Post

I'm just going to say it, I really don't like the "how do we make OSS sustainable" framing. OSS is already sustainable. The only thing not sustainable is users expecting a free lunch (support, LTS, bug fixes, ...). As a user, you are responsible for your OSS usage. Fork/patch if you need to.

This is not to say we shouldn't explore ways to crowd source bug fixing, support, etc... but that is all bonus and not a requirement to be "sustainable".

That said, based on my quick read of the information out there on the Cyber Resilience Act, I think it might end up being decent. It clearly places the onus on the companies building products with OSS.

0 reposts7 likes

No replies yet.