GitHub · Where software is built

Labels Milestones New issue

The CRA doesn't seem to explicitly include free(!) app store listings as not being bringing to market, which seems unintended

#252

· ell1e opened

on Jul 2, 2025

What is a conformity assessment? What is an EU declaration of conformity? How do I get one?

#247

· jmaris opened

on Jun 25, 2025

Can a Manufacturer rely on agreement with business users to charge money for the security updates if this is a service provided on top of the entirely free PDE available - as per Annex I Part II (8)?

#238

· rozhukov opened

on May 16, 2025

Does including open source component falling on important category (Annex III) make my product inherit that category

Critical and Important Products

#237

· timop62 opened

on May 16, 2025

Can I be an OS Steward and a Manufacturer at the same time for different projects?

#233

· rozhukov opened

on May 6, 2025

What happens when manufactuerers don't comply - answer

orcwg/cra-hub

#232

· jmaris opened

on May 6, 2025

Guidance: Potential for a loophole in Annex I, Part I, Point 2(c)

#222

· UsersHaveNames opened

on May 2, 2025

When a manufacturer correct a vulnerability in a version of software, does he have to withdraw the old vulnerable version from the market?

#207

· Viko-legal opened

on Apr 11, 2025

I am building an embedded O/S with Yocto and selling a product with it. Is the product an "important product"?

Critical and Important Products

#193

· oej opened

on Apr 7, 2025

Who is obliged to report exploited vulnerabilities?

#185

· oej opened

on Mar 31, 2025

Support Period for continuously updated products

#178

· lfrancke opened

on Mar 20, 2025

My company is already subject to DORA, should I worry about the CRA?

#146

· tobie opened

on Feb 22, 2025