EU cyber laws ‘will’ make FOSS devs liable

European lawmakers want all software makers to be liable for security holes. Even non-profit or hobbyist developers could be sued for negligence.

The EU’s draft Cyber Resilience Act (CRA) and Product Liability Act (PLA) would “create a chilling effect” and do “irreparable harm,” according to the organization behind Python and PyPI. When replicated across other parts of the software supply chain ecosystem, we risk the whole house of cards crashing down — as devs race to limit their liability.

The …

act cyber cyber resilience cyber resilience act developers down ecosystem foss house lawmakers laws liability major non non-profit organization pla product profit pypi python resilience risk security security holes software software supply chain supply supply chain