New post! The EU Cyber Resilience Act is now (almost) final, but what does it ACTUALLY mean for open source? It is mostly good news, and there are real opportunities to use the #CRA to our advantage: https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/
@bert_hubert no, its still shit ex 10c "under their responsibility." Well, I wrote the MR under a CLA that warrants it's suitability and includes test cases. Seems I'd be responsible, no?
@bert_hubert @revk @neil sure it is if individuals who can't afford a law suit from $corp (meritied or not, malicious or not) are exposed while their own employees are shielded behind lawyers with infinite pockets
@bert_hubert @revk @neil unless effectively baning individual contributions, with or with out CLA, is acceptable?
@falken @bert_hubert @revk @neil the actual CRA reports that just contributing doesn't make you liable... If there's a CLA, it depends on what it entails, but I would expect CLAs to be rewritten with the CRA I'm mind now.
@alessandrolai @bert_hubert @revk @neil thanks for the insight
@falken @revk @neil if you sign pieces of paper saying you are responsible, you might perhaps end up being responsible? This does not seem to be a CRA problem.