That liability is a part of the proposed revisions to the Product Liability Directive, which is also covered by this letter. The Cyber Resilience Act would pot

That liability is a part of the proposed revisions to the Product Liability Directive, which is also covered by this letter. The Cyber Resilience Act would potentially require open source developers to follow a compliance regimen, similar to any EU manufacturer. The concern is that this would place too high of a regulatory burden on item source projects. The act's view of the software world is less nuanced than that of the open source community, making a distinction only between commercial and non-commercial. I don't fully understand the implications for open source projects, but it also seems like the legislators do not understand the implications for the EU. There is legitimate concern that the EU could be cut off from open source repositories as the entities running them seek to avoid liability.