On July 27th the European Commission published the Implementation guidance on the application of Regulation (EU) 2024/2847 (the Cyber Resilience Act — CRA). It provides practical clarification of key CRA concepts that directly impact the op…
To get involved in this or any Eclipse Foundation initiative, start by creating an Eclipse Foundation account. Once you have an account, there are a number of ways to participate: Join our communication channels to learn about the latest co…
The Open Regulatory Compliance Working Group (ORC WG) aims to facilitate compliance of all open source actors with regulatory requirements. To achieve this, the ORC WG: The ORC WG strives to develop artefacts and best practices that help op…
The Cyber Resilience SIG is an active initiative within the Open Regulatory Compliance (ORC) Working Group. This SIG formalizes the working group’s ongoing efforts to help open source communities and the tech industry navigate cyber resilie…
Late January in Brussels has become an important moment for anyone working at the intersection of open source and European regulation. In 2026, FOSDEM and EU Open Source Week again bring together developers, maintainers, policymakers, and o…
As the Cyber Resilience Act (CRA) moves closer to implementation, much of the attention has focused on the regulation itself. But what’s equally important, and often overlooked, is the process that will define how these rules are applied in…
We’re excited to announce Code and Compliance Community Day 2025, a two-part event taking place October 22–23, 2025, in Brussels, Belgium. This new event builds on the momentum of recent community gatherings and ongoing collaboration around…
Here’s a preview of the topics and sessions shaping Code & Compliance Community Day 2025, taking place October 22–23, 2025 in Brussels. This event brings together open source maintainers, compliance leads, manufacturers, and institutional s…
As we publish this month’s ORC update, the community is right in the middle of Open Source Week in Brussels. With FOSDEM and a packed schedule of policy, compliance, and community discussions underway, the energy and relevance of our work h…
This post is part of our CRA Mondays series. It captures a session originally hosted earlier this year with Fukami, EU Policy Advisor at the OpenSSF. While the discussion took place several months ago, the insights remain highly relevant as…
The Steering Committee guides the strategic direction and governance of the Open Regulatory Compliance Working Group, ensuring that our collective efforts align with the group’s mission to support open source communities in navigating evolv…
As we dive into the summer months, we’re combining our June and July updates into a single post, because June was packed. In June alone, we contributed to the EU’s draft guidance on open source hardware, submitted detailed comments on the C…