What the EU’s new software legislation (Cyber Resilience Act) means for developers

Despite their great value to society, open source projects are frequently understaffed and underresourced. That’s why GitHub has been advocating for a stronger focus on supporting, rather than regulating, open source projects.

What nice sentiments. Perhaps you, GitHub, could start by insisting that Microsoft cease the un-attributed, non-consensual shovelling of open-source software into their LLM training maw. And turn off the LLM that they're attempting to unilaterally sell based on all that uncompensated labour.

Or is your platitude of “supporting open source projects” fall short of actually respecting what we want and need?