Re: [open-regulatory-compliance] What is the practical drop dead date fo

[Tobie Langel <tobie@xxxxxxxxxxxxxx>]

On Wed, Jan 8, 2025 at 4:08 PM Dick Brooks via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:

Given the current EU-CRA timeline, what would people consider to be the “drop dead” date when open-source stewards MUST know what evidentiary materials are expected to be provided to comply?

 

I know that “lead time” will need to consider the level of effort required to produce evidentiary materials, so that will need to be factored into whatever drop dead date is determined.

There is a defined milestone for December 11, 2025. Will the evidentiary requirements for open-source software stewards need to be identified before this deadline?

You can find deadlines for CRA application in our FAQ: https://github.com/orcwg/cra-hub/blob/main/faq.md#q-when-does-the-cra-enter-into-force-and-when-does-the-regulation-start-to-apply

The one coming up the most quickly is the vulnerability management requirements.

--tobie