[{"data":1,"prerenderedAt":268},["ShallowReactive",2],{"site:settings":3,"site:navigation":51,"site:footer":128,"newsroom:banner:orc":9,"deliverable:\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra":190,"sections:\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra":239,"deliverables:related:\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra":244,"breadcrumbs:\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra":259},{"id":4,"title":5,"callForAction":6,"cookieBanner":9,"description":10,"extension":11,"featuredContentPublishTarget":12,"heroImage":13,"keywords":14,"logo":20,"logoInverse":9,"logoWidth":21,"meta":22,"search":23,"seoTitleSuffix":27,"skipLinkText":28,"socialImage":29,"socials":32,"stem":49,"__hash__":50},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F",null,"The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc","\u002Fimages\u002Fhero\u002Fdefault.jpg",[15,16,17,18,19],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":24,"placeholder":25,"menuLabel":26},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":30,"eyebrow":31},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[33,37,41,45],{"name":34,"icon":35,"url":36},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":38,"icon":39,"url":40},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":42,"icon":43,"url":44},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":46,"icon":47,"url":48},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","iqJrJNmDNtN8-TkFCgBoO4uPvPJ_weRDDZ6KgK5ttNE",{"id":52,"extension":11,"main":53,"meta":125,"stem":126,"__hash__":127},"navigation\u002Fdata\u002Fnavigation.yml",[54,72,84,101],{"text":55,"children":56},"About",[57,60,63,66,69],{"text":58,"href":59},"ORC Working Group","\u002Fabout\u002F",{"text":61,"href":62},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":64,"href":65},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":67,"href":68},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":70,"href":71},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":73,"children":74},"Membership",[75,78,81],{"text":76,"href":77},"Our Members","\u002Fmembership\u002F",{"text":79,"href":80},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":82,"href":83},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":85,"text":86,"children":87},"cra","Cyber Resilience Act",[88,91,95,98],{"text":89,"href":90},"About CRA","\u002Fcra\u002Fabout",{"text":92,"href":93,"external":94},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":96,"href":97},"CRA Resources","\u002Fcra\u002Fresources",{"text":99,"href":100,"external":94},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":102,"children":103},"Resources",[104,107,110,113,116,119,122],{"text":105,"href":106},"Events","\u002Fevents\u002F",{"text":108,"href":109},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":111,"href":112},"Blog","\u002Fblog\u002F",{"text":114,"href":115},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":117,"href":118},"Learning Hub","\u002Ftraining\u002F",{"text":120,"href":121},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":123,"href":124,"external":94},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":129,"backToTopText":130,"callToAction":9,"colorMode":9,"copyright":131,"description":9,"extension":11,"manageCookiesText":132,"meta":133,"sections":134,"socialsHeading":187,"stem":188,"__hash__":189},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[135,152,171],{"id":136,"heading":137,"links":138},"footer-eclipse-foundation","Eclipse Foundation",[139,141,144,147,149],{"text":55,"href":140},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":142,"href":143},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":145,"href":146},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":73,"href":148},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":150,"href":151},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":153,"heading":154,"showManageCookies":94,"links":155},"footer-legal","Legal",[156,159,162,165,168],{"text":157,"href":158},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":160,"href":161},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":163,"href":164},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":166,"href":167},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":169,"href":170},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":172,"heading":173,"links":174},"footer-more","More",[175,178,181,184],{"text":176,"href":177},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":179,"href":180},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":182,"href":183},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":185,"href":186},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","hysVbukIYO6sJMzwzramCt7SpkkTNrrGCAP94Td1geE",{"id":191,"title":192,"body":193,"category":224,"description":9,"extension":225,"heading":226,"links":227,"meta":231,"navigation":94,"number":232,"owner":233,"path":234,"seo":235,"status":236,"stem":237,"__hash__":238},"deliverables\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra.md","White paper on open source software stewards and CRA",{"type":194,"value":195,"toc":220},"minimark",[196,200,203,206,214],[197,198,199],"p",{},"The Cyber Resilience Act (CRA) defines a new category of legal persons: Open Source Stewards (hereafter “Stewards”). It also defines obligations\nfor them that differ from those applicable to other actors, such as manufacturers.",[197,201,202],{},"This whitepaper aims to elaborate on the obligations, restrictions, and penalties that will be imposed on Stewards.",[197,204,205],{},"Based on an analysis of the legal text, we outline the required elements, documentation, and procedures that Stewards must implement to fulfill their obligations.",[197,207,208,209,213],{},"The goal is ",[210,211,212],"strong",{},"not"," to provide a definition of, or guidance on, who is or is not a Steward for a Product with Digital Elements qualifying as Open Source Software.",[197,215,216,217,219],{},"This document does ",[210,218,212],{}," constitute legal guidance; it reflects the current understanding of the CRA held by its contributors.",{"title":221,"searchDepth":222,"depth":222,"links":223},"",2,[],"White papers","md","Open Source Software Stewards and CRA Whitepaper",[228],{"text":229,"href":230},"Download the PDF","\u002Ffiles\u002Fcra\u002Fresources\u002Fwhite-paper-on-open-source-software-stewards-and-cra.pdf",{},"3.5","Vulnerability Handling Task Force","\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra",{"title":192},"🚀 Shipped","cra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra","bA0hCaoMBPIZL7SoDT85ae46JGSFi5ayFv1kuxFXUyo",[240,243],{"path":241,"title":242,"visibility":9},"\u002Fcra","Understanding the EU Cyber Resilience Act and Its Impact on Open Source",{"path":97,"title":96,"visibility":9},[245,250,255],{"path":246,"title":247,"number":248,"status":249},"\u002Fcra\u002Fresources\u002Fd3-1-white-paper-on-sboms","White paper on SBOMs","3.1","🗺️ Planned",{"path":251,"title":252,"number":253,"status":254},"\u002Fcra\u002Fresources\u002Fd3-2-white-paper-on-due-diligence-obligation-of-manufacturers","White paper on due diligence obligation of manufacturers","3.2","✍️ Work in Progress",{"path":256,"title":257,"number":258,"status":249},"\u002Fcra\u002Fresources\u002Fd3-3-white-paper-on-security-attestations","White paper on security attestations","3.3",[260,263,266],{"to":261,"label":262},"\u002F","ORC",{"to":264,"label":265},"\u002Fcra\u002F","CRA",{"to":267,"label":96},"\u002Fcra\u002Fresources\u002F",1794412153316]