[{"data":1,"prerenderedAt":447},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-jan2026":188,"sections:\u002Fblog\u002Forc-monthly-jan2026":438,"feed:\u002Fblog\u002Forc-monthly-jan2026":441,"breadcrumbs:\u002Fblog\u002Forc-monthly-jan2026":442},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":431,"description":191,"extension":432,"featuredFooter":191,"keywords":191,"meta":433,"navigation":92,"path":434,"redirectUrl":191,"seo":435,"seoTitle":191,"socialImage":191,"stem":436,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":437},"blog\u002Fblog\u002Forc-monthly-jan2026.md","ORC Monthly: A Strong Start to 2026 for Open Source and CRA Compliance",null,"Juan Rico",{"type":194,"value":195,"toc":422},"minimark",[196,214,227,232,313,317,343,347,358,362,396,400],[197,198,199,200,207,208,213],"p",{},"As we publish this month’s ORC update, the community is right in the middle of ",[201,202,206],"a",{"href":203,"rel":204},"https:\u002F\u002Fopensourceweek.eu\u002F",[205],"nofollow","Open Source Week"," in Brussels. With FOSDEM and a packed schedule of policy, compliance, and community discussions underway, the energy and relevance of our work has never been clearer. That momentum is echoed by the strong response to our ",[201,209,212],{"href":210,"rel":211},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002Fcode-compliance-2026\u002Fsummary",[205],"Code & Compliance"," event, which sold out! This signals a community that is growing, engaged, and ready to build on its progress. We are starting 2026 with real traction and look forward to making some real progress on the Cyber Resilience Act (and other emerging regulations) over the coming year.",[197,215,216,220,221,224],{},[217,218,219],"em",{},"Timo Perala and Dirk-Willem van Gulik"," ",[222,223],"br",{},[217,225,226],{},"ORC co-chairs",[228,229,231],"h2",{"id":230},"whats-new","What’s New",[233,234,235,250,273,286,301],"ul",{},[236,237,238,239,243,244,249],"li",{},"ORC has ",[240,241,242],"strong",{},"published its first whitepaper",", ",[201,245,248],{"href":246,"rel":247},"https:\u002F\u002Forcwg.org\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra\u002F",[205],"Open Source Software Stewards and the Cyber Resilience Act",", offering practical guidance on how the CRA defines the steward role, what obligations apply, and where open questions remain. Developed collaboratively by the ORC community, the paper reflects real-world open source experience and aims to support proportionate, workable CRA implementation.",[236,251,252,253,258,259,264,265,220,267,272],{},"The full program for the ",[201,254,257],{"href":255,"rel":256},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026\u002Fopen-community-for-compliance",[205],"Open Community for Compliance"," track at OCX 2026 is ",[201,260,263],{"href":261,"rel":262},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026\u002Fagenda?categories_bb616033=bb616033-a1a8-40af-84d7-6a5c65a55830",[205],"now live",", featuring sessions that explore secure development practices, regulatory trends like the Cyber Resilience Act, and collaborative approaches to compliance within open source communities. This track brings together developers, legal experts, and industry leaders to share insights and practical guidance. ",[222,266],{},[201,268,271],{"href":269,"rel":270},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F403bffe2-15d8-49ac-af52-e2781b7296b3\u002Fregistration",[205],"Registration is open",". We hope to see you there.",[236,274,275,276,281,282,285],{},"We’re collecting ",[201,277,280],{"href":278,"rel":279},"https:\u002F\u002Fec.europa.eu\u002Feusurvey\u002Frunner\u002FCRA-Attestation-Survey-2026-FOSDEM",[205],"feedback from industry and open source stakeholders"," to inform the voluntary security attestation efforts. Share your perspective by completing the survey by ",[240,283,284],{},"February 17",".",[236,287,288,289,296,297,300],{},"Roman Zhukov and James Lovegrove’s article “",[201,290,293],{"href":291,"rel":292},"https:\u002F\u002Fthenewstack.io\u002Fmaking-the-cyber-resilience-act-work-for-open-source\u002F",[205],[217,294,295],{},"Making the Cyber Resilience Act Work for Open Source","” was featured in ",[217,298,299],{},"The New Stack",", exploring practical approaches for aligning open source stewardship and compliance with the EU’s Cyber Resilience Act and underscoring the importance of collaboration across the ecosystem as the regulation takes shape.",[236,302,303,304,307,308,312],{},"We’re looking to collaborate with ORC members on ",[240,305,306],{},"articles and thought leadership"," that help advance understanding of Cyber Resilience Act. With support from the Eclipse Foundation’s experienced writers, we’re especially eager to work with manufacturers to share real-world perspectives. Interested? ",[201,309,311],{"href":310},"mailto:marketing@eclipse.org","Get in touch"," and let’s tell these stories together.",[228,314,316],{"id":315},"blog-you-might-have-missed","Blog you might have missed",[233,318,319,331],{},[236,320,321,220,328,330],{},[201,322,325],{"href":323,"rel":324},"https:\u002F\u002Forcwg.org\u002Fblog\u002Ffosdem-2026\u002F",[205],[240,326,327],{},"FOSDEM and EU Open Source Week 2026: Key Events for the ORC Community",[222,329],{},"\nLate January in Brussels has become an important moment for anyone working at the intersection of open source and European regulation. In 2026, FOSDEM and EU Open Source Week again bring together developers, maintainers, policymakers, and organisations that are actively shaping how open source is developed, distributed, and used in Europe.",[236,332,333,220,340,342],{},[201,334,337],{"href":335,"rel":336},"https:\u002F\u002Forcwg.org\u002Fblog\u002F2025-achievements\u002F",[205],[240,338,339],{},"The ORC Community’s 4 Biggest Achievements of 2025",[222,341],{},"\nAs we look back on 2025, it’s clear that this has been a year of remarkable growth and maturation for the ORC community. Our membership has expanded to 63 organisations, reflecting both the rising importance of open, collaborative security practices and the trust our stakeholders place in the work we are doing together.",[228,344,346],{"id":345},"overheard","Overheard",[197,348,349],{},[201,350,353],{"href":351,"rel":352},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Follejohansson_cra-eucra-opensource-activity-7406608456775794688-eYHg\u002F",[205],[354,355],"img",{"alt":356,"src":357},"Olle E Johansson's LinkedIn Finland's proposed law related to the EU Cyber Resilience Act","\u002Fblog\u002Forc-monthly-jan2026\u002Fimages\u002Fjan-overheard.png",[228,359,361],{"id":360},"upcoming-events","Upcoming Events",[233,363,364,372,380,388],{},[236,365,366,371],{},[201,367,370],{"href":368,"rel":369},"https:\u002F\u002Fwww.enisa.europa.eu\u002Fcybersecurity_standardisation_2026",[205],"10th Cybersecurity Standardisation Conference"," | March 12, 2026",[236,373,374,379],{},[201,375,378],{"href":376,"rel":377},"https:\u002F\u002F26.foss-backstage.de\u002F",[205],"FOSS Backstage 2026"," | 16-17 March 2026",[236,381,382,387],{},[201,383,386],{"href":384,"rel":385},"https:\u002F\u002Fopenchainproject.org\u002Fnews\u002F2025\u002F12\u002F09\u002Fopenchain-and-friends-2026",[205],"OpenChain and Friends 2026"," | 24-26 March 2026",[236,389,390,395],{},[201,391,394],{"href":392,"rel":393},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026",[205],"Open Community Experience (OCX) 2026"," | 21-23 April 2026",[228,397,399],{"id":398},"how-to-participate","How to Participate",[233,401,402,408,415],{},[236,403,404],{},[201,405,407],{"href":98,"rel":406},[205],"Learn",[236,409,410],{},[201,411,414],{"href":412,"rel":413},"https:\u002F\u002Fgithub.com\u002Forcwg",[205],"Contribute",[236,416,417],{},[201,418,421],{"href":419,"rel":420},"https:\u002F\u002Forcwg.org\u002Fmembership\u002Fbecome-a-member\u002F",[205],"Join the Working Group",{"title":423,"searchDepth":424,"depth":424,"links":425},"",2,[426,427,428,429,430],{"id":230,"depth":424,"text":231},{"id":315,"depth":424,"text":316},{"id":345,"depth":424,"text":346},{"id":360,"depth":424,"text":361},{"id":398,"depth":424,"text":399},"2026-01-29","md",{},"\u002Fblog\u002Forc-monthly-jan2026",{"title":190},"blog\u002Forc-monthly-jan2026","k_R-4Le4rNWVYt5HTb8cFSbCJhag3N-PzephuGK8Y0c",[439],{"path":440,"visibility":191},"\u002Fblog",false,[443,446],{"path":444,"text":445},"\u002F","ORC",{"path":440,"text":109},1792684542231]