CRA – The First Horizontal Regulation of the Software Industry (with Mike Milinkovich)

In this conversation, Rachel Stephens (Research Director at RedMonk) and Mike Milinkovich (Executive Director, Eclipse Foundation) discuss the EU Cyber Resilience Act (CRA). Mike explains the law, its implications for the software industry – particularly open source software – and the responsibilities it places on manufacturers. This episode covers:

• the evolution of the CRA from a “near-death experience for open source” in its initial drafts to a “workable piece of legislation”
• understanding the responsibilities the legislation places upon different industry roles
• exploring the CRA's potential impacts on open source communities
• discussing how to get prepared

This discussion is emphatically important if you sell software into a European market. Come listen to Mike to help understand the new legal obligations that come with the CRA.

Show notes: https://redmonk.com/blog/2025/10/8/rmc-cra-ecplisefoundation