[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Upcoming EU Legislation (Cyber Resilience Act and Product Liability Directive)



On 2023-11-12 01:58:42 +0100 (+0100), Ilulu wrote:
> as a result of our discussions on DebConf23 and MiniDebConf
> Uruguay I would like to alert a broader audience to some proposed
> legislation in the European Union. I think Debian should take a
> public stand in this debate.
[...]

On a related note, I've been talking informally with OSI leadership
about how SPI might get more involved in their efforts around this
problem on behalf of the projects we represent. I hadn't put much
time into it yet because (until now), I'd seen no clear evidence of
any SPI associated projects raising actual concerns about the CRA.

In July of this year, OSI and LF organized a series of
invitation-only meetings in Geneva they called the Open Source
Congress, primarily in order for non-profit foundations to discuss
the potential impact of in-progress legislation like the CRA on
free/libre open source software developer communities. I found out
after the fact, and when I asked a friend at OSI why SPI hadn't been
invited, I was told it was simply because *they forgot we exist*.

One of my goals is to make sure we have a seat at the table during
future such discussions, so anything we can do to coordinate
messaging between Debian and SPI would be great. What would help, I
think, is for representatives of Debian to officially state that
they'd like SPI to be involved in these and similar activities,
either along with or on behalf of the Debian community. As long as
there's clear public indication of that desire, it's much easier for
me to push related activities (through formal votes on resolutions)
from within the board of directors.
-- 
Jeremy Stanley

Attachment: signature.asc
Description: PGP signature


Reply to: