The European CRA was signed off in December 2024 and will be in full effect in December 2027. The CRA brings in challenges and opportunities for the open-source firmware ecosystem that we want to discuss.

First we will give an overview about the timeline of the European CRA - the CRA itself comes into effect into three phases. Each phase brings certain responsibilities that also open-source projects should follow. The CRA also introduces specific terms i.e. open-source stewards. We will dive into the responsibilities of those.

In the second half of the talk we will look into the opportunities that the CRA brings. CRA could fuel open-source adoption if handled correctly. We will also lay out where the Open-Source Firmware Foundation can support open-source firmware projects to achieve compliance.