How Government Policy can affect Open-soruce
Grab this slide deck:
Securing Open Source Software Act
Have you heard of
On 21st September 2022, U.S. Senators ... and Ranking Member of the Senate Homeland Security and Governmental Affairs Committee, introduced bipartisan legislation, the Securing Open Source Software Act (the “Act”), to help protect federal agencies and critical infrastructure systems by strengthening the security of software.
European Union
Cyber Resilience Act
Have you heard of
Remember GDPR?
Government regulations WILL affect us
There's no geographical boundaries in Open-Source
And
Who is maintaining an OSS?
Who has contributed to an OSS?
Who is using an OSS (almost) every day?
European Union
Cyber Resilience Act
TL;DR - putting
On your software
It's a good thing... right?
It aims to protect the users and make publishers of software be responsible of it's security
However...
in open-source
bit.ly/oss-dragons-scypy2023-slides
We may not be able to demonstrate compliance
Or it's very expensive...
Non-commercial activities are exempted, right?
But... what is a commercial activity?
- Can I accept donations?
- Should I open-source my project in my company?
- Should I let my employee to work on open-source in office hour?
- Can I provide a paid service based on an OSS?
What should I do?
Get more information and voice out concerns
- The PSF says: https://pyfound.blogspot.com/2023/04/the-eus-proposed-cra-law-may-have.html
- The Internet Society says: https://www.internetsociety.org/blog/2022/10/the-eus-proposed-cyber-resilience-act-will-damage-the-open-source-ecosystem/
- The CRA: https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act
- Read this blog post: https://blog.nlnetlabs.nl/open-source-software-vs-the-cyber-resilience-act/#the-effects-on-developers-of-open-source-software
- And this more recent one: https://github.blog/2023-07-12-no-cyber-resilience-without-open-source-sustainability/
- And more...
How Government Policy can affect Open-soruce
Grab this slide deck: