The EU’s Cyber Resilience Act (CRA) introduces new compliance demands that will reshape how software is built, distributed, and maintained—especially in the worlds of open source and IoT.

In this panel, policy experts, open source maintainers, industry representatives, and community stewards come together for a candid discussion on how the CRA is already impacting development practices, supply chain expectations, and collaboration.

We'll explore:

• What agility looks like under the CRA

• How roles and responsibilities are shifting

• Practical tensions between innovation and regulation—and how to resolve them

• Whether the CRA will ultimately strengthen or strain open source