Dear ORC Community,
We have an exciting week ahead!
On Tuesday, the first meeting of the CRA Attestations work is scheduled, and we encourage you to attend. Later in the week, on Wednesday and Thursday, ORC will host the Code and Compliance Community Day in Brussels. For those unable to join in person, we will share information and outcomes from the event in the coming weeks.
Below is a detailed list of this week's activities:
Monday (October 20, 2025)
đź“ŁÂ CRA Expert Group preparation meeting
Link:Â https://meet.jit.si/FavouriteDamsBeatAny
This meeting will be used as a point to share the main activities that are going to be covered in the CRA Expert Group and its impact on open source.
CRA EG meeting Agenda Â
Time:Â at 16:00 CET / at 14:00 UTC
Tuesday (October 21, 2025)
 📋 CRA Attestations
The CRA‑Attestations aims to explore how open source voluntary security attestations could help manufacturers in supporting their compliance journey under the Cyber Resilience Act (CRA). These attestations would provide a structured way for stewards and maintainers to signal that a software component meets essential security requirements, helping manufacturers, regulators, and end-users navigate CRA obligations. Given the technical and procedural complexity involved—defining attestation schemas, issuance and revocation processes, tooling, and compatibility with CRA enforcement
Time:Â at 16:00 CET / at 14:00 UTC
