Will we join these efforts? https://thephp.foundation/blog/2024/04/02/open-source-community-cra-complia… There's a risk that, say, MediaWiki consultants be inundated by paperwork in the EU if they suddenly get treated as "manufacturers". This can probably be avoided with some shared documentation work (handled by WMF?), as long as the ~40 expected upcoming standards do not hardcode some FLOSS-hostile methods of doing things. MediaWiki development and deployment processes tend to be quite peculiar, so it would be nice to make sure they're covered. (Some work with Debian may also help, as MediaWiki is packaged there and some MediaWiki projects are under SPI? Not sure.) In case you have no idea what it is about: https://wikimedia.brussels/cyber-resilience-act-its-a-wrap/ https://blog.nlnetlabs.nl/what-i-learned-in-brussels-the-cyber-resilience-a… https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/ And specifically on standards: https://fosdem.org/2024/schedule/event/fosdem-2024-3395-cra-40-new-ways-the… https://www.youtube.com/watch?v=jvKvsP6OGKw Federico