3 ms·

What the EU's new software legislation means for developers

• raxxorraxor 2y ago
  > Learn what it means for your open source projects The awesome thing is that it means nothing for most software, not only open source. Microsoft is usually big on compliance, not the least because they offer products to manage said compliance, perhaps that explains the positive article GitHub felt it wanted to write. I believe the author is/was also a member of parliament in the EU. The law certainly tries to enforce minimal security for IoT devices, which is a fine goal. Although sometimes security and interoperability are in conflict, just as security and access are in conflict in some cases. Even lawmakers need to deal with reality. The reality today is that there isn't any certification for open source projects and with that no guarantees. People using them have the responsibility to ensure security. I think that is awesome because that means open source projects are not dependent on the whims of any third party, be that regulators or some named authority giving developers neat security badges. The tone of the article suggest that GitHub might smell a product. I smell that open source projects should be wary of that. Why does it matter if the regulation applies to my software at all? Is there illegal software? > the recipient of that assistance may qualify as an open source software steward. I think regulatory compliance doesn't work for open source in any way. If you give a hand, they will take your arm and the arms of your family too.