EU’s Cyber Resilience Act isn’t fully in effect yet, but #OSS maintainers are already bracing for compliance requests. cURL creator @bagderdaniel:// stenberg:// is among the first to receive one (from a Fortune 500 company using a 2 year old version.)
What happens when companies treat volunteers like vendors?
https://socket.dev/blog/oss-maintainers-feeling-the-weight-of-eu-cyber-resilience-act