M
This week the European Commission published the draft for a guidance document for the Cyber Resilience Act (CRA). It is 70 pages, but contains some helpful examples and flowcharts, like this one, making it accessible even to Open Source folks with limited time.
@icing I think they confuse “source code repository” and package repos. Maven itself (as in the Java build tool) uses GitHub as code forge. Why would they be bothered by companies hammering GitHub?
@icing I‘m a bit annoyed by the confusing headline, like if you download packages from Maven Central via ‘git pull’. Or any other registry. 
But doesn’t change the point ofc. While not increasing my trust in tech journalism.
