Juan Rico's blog

We’re pleased to share that we’ve moved from planning to execution. The Cyber Resilience SIG’s deliverables plan has been expanded with clear, actionable projects, which will each be supported by a dedicated task force. This marks a significant milestone in our collective efforts to operationalise our goals. We invite all...

As part of Maintainer Month—a time to recognize and support the open source maintainers who keep our digital infrastructure running—Open Regulatory Compliance (ORC) is hosting a special panel on 27 May. Among the featured speakers is Felix Reda, who will share insights in the session titled, “ The Cyber Resilience...

In honour of Maintainer Month, Open Regulatory Compliance (ORC) will host a panel with GitHub on 27 May focused on one of the most pressing topics facing open source maintainers today.. Maarten Aertsen is among the expert speakers featured in the discussion, “ The Cyber Resilience Act and Open Source...

On 27 May, Open Regulatory Compliance (ORC) is hosting a panel in support of Maintainer Month with GitHub, a month dedicated for open source maintainers to gather, share, and be celebrated. Daniel Stenberg is one of the speakers in the ORC’s panel, “ The Cyber Resilience Act and Open Source...

On 27 May, Open Regulatory Compliance is hosting a panel, “ The Cyber Resilience Act and Open Source: What Maintainers Really Need to Know ,” which will be live-streamed by GitHub as part of Maintainer Month. Maintainer Month is a month dedicated for open source maintainers to gather and share...

We’re pleased to share that, following active community discussions and collaboration, we have submitted feedback to the European Commission on the Definition of Important and Critical Product Categories . This contribution reflects our collective understanding of how the CRA definitions intersect with open source development and distribution. Thank you to...

The first-ever European OpenHarmony Technical Forum wrapped up in Rotterdam on March 30, 2025, bringing together industry leaders, developers, and academics to talk about the future of open source operating systems. The event, themed "OpenHarmony Technology Innovation and Ecosystem Practice," showcased exciting advancements in the field—and Oniro played a key...

The working group for open source regulatory compliance and CRA implementation for the open source community.

Embedded systems are at the heart of modern industry, powering everything from automotive applications to industrial automation. But as software continues to define embedded technologies, new regulations like the Cyber Resilience Act (CRA) are set to reshape how manufacturers and developers approach security and compliance. With its broad-reaching impact, the...

The working group for open source regulatory compliance