Major Open Source Foundations Form Initiative Aimed at Build...

Major open source foundations, including the PHP Foundation, Apache Software Foundation, Blender Foundation, OpenSSL Software Foundation, Python Software Foundation, and Rust Foundation, have launched an initiative to create cybersecurity standards compliant with the European Union's Cyber Resilience Act (CRA), which takes effect in 2027. Led by the Eclipse Foundation, this effort responds to the increasing need for reliable, secure open-source software, driven by the CRA's requirement for comprehensive cybersecurity measures across a product's lifecycle. Although traditionally less formal in their approach, the open source community is now compelled to standardize its security practices due to regulatory pressures, even as they face challenges in engaging with traditional standards organizations. The new initiative, while reminiscent of frameworks like SLSA, is particularly focused on regulatory compliance and aims to address the needs of both open source and proprietary software across various organizational sizes. By developing these specifications, the foundations hope to influence future formal standards within European organizations, reflecting the crucial role that open source code plays in the global software infrastructure.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.