 29 January 2026",[225,396,397,402],{},[232,398,401],{"href":399,"rel":400},"https:\u002F\u002Ffosdem.org\u002F2026\u002F",[236],"FOSDEM"," | 31 January - 1 February 2026",[225,404,405,410],{},[232,406,409],{"href":407,"rel":408},"https:\u002F\u002F26.foss-backstage.de\u002F",[236],"FOSS Backstage 2026"," | 16-17 March 2026",[225,412,413,418],{},[232,414,417],{"href":415,"rel":416},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026",[236],"Open Community Experience (OCX) 2026"," | 21-23 April 2026",[217,420,422],{"id":421},"recent-talks-events","Recent Talks & Events",[222,424,425,432],{},[225,426,427],{},[232,428,431],{"href":429,"rel":430},"https:\u002F\u002Fyoutu.be\u002FG37gXO0KG6I",[236],"CRA Mondays | When Disclosure Fails: Europe’s Struggle with CVD",[225,433,434],{},[232,435,438],{"href":436,"rel":437},"https:\u002F\u002Fyoutu.be\u002F_fGOgByN08c",[236],"CRA Mondays | OSS provenance and code signing: how SignPath Foundation guarantees software integrity for its member projects",[217,440,442],{"id":441},"welcome-orc-members","Welcome ORC Members",[197,444,445],{},"The following members joined in November 2025:",[222,447,448,455],{},[225,449,450],{},[232,451,454],{"href":452,"rel":453},"https:\u002F\u002Fsignpath.org\u002F",[236],"SignPath Foundation",[225,456,457],{},[232,458,461],{"href":459,"rel":460},"https:\u002F\u002Fopennebula.io\u002F",[236],"OpenNebula Systems",[217,463,465],{"id":464},"how-to-participate","How to Participate",[222,467,468,474,481],{},[225,469,470],{},[232,471,473],{"href":98,"rel":472},[236],"Learn",[225,475,476],{},[232,477,480],{"href":478,"rel":479},"https:\u002F\u002Fgithub.com\u002Forcwg",[236],"Contribute",[225,482,483],{},[232,484,487],{"href":485,"rel":486},"https:\u002F\u002Forcwg.org\u002Fmembership\u002Fbecome-a-member\u002F",[236],"Join the Working Group",{"title":489,"searchDepth":490,"depth":490,"links":491},"",2,[492,493,494,495,496,497,498],{"id":219,"depth":490,"text":220},{"id":326,"depth":490,"text":327},{"id":341,"depth":490,"text":342},{"id":383,"depth":490,"text":384},{"id":421,"depth":490,"text":422},{"id":441,"depth":490,"text":442},{"id":464,"depth":490,"text":465},"2025-12-09","md",{},"\u002Fblog\u002Forc-monthly-dec2025",{"title":190},"blog\u002Forc-monthly-dec2025","kF3PHw5k-YDs9FHHZRZbcfuzQONFsrpb4BFdnyeLr4U",[507],{"path":508,"visibility":191},"\u002Fblog",false,[511,514],{"path":512,"text":513},"\u002F","ORC",{"path":508,"text":109},1792684542376]